Skip to main content

Pricing

Per appliance. Unlimited data. Pick your tier.

Three products, eight tiers, one pricing model. Every appliance includes unlimited data rates. Government, nonprofit, and education save 15%.

At a glance

Per appliance, per annumLiteProMax
Conductor$15,000$40,000$60,000
Reporter$20,000$50,000
Analytics$25,000$75,000$120,000

All tiers include unlimited data rates. Reporter and Analytics include a Conductor at no extra cost — see Bundles.

Conductor

Per appliance. Per year. Unlimited data. No GB charges.

Lite

$15,000

per appliance / year

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • STIX enrichment
  • Full integration support (30+ integrations)
  • Custom integration support

Pro

Recommended

$40,000

per appliance / year

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • STIX enrichment
  • Full integration support (30+ integrations)
  • Custom integration support

Max

$60,000

per appliance / year

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • STIX enrichment
  • Full integration support (30+ integrations)
  • Custom integration support

Reporter

Bundled Conductor at no extra cost. Unlimited data rates.

Per appliance. Per year. Unlimited data. No GB charges.

Lite

$20,000

per appliance / year

Conductor Lite included

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • Conductor Lite included
  • Conductor Pro included
  • Full integration support
  • Tool efficiency reporting
  • Compliance reporting (CSC8)
  • Advanced compliance reporting (12+ frameworks)
  • Advanced compliance auditor
  • Cost & savings report
  • AI summaries (work units & reports)

Pro

Recommended

$50,000

per appliance / year

Conductor Pro included

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • Conductor Lite included
  • Conductor Pro included
  • Full integration support
  • Tool efficiency reporting
  • Compliance reporting (CSC8)
  • Advanced compliance reporting (12+ frameworks)
  • Advanced compliance auditor
  • Cost & savings report
  • AI summaries (work units & reports)

Analytics

Bundled Conductor at no extra cost. Unlimited data rates.

Per appliance. Per year. Unlimited data. No GB charges.

Lite

$25,000

per appliance / year

Conductor Lite included

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • STIX enrichment
  • Conductor Lite included
  • Conductor Pro included
  • Full integration support (except custom)
  • Custom integration support
  • Multi-tenancy
  • Signal search
  • Incident response
  • SOAR playbooks
  • AI-enabled playbooks
  • Tool efficiency reporting
  • Compliance reporting (CSC8)
  • Advanced compliance reporting (12+ frameworks)
  • Advanced compliance auditor
  • Cost & savings report
  • AI summaries (work units & reports)

Pro

Recommended

$75,000

per appliance / year

Conductor Pro included

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • STIX enrichment
  • Conductor Lite included
  • Conductor Pro included
  • Full integration support (except custom)
  • Custom integration support
  • Multi-tenancy
  • Signal search
  • Incident response
  • SOAR playbooks
  • AI-enabled playbooks
  • Tool efficiency reporting
  • Compliance reporting (CSC8)
  • Advanced compliance reporting (12+ frameworks)
  • Advanced compliance auditor
  • Cost & savings report
  • AI summaries (work units & reports)

Max

$120,000

per appliance / year

Conductor Pro included

  • Core integrations (M365, firewalls, Linux & Windows servers)
  • ProtoGraph deduplication
  • Unlimited data rates
  • STIX enrichment
  • Conductor Lite included
  • Conductor Pro included
  • Full integration support (except custom)
  • Custom integration support
  • Multi-tenancy
  • Signal search
  • Incident response
  • SOAR playbooks
  • AI-enabled playbooks
  • Tool efficiency reporting
  • Compliance reporting (CSC8)
  • Advanced compliance reporting (12+ frameworks)
  • Advanced compliance auditor
  • Cost & savings report
  • AI summaries (work units & reports)

Full feature comparison

Every feature, every tier, every product — side by side.

Data ingestion and processing
Core integrations (M365, firewalls, Linux & Windows servers)
Full integration support (30+)
Custom integration support
ProtoGraph deduplication
STIX enrichment
Unlimited data rates
Security operations
Signal search
Incident response
SOAR playbooks
AI-enabled playbooks
Multi-tenancy
Reporting and compliance
Tool efficiency reporting
Compliance reporting (CSC8)
Advanced compliance reporting (12+ frameworks)
Advanced compliance auditor
Cost & savings report
AI summaries (work units & reports)
Platform
Console (centralized management) — free with every deployment
CyberGrid (threat intel + cross-tenant sync)

Reporter and Analytics include a Conductor — at no extra cost.

Reporter Lite

$20,000/yr

+

Conductor Lite

Included

Reporter Pro

$50,000/yr

+

Conductor Pro

Included

Analytics Lite

$25,000/yr

+

Conductor Lite

Included

Analytics Pro

$75,000/yr

+

Conductor Pro

Included

Analytics Max

$120,000/yr

+

Conductor Pro

Included

If you only need data ingestion, buy Conductor on its own. If you need reporting or full security operations, the right Reporter or Analytics tier comes with the matching Conductor in the box.

Included free

Console: one pane of glass for every WitFoo appliance.

Centrally manage, monitor, and update every Conductor, Reporter, and Analytics appliance from a single lightweight container. Recommended for three or more appliances. No additional charge.

See the docs

Discounts

Volume discounts

Buy more appliances of the same product line and every appliance after the first is discounted automatically. Quantities are counted per product line — every Conductor edition (Lite, Pro, Max) counts toward your Conductor total, and the same for Reporter and Analytics. The first appliance of each product line is always full list price; the discount on every additional appliance is set by the total quantity of that product line in your order, and applies to each unit's own edition list price.

Order quantity (per product line)First applianceEach additional appliance
1List price
2–5List price30% off list
6–10List price50% off list
11+List price65% off list

Worked examples (USD)

OrderList priceYou pay
3 × Analytics Pro$225,000$180,000
8 × Conductor Lite$120,000$67,500
12 × Conductor Pro$480,000$194,000

Worked examples (NZD)

OrderList priceYou pay
3 × Analytics Pro$292,500$234,000
8 × Conductor Lite$156,000$87,750
12 × Conductor Pro$624,000$252,200

NZD figures use the published list convention of 1.3× the USD list price. All prices are per appliance, per annum, and include unlimited data rates.

15% off for government, nonprofit, and education

Government agencies, registered nonprofits, and accredited educational institutions receive 15% off all published pricing across every product and tier. It stacks with volume discounts — the 15% applies to your order total after volume pricing.

Example: Analytics Pro list $75,000 → $63,750 with the 15% discount. Stacked with volume pricing, 3 × Analytics Pro is $180,000 → $153,000.

Confirm eligibility

Frequently asked questions

What does "per appliance" mean? +

What counts as "unlimited data"? +

Does Reporter or Analytics replace my SIEM? +

What's included free? +

How do volume discounts work? +

Does the government, nonprofit, or education discount stack with volume discounts? +

Can I trial WitFoo before buying? +

Ready to get started?

Deploy a fully featured trial appliance or talk to sales about the right tier for your team.