Pricing
Platform Fee #
Starting at $715/month. Annual commitment.
Includes: dedicated server, storage, maintenance, updates, all core log sources, 365-day retention, self-service portal, Slack integration.
Per-User Pricing #
Scales with your client base:
| Users | Per user/month |
|---|---|
| Up to 50 | $14 |
| 150 | $7 |
| 500 | $4 |
| 1,000+ | $3 |
AI Costs — Bring Your Own Key #
You create your own AI provider account and provide API keys. AI costs are billed directly to you by the provider — we never mark up AI costs.
You control your own budget caps, rate limits, and usage alerts. Full cost visibility in the self-service portal: every triage run, every investigation, every conversation — with per-call breakdown.
Routine triage runs automatically on the fastest model. You choose the investigation tier. Change tiers anytime from the portal — immediate effect, no contract change.
| Tier | Best For | Est. Monthly AI Cost |
|---|---|---|
| Budget | Cost-sensitive MSPs, routine monitoring | ~$130–540 |
| Standard | Most MSPs — client-facing reports | ~$400–1,040 |
| Premium | High-value clients, active threat environments | ~$630–3,300 |
We recommend Standard for most MSPs. AI cost estimates based on production data (April 2026).
Total Cost by MSP Size #
What you actually pay — platform + AI combined, compared to alternatives.
| Solution | Small MSP | Mid MSP | Large MSP |
|---|---|---|---|
| ~50 users, ~5 clients | ~500 users, ~15 clients | ~2,000 users, ~50 clients | |
| Hal (total) | ~$1,750/mo | ~$3,700/mo | ~$10,000/mo |
| — Platform | $1,415 | $2,715 | $6,715 |
| — AI (BYOK, Premium) | ~$330 | ~$1,000 | ~$3,300 |
| Huntress (EDR + ITDR) | $1,000 | $8,000 | $15,000 |
| Arctic Wolf | $3,700 | $8,300 | $16,700 |
| Junior Analyst | $8,300 | $8,300 | $16,600 |
| 24/7 SOC (outsourced) | $10,000 | $10,000 | $30,000 |
Hal AI costs based on production billing (~$1,200/mo for 35 tenants on Premium tier). Competitor pricing from public list prices and industry estimates (April 2026).
What’s included vs. not #
| Capability | Hal | Huntress MDR | Arctic Wolf | Junior Analyst |
|---|---|---|---|---|
| M365 audit logs | Yes | Add-on (ITDR) | Yes | If configured |
| Google Workspace | Yes | No | Partial | If configured |
| Entra ID sign-in + risk | Yes | Add-on (ITDR) | Yes | If configured |
| Router/firewall logs | Yes | No | Partial | If configured |
| Windows server logs | Yes | Via EDR agent | Partial | If configured |
| Cross-source correlation | Automatic (AI) | No | Limited | Manual |
| Searchable retention | 365 days | 30–90 days | 90 days | Depends on SIEM |
| Investigation reports | Seconds (signed PDF) | Incident summary | Monthly | Manual (30–90 min) |
| 24/7 coverage | Yes (automated) | Yes (SOC) | Yes (SOC) | No (business hours) |
Pricing sources #
- Huntress: Public list prices — EDR $8.99/endpoint/mo, ITDR $4.80/identity/mo (huntress.com/pricing, April 2026)
- Arctic Wolf: Public sector list $200/user/year; commercial negotiated estimates $8–18/endpoint/mo (public sector price list, Feb 2025; industry estimates)
- Junior Analyst: ~$100K/year fully loaded (salary + benefits + tools). 48% report exhaustion, 15–25% annual turnover (ISC2 Cybersecurity Workforce Study, 2024)
- 24/7 SOC: Outsourced entry-level ~$120K–360K/year; in-house minimum viable (5–6 FTEs) ~$500K–750K/year
- Hal AI: Bitstream production billing, Anthropic console, Mar–Apr 2026
Add-On Integrations #
| Integration | Description |
|---|---|
| NinjaOne RMM | Real-time device lookup, patches, software, alerts |
| Hudu Documentation | Company contacts, assets, KB articles, network info |
Pricing available on request.
Setup Fee #
$2,000–$3,000 one-time — covers provisioning, tenant onboarding, and Slack workspace integration.
Requirements #
- Slack workspace — Hal posts all automated alerts and notifications to Slack
- AI provider API key — you provide your own key for full cost transparency
Real-World Example: Same Investigation, Three Tiers #
A credential attack against a financial services employee, analyzed at each tier:
| Budget | Standard | Premium | |
|---|---|---|---|
| Cost | $0.15 | $1.11 | $1.66 |
| Report length | 3 pages | 5 pages | 4 pages |
| Accuracy | Overstated risk | Deepest findings | Most precise judgment |
| Client-ready | No — needs editing | Yes | Yes |
Standard delivers client-ready quality at 67% of Premium cost.
There are no articles to list here yet.