Pricing.

Three different things are sold here and they price differently. Monitoring is a setup fee plus a retainer, because the work continues. SIEM content is a retainer or a day rate, because it is your platform and your process. Audits are a fixed fee for a fixed scope.

On-chain monitoring

Setup, then a retainer.

The setup fee buys the invariant design and the implementation. The retainer covers keeping it correct as the protocol changes, which is the part that decays if nobody owns it.

Tier	Scope	Response commitment	Price
Assessment Five invariants on one contract, plus one gap	1 contract	Reply in 3 working days	Freeno card
Setup Full invariant set designed, implemented and backtested against your history	Up to 3 contracts	2–3 weeks to deliver	$1,800–3,500one-off
Maintained Setup plus ongoing tuning, threshold review, and new invariants as the protocol changes	Rolling	Best-effort, working hours IST	From $600/moafter setup
Maintained + window As above, with a contracted response window written into the agreement	Rolling	4 working hours, 09:00–19:00 IST, Mon–Fri	From $1,100/moafter setup

On response commitments, stated plainly

This is one practitioner. The response windows above are working-hours windows in IST and they are what we will sign. There is no overnight desk and no weekend rotation, so if your threat model needs continuous coverage you need a team, and we will say so rather than sell you a tier that implies one.

SIEM detection engineering

Retainer, or a day rate.

Priced by techniques covered per month rather than by rule count. Per-rule pricing rewards writing many bad rules, which is the problem the engagement exists to fix.

Engagement	Scope	Cadence	Price
Coverage assessment Existing detections mapped to ATT&CK, gaps identified, rules that have never produced a true positive flagged	One environment	One-off	$900–1,800fixed
Content retainer Monthly detection drops with validation, tuning and documentation. Maintenance of everything previously delivered included	Agreed techniques/month	Monthly	From $2,400/mo3-month minimum
Contract day rate Working inside your platform, your process and your ticket queue. For MSSPs and partners who need capacity rather than a vendor	Your backlog	Per day	$480/dayremote, IST hours
Hourly Short pieces of work: a rule review, a tuning pass, a second opinion on a detection design	Ad hoc	Per hour	$75/hr10-hour blocks

Audits.

Fixed fee, fixed scope, published pricing. Most usefully now, an audit is how the invariant set gets written in the first place.

Solidity · EVM

Full audit pricing

Single contract through to multi-contract protocol review, with the ranges published rather than quoted after a call. Every paid tier includes one free re-review after your fixes land.

Audit price list Process

How we actually review

What happens between you sending a repo and a report arriving, including what we deliberately do not claim the review covers.

Methodology

Five invariants, no card.

The cheapest way to find out whether any of the above is worth paying for is to send a contract address and read what comes back.

Free monitoring assessment Ask about SIEM work

Why the ranges

Ranges reflect complexity, not negotiation. A three-contract lending protocol with a custom oracle is more invariant design than a single vault with a Chainlink feed, and pretending otherwise produces either a bad quote or a bad engagement.

You get a fixed number before anything starts. It does not move afterwards unless the scope does, in writing.