Pricing

How is customer data protected?

We collect and store as little information as possible from the customer, but of the data we do collect this is how it is protected:

• Authentication data - Securely stored within AWS Cognito service
• Email - Securely stored within AWS Cognito, only used for support (no marketing)
• Billing address and email information is stored within a third party payment platform, which is protected with hardware phish-resistant security keys.

Additionally, we do not collect information or results from simulation packages run on customer systems, except for license information, to authenticate requests for additional simulation components.

Do the simulations contain malware?

The simulations replicate malicious behaviors but are not malicious in of themselves. Simulation capabilities are documented for the customer to review.

Additionally, if malicious files are used in a simulation, they are rendered benign and never executed, so that they are never a threat to the system, their sole purpose is to test anti-malware systems and to replicate tools of a real threat actor.

All artifacts created during the simulation are removed at the completion of the test.

How are the packages licensed?

Each user downloading and running the simulation will need a free or premium license.

Additionally, a package license key is needed for each package (available on the download modal) and can be used to unlock the package for seven days before another key will need to be generated.

Packages may only be used for the organization which purchased the subscription.

Are refunds available?

Refunds are available if no premium packages have been downloaded and the request was made within seven days after purchasing a premium subscription.

What is a simulation package?

A simulation package is a self-contained executable that runs a specified scenario on an endpoint, simulating threats and their behaviors to help network defenders train for and defend against cyber-attacks.

During the execution of the package, details of the test are shown in the GUI as well as logged to the Windows Application event log, for processing by a SIEM or other monitoring system.