T1 Solo · T2 Department · T3 MOD · 30-day pilot run-rate · 11 cost lines · 5 cost-risk bands
DEFONEOS pricing is per-tier run-rate: T1 for solo operators, T2 for departmental pilots, T3 for UK MOD live deployments. There are no per-MCP licence fees, no per-call charges, no per-seat fees, and no hyperscaler egress cliffs. The DEFONEOS composable substrate is OSS-licensed (Apache-2.0 / MIT / OGL-3.0 / CC-BY-4.0) and the sovereign cockpit is licensed free to UK public-service buyers.
Every pound traces to a cost line. There is no vendor markup on compute (you buy the VM yourself), no markup on storage (you choose where the bytes live), and no markup on data egress (there is none — sovereign ferry is licensed free). The DEFONEOS-Nexus layer (33-agent BFT council + SIGIL ledger + per-MCP SBOM publisher + per-MCP pen-test summary + per-MCP buyer-DD pack) is operated by the buyer — we host the SIGIL public witness set; you anchor the SIGIL.
This open-model arithmetic is auditable. Every line below ties to a specific tool, deployment step, and unit cost. The buyer's TCO calculator (runnable in <60s on a fresh VM) is at the bottom of this page.
| Tier | Profile | Scope | Duration | 30-day TCO | vs US-cloud |
|---|---|---|---|---|---|
| T1 Solo | 1 SC-cleared operator · single-region deployment | 1 VPU · 256 GB storage · 5 MCPs · 5 evidence artefacts | 30 days | £2,840 | −28.1% vs £3,950 |
| T2 Department | 3-7 departmental users · BFT-gated SIGIL · multi-region failover | 4 VPU · 1 TB storage · 12 MCPs · 11 evidence artefacts | 30 days | £9,150 | −38.4% vs £14,860 |
| T3 MOD | 15+ users · full BFT 33-agent defence council · sovereign air-gap + ferry ingest | 16 VPU · 16 TB storage · all 30 MCPs · 38 evidence artefacts | 30 days | £28,400 | −41.9% vs £48,920 |
Comparative US-cloud baselines (Cyera Open Compliance · AWS GovCloud · Azure Gov Cloud · Crowdstrike Falcon · Wiz) per UK Crown Commercial Service benchmarks 2026-Q2 for comparable feature set including: SBOM publishing, BFT audit log, SIGIL signature chain, pen-test summary, evidence-freshness probes, JML lifecycle. Further detail at /defoneos-pilot-cost-benefit-model.html (16449b).
| # | Line | Unit | Quantity | Line cost (£) |
|---|---|---|---|---|
| L1 | Sovereign compute (Hetzner / OVHcloud / VPS.NET UK) | vCPU·month | 1 | £180 |
| L2 | Sovereign block storage (encrypted at rest, UK-London) | GB·month | 256 | £120 |
| L3 | Sovereign object storage (UK-Wales backup region) | GB·month | 256 (cold) | £60 |
| L4 | JML user management (operator seat, SSO via Keycloak) | seat·month | 1 | £80 |
| L5 | 5 MCP licences (Apache-2.0 / MIT / OGL-3.0, free) | 0 | 5 | £0 |
| L6 | 5 evidence artefacts (BFT council receipts, SIGIL chain, SBOM index, pen-test summary, disclosure policy) | artefact·month | 5 | £120 |
| L7 | Pen-test cycle subscription (quarterly refresh, 30-day pilot = 1/12) | cycle·month | 1/12 | £420 |
| L8 | Disclosure coordination (PGP-signed responsible-publication cycle) | month | 1 | £150 |
| L9 | SIGIL ledger anchor (BLAKE3 + Ed25519 public witness set) | month | 1 | £120 |
| L10 | Sovereign ferry ingest (operated by buyer; signed ingest receipts) | cycle | 8 | £0 (DIY) |
| L11 | One-time onboarding (DEFONEOS substrate install + first-deploy) | one-off / 12 | 1/12 | £1,590 |
| T1 TOTAL | £2,840 | |||
| # | Line | Unit | Quantity | Line cost (£) |
|---|---|---|---|---|
| L1 | Sovereign compute (Hetzner / OVHcloud) | vCPU·month | 4 | £720 |
| L2 | Sovereign block storage (encrypted) | GB·month | 1,024 | £480 |
| L3 | Sovereign object storage | GB·month | 1,024 | £240 |
| L4 | JML user management (3-7 seats) | seat·month | 5 | £400 |
| L5 | 12 MCP licences (free OSS) | 0 | 12 | £0 |
| L6 | 11 evidence artefacts (BFT receipts, SIGIL, SBOM, pen-test, DD) | artefact·month | 11 | £330 |
| L7 | Pen-test cycle subscription | cycle·month | 1/12 | £1,250 |
| L8 | Disclosure coordination | month | 1 | £300 |
| L9 | SIGIL ledger anchor | month | 1 | £260 |
| L10 | Sovereign ferry ingest (DIY) | cycle | 30 | £0 (DIY) |
| L11 | One-time onboarding (substrate install + multi-region failover) | one-off / 12 | 1/12 | £5,170 |
| T2 TOTAL | £9,150 | |||
| # | Line | Unit | Quantity | Line cost (£) |
|---|---|---|---|---|
| L1 | Sovereign compute (Hetzner / OVHcloud, dedicated-to-region) | vCPU·month | 16 | £2,880 |
| L2 | Sovereign block storage (UK-London encrypted, FIPS-validated) | GB·month | 16,384 | £4,400 |
| L3 | Sovereign object storage (multi-region cold + warm tier) | GB·month | 16,384 | £1,800 |
| L4 | JML user management (15+ seats, R5-witness endorsement) | seat·month | 17 | £1,360 |
| L5 | 30 MCP licences (free OSS) | 0 | 30 | £0 |
| L6 | 38 evidence artefacts (all live) | artefact·month | 38 | £1,140 |
| L7 | Pen-test cycle subscription (PT-2026-Q3-C2 + Q4) | cycle·month | 1/12 (2 cycles) | £4,200 |
| L8 | Disclosure coordination (coordinated with NCSC CiSP) | month | 1 | £600 |
| L9 | SIGIL ledger anchor (BFT 33-agent council, owner-seat, R5-witness) | month | 1 | £720 |
| L10 | Sovereign ferry ingest (air-gap → CPU-air-gap ferry) | cycle | 120 | £0 (DIY) |
| L11 | One-time onboarding (substrate install + air-gap + ferry + BFT council voting) | one-off / 12 | 1/12 | £11,300 |
| T3 TOTAL | £28,400 | |||
| Band | Trigger | T1 impact (90-day) | T2 impact (90-day) | T3 impact (90-day) |
|---|---|---|---|---|
| R1 Low | Pen-test cycle repeats 0-1 anomaly per quarter | + £0 | + £0 | + £0 |
| R2 Nominal | Pen-test cycle returns 1-2 MED findings | + £140 | + £420 | + £1,260 |
| R3 Elevated | SIGIL-anchored emergency BFT motion; one ferry-cycle delay | + £360 | + £1,100 | + £3,400 |
| R4 Red-line | Pen-test cycle returns 1 HIGH finding (remediation cycle) | + £820 | + £2,400 | + £7,500 |
| R5 Critical | Sovereign ferry compromise; full substrate rotation | + £2,400 | + £7,200 | + £22,400 |
Risk bands priced against 90-day tail-risk scenarios per UK NCSC CISA-tabulated threat curves. R5 Critical assumes a single-sovereign-ferry compromise triggering substrate rotation — full price recovery follows DEFONEOS-REDLINE-MOTION-27/33 process; see /defoneos-redline-motions-history.html.
| Dimension | T1 Solo | T2 Dept | T3 MOD |
|---|---|---|---|
| SC-cleared ops | 1 (R5-witness) | 3-7 (R2+R4) | 15+ (R1+R2+R3+R4+R5) |
| BFT defence council | 33/33 watching (read-only) | 33/33 with R3-witness | 33/33 with R5-vote + R1 owner-cosign |
| Red-line motion | — | 27/33 supermajority | 27/33 supermajority |
| SIGIL anchor | Public witness set | Public witness set + R3-witness | Public witness set + BFT-anchored + R1 owner cosign |
| SBOM coverage | 1 MCP × 25-40 components | 12 MCPs × 250-360 components | 30 MCPs × 847 components |
| Pen-test cycle | Quarterly (1 cycle / 90d) | Quarterly (1 cycle / 90d) | Quarterly (2 cycles / 90d) — PT-2026-Q3-C2 + Q4 |
| Audit retention | 30 days | 1 year | 7 years (JSP 440) |
| Compliance scope | NCSC 1 criterion | NCSC 4 criteria | NCSC full · ISO 27001 · ISO 42001 · JSP 936 · JSP 440 |
| UK region | Single region (UK-London) | Multi-region failover (3 regions) | UK + Scotland + Wales + NI · sovereign-air-gap + ferry |
The price points above are open-model arithmetic: every line ties to a real tool, a real deployment step, and a real unit cost. The buyer's TCO can be re-derived on a fresh calculator. No black-box contracts, no per-call charges, no hidden egress cliffs. The DEFONEOS-Nexus layer is OSS-licensed. The sovereign compute substrate (Hetzner / OVHcloud / VPS.NET UK) is buyable from any UK address.
For the canonical cost-benefit model and US-cloud stack comparison see /defoneos-pilot-cost-benefit-model.html (16449b).
# Run on a fresh VM (Linux 4.x, Python 3.11+)
python3 - <<'PY'
tiers = {
'T1': 2840, 'T2': 9150, 'T3': 28400
}
us_cloud = {
'T1': 3950, 'T2': 14860, 'T3': 48920
}
band = {
'R1': 0.0, 'R2': 0.05, 'R3': 0.13, 'R4': 0.29, 'R5': 0.84
}
tier = input('T (1-3)? ')
tail = input('R (1-5)? ')
n = int(input('90-day cycles? '))
own = tiers[f'T{tier}'] * 3
us = us_cloud[f'T{tier}'] * 3
risk = own * band[f'R{tail}'] * n
print(f'DefoneOS own 90d: GBP {own:,.0f}')
print(f'US-cloud 90d: GBP {us:,.0f} ({100*(1-own/us):.1f}% delta)')
print(f'90d tail risk: GBP {risk:,.0f}')
PY
Calculator is illustrative only — actual buyer TCO depends on procurement vehicle and confirmable buyer-specific scope. The full stack is bookable via the G-Cloud 14 catalogue entry (in queue).