Priced by how much we run.
One platform, capability modules you can buy on their own or as a package, and three operating models. Pick what you need, choose per module how much we operate, and move between models at any renewal.
Same platform. You choose who runs it.
Every module is available in all three models, and you decide per module. From prices are the lowest available: CHF per user and month on Self-serve, at the 5,000 to 10,000 user band. Fewer users, AIOps and Mission Control cost more.
Self-serve Platform
- Full SASE and SSE platform
- Public API and documentation
- Self-onboarding
- Portal, docs and standard support
AIOps
- Everything in Self-serve Platform
- AI Copilot and Agents (Lucy)
- Investigations and remediation, 24/7
- HITL (Human-in-the-loop) on critical calls
Mission Control
- Everything in AIOps
- Level-3 engineers, 24/7
- Named TAM (Technical Account Manager)
- Consulting and optimization
Each model includes everything in the model before it. Every module includes AI-powered monitoring, analytics and anomaly detection.
Buy exactly what you need.
Six capability modules. Combine any of them, in any operating model. From prices are the lowest available: Self-serve, at the 5,000 to 10,000 user band.
Network Connect
SD-WAN and LAN firewall, bandwidth control, path selection, application optimization, T2EE.
Secure Access
Secure web gateway, ZTNA, CASB, Firewall, transparent proxy.
Advanced Security
GenAI security, emerging-threat protection, home for future advanced capabilities.
Threat Defense
Network detection and response, ATP, cloud sandbox, network analytics.
Email Security
Secure email gateway, advanced email security, spam engines.
Secure Access OT
OT firewall, industrial segmentation, OT visibility. Priced per site, not per user.
Secure Access OT is priced per site and month and is not subject to the volume discount. All other modules are per user and month. Fewer than 5,000 users, AIOps and Mission Control all increase the per-user price, see the operating models above.
Or start from an outcome.
Pre-configured combinations. Same modules, same prices, one decision instead of six. From prices are the lowest available: Self-serve, at the 5,000 to 10,000 user band.
Complete Platform
All five user-based modules, with a 15 percent platform advantage included.
Reduce security operations workload
Take the operational burden off your IT and security teams.
Standardize security controls
The same controls for every user, location and application.
Reduce attack surface
Shrink your exposure and close security gaps.
Improve application experience
Fast, reliable applications for every employee, everywhere.
Accelerate SASE transformation
Move from legacy architecture to SASE on a defined timeline.
Something else? Combine any modules and operating models. Talk to us and we build the package around your architecture.
Sites, connectivity and hardware.
Priced per site rather than per user, because that is how they scale.
| Item | What it covers | Pricing metric |
|---|---|---|
| Last-mile connectivity | Managed internet underlay for your sites, carrier-agnostic | Per site and bandwidth |
| Edge hardware | SASE edge appliances, four sizes plus a server option, RMA included | Per appliance and month |
| LAN Operations | Operation of your local network infrastructure | Per site and month |
| External BGP | Custom routing integration with your carriers | Per site and month |
| Partner Connect | Secure third-party and B2B connectivity | CHF 200 per partner and month |
| Dedicated SSE IP | Dedicated egress IP addresses per SSE PoP | CHF 2,000 per PoP and month |
How to read these prices.
What "from" means
From prices are the lowest available: the Self-serve model at 5,000 to 10,000 users, with the full 25 percent volume discount. Fewer users, AIOps and Mission Control, and the number of sites or appliances, all increase the price.
Minimum engagement
CHF 100,000 annual contract value, across any mix of modules, foundation and services. Volume discounts apply from 1,000 users, up to 25 percent at 5,000 to 10,000 users.
Indicative, not an offer
All figures are indicative and do not replace a quote. Final pricing depends on scope, users and sites. Foundation and expert services are not included in module prices.
The detailed price calculator runs with your team.
Your Open Systems account team or channel partner builds the exact figure with you, against your users, sites and operating model.
Transparent by design.
One contract across every tier and module. What you see here is how we price: no setup surprises, no lock-in penalties.
One contract, all tiers
Self-serve, AIOps and Mission Control sit on a single agreement. Move a module between operating models at renewal without renegotiating the whole contract.
Priced per module
Buy exactly the capabilities you need and add more as you grow. Foundation and expert services are listed separately, never buried in a vague platform fee.
No lock-in
Public API and Terraform access on every tier, hardware RMA included. No console lock-in, no exit toll.
Pricing questions, answered straight.
The things a price list never says out loud, said here.