Pricing
Per appliance. Unlimited data. Pick your tier.
Three products, eight tiers, one pricing model. Every appliance includes unlimited data rates. Government, nonprofit, and education save 15%.
At a glance
| Per appliance, per annum | Lite | Pro | Max |
|---|---|---|---|
| Conductor | $15,000 | $40,000 | $60,000 |
| Reporter | $20,000 | $50,000 | — |
| Analytics | $25,000 | $75,000 | $120,000 |
All tiers include unlimited data rates. Reporter and Analytics include a Conductor at no extra cost — see Bundles.
Conductor
Per appliance. Per year. Unlimited data. No GB charges.
| Per appliance, per annum | Lite | Pro Recommended | Max |
|---|---|---|---|
| USD | $15,000 | $40,000 | $60,000 |
| Bundled Conductor | N/A | N/A | N/A |
| Core integrations (M365, firewalls, Linux & Windows servers) | |||
| ProtoGraph deduplication | |||
| Unlimited data rates | |||
| STIX enrichment | — | ||
| Full integration support (30+ integrations) | — | ||
| Custom integration support | — | — |
Lite
$15,000
per appliance / year
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- — STIX enrichment
- — Full integration support (30+ integrations)
- — Custom integration support
Pro
$40,000
per appliance / year
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- STIX enrichment
- Full integration support (30+ integrations)
- — Custom integration support
Max
$60,000
per appliance / year
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- STIX enrichment
- Full integration support (30+ integrations)
- Custom integration support
Reporter
Bundled Conductor at no extra cost. Unlimited data rates.
Per appliance. Per year. Unlimited data. No GB charges.
| Per appliance, per annum | Lite | Pro Recommended |
|---|---|---|
| USD | $20,000 | $50,000 |
| Bundled Conductor | Conductor Lite | Conductor Pro |
| Core integrations (M365, firewalls, Linux & Windows servers) | ||
| ProtoGraph deduplication | ||
| Unlimited data rates | ||
| Conductor Lite included | — | |
| Conductor Pro included | — | |
| Full integration support | — | |
| Tool efficiency reporting | ||
| Compliance reporting (CSC8) | ||
| Advanced compliance reporting (12+ frameworks) | — | |
| Advanced compliance auditor | — | |
| Cost & savings report | — | |
| AI summaries (work units & reports) | — |
Lite
$20,000
per appliance / year
Conductor Lite included
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- Conductor Lite included
- — Conductor Pro included
- — Full integration support
- Tool efficiency reporting
- Compliance reporting (CSC8)
- — Advanced compliance reporting (12+ frameworks)
- — Advanced compliance auditor
- — Cost & savings report
- — AI summaries (work units & reports)
Pro
$50,000
per appliance / year
Conductor Pro included
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- — Conductor Lite included
- Conductor Pro included
- Full integration support
- Tool efficiency reporting
- Compliance reporting (CSC8)
- Advanced compliance reporting (12+ frameworks)
- Advanced compliance auditor
- Cost & savings report
- AI summaries (work units & reports)
Analytics
Bundled Conductor at no extra cost. Unlimited data rates.
Per appliance. Per year. Unlimited data. No GB charges.
| Per appliance, per annum | Lite | Pro Recommended | Max |
|---|---|---|---|
| USD | $25,000 | $75,000 | $120,000 |
| Bundled Conductor | Conductor Lite | Conductor Pro | Conductor Pro |
| Core integrations (M365, firewalls, Linux & Windows servers) | |||
| ProtoGraph deduplication | |||
| Unlimited data rates | |||
| STIX enrichment | — | ||
| Conductor Lite included | — | — | |
| Conductor Pro included | — | ||
| Full integration support (except custom) | — | ||
| Custom integration support | — | — | |
| Multi-tenancy | — | — | |
| Signal search | |||
| Incident response | |||
| SOAR playbooks | — | ||
| AI-enabled playbooks | — | — | |
| Tool efficiency reporting | |||
| Compliance reporting (CSC8) | |||
| Advanced compliance reporting (12+ frameworks) | — | ||
| Advanced compliance auditor | — | — | |
| Cost & savings report | — | ||
| AI summaries (work units & reports) | — |
Lite
$25,000
per appliance / year
Conductor Lite included
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- — STIX enrichment
- Conductor Lite included
- — Conductor Pro included
- — Full integration support (except custom)
- — Custom integration support
- — Multi-tenancy
- Signal search
- Incident response
- — SOAR playbooks
- — AI-enabled playbooks
- Tool efficiency reporting
- Compliance reporting (CSC8)
- — Advanced compliance reporting (12+ frameworks)
- — Advanced compliance auditor
- — Cost & savings report
- — AI summaries (work units & reports)
Pro
$75,000
per appliance / year
Conductor Pro included
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- STIX enrichment
- — Conductor Lite included
- Conductor Pro included
- Full integration support (except custom)
- — Custom integration support
- — Multi-tenancy
- Signal search
- Incident response
- SOAR playbooks
- — AI-enabled playbooks
- Tool efficiency reporting
- Compliance reporting (CSC8)
- Advanced compliance reporting (12+ frameworks)
- — Advanced compliance auditor
- Cost & savings report
- AI summaries (work units & reports)
Max
$120,000
per appliance / year
Conductor Pro included
- Core integrations (M365, firewalls, Linux & Windows servers)
- ProtoGraph deduplication
- Unlimited data rates
- STIX enrichment
- — Conductor Lite included
- Conductor Pro included
- Full integration support (except custom)
- Custom integration support
- Multi-tenancy
- Signal search
- Incident response
- SOAR playbooks
- AI-enabled playbooks
- Tool efficiency reporting
- Compliance reporting (CSC8)
- Advanced compliance reporting (12+ frameworks)
- Advanced compliance auditor
- Cost & savings report
- AI summaries (work units & reports)
Full feature comparison
Every feature, every tier, every product — side by side.
| Conductor | Reporter | Analytics | ||||||
|---|---|---|---|---|---|---|---|---|
| Lite | Pro | Max | Lite | Pro | Lite | Pro | Max | |
| Pricing | $15,000 | $40,000 | $60,000 | $20,000 | $50,000 | $25,000 | $75,000 | $120,000 |
| Bundled Conductor (no extra cost) | — | — | — | C-Lite | C-Pro | C-Lite | C-Pro | C-Pro |
| Data ingestion and processing | ||||||||
| Core integrations (M365, firewalls, Linux & Windows servers) | ||||||||
| Full integration support (30+) | — | — | — | |||||
| Custom integration support | — | — | — | — | — | — | ||
| ProtoGraph deduplication | ||||||||
| STIX enrichment | — | — | — | — | ||||
| Unlimited data rates | ||||||||
| Security operations | ||||||||
| Signal search | — | — | — | — | — | |||
| Incident response | — | — | — | — | — | |||
| SOAR playbooks | — | — | — | — | — | — | ||
| AI-enabled playbooks | — | — | — | — | — | — | — | |
| Multi-tenancy | — | — | — | — | — | — | — | |
| Reporting and compliance | ||||||||
| Tool efficiency reporting | — | — | — | |||||
| Compliance reporting (CSC8) | — | — | — | |||||
| Advanced compliance reporting (12+ frameworks) | — | — | — | — | — | |||
| Advanced compliance auditor | — | — | — | — | — | — | ||
| Cost & savings report | — | — | — | — | — | |||
| AI summaries (work units & reports) | — | — | — | — | — | |||
| Platform | ||||||||
| Console (centralized management) — free with every deployment | ||||||||
| CyberGrid (threat intel + cross-tenant sync) | — | — | — | — | — | |||
Reporter and Analytics include a Conductor — at no extra cost.
Reporter Lite
$20,000/yr
Conductor Lite
Included
Reporter Pro
$50,000/yr
Conductor Pro
Included
Analytics Lite
$25,000/yr
Conductor Lite
Included
Analytics Pro
$75,000/yr
Conductor Pro
Included
Analytics Max
$120,000/yr
Conductor Pro
Included
If you only need data ingestion, buy Conductor on its own. If you need reporting or full security operations, the right Reporter or Analytics tier comes with the matching Conductor in the box.
Included free
Console: one pane of glass for every WitFoo appliance.
Centrally manage, monitor, and update every Conductor, Reporter, and Analytics appliance from a single lightweight container. Recommended for three or more appliances. No additional charge.
See the docsDiscounts and Enterprise Agreements
15% off for government, nonprofit, and education
Government agencies, registered nonprofits, and accredited educational institutions receive 15% off all published pricing across every product and tier.
Example: Analytics Pro list $75,000 → discounted $63,750.
Confirm eligibilityEnterprise Agreements for 10+ appliances
Deployments of 10 or more appliances qualify for an Enterprise Agreement — one contract, one renewal, simplified procurement. Talk to us about EA pricing.
Talk about an EAReady to get started?
Deploy a fully featured trial appliance or talk to sales about the right tier for your team.