Pricing

How is customer data protected?

We collect and store as little information as possible from the customer, but of the data we do collect this is how it is protected:

• Username - The username is hashed with SHA256
• Password - The password is hashed with SHA256

Billing information is only stored within the third party payment platform, which is protected with hardware phish-resistant security keys.

Note: We do not collect any information from simulation packages run on customer systems.

Do the simulations contain malware?

The simulations replicate malicious behaviors but are not malicious in of themselves. For example, if simulating keylogging behavior in a package, a keylogging mechanism is installed but all keyboard logs collected are immediately scrambled and rendered useless.

Additionally, if malicious files are used in simulations, they are rendered benign and never executed, so that they are never a threat to the system, their sole purpose is to test anti-malware systems and to replicate tools and tactics of a real threat actor.

All artifacts created during the simulation are removed at the completion of the test.

How are the packages licensed?

Each user downloading and running the simulations will need a premium subscription.

Additionally, because packages are stand-alone and do not connect back to Digital Osprey, a license key is generated for each package and can be used to unlock the package for seven days before another key will need to be generated.

Packages may only be used for the organization which purchased the subscription.

Are refunds available?

Refunds are available if no premium simulations have been downloaded and the request was made within seven days after purchasing a subscription.

What is a Simulation package?

A Simulation package is a self-contained console executable that runs a specified simulation scenario on an endpoint, emulating threats and behaviors to help network defenders train for and defend against cyber-attacks.

During the execution of the package, progress updates are shown in realtime and at the conclusion of the simulation, results are shown within the console window.