G-Cloud Pricing Atos infrastructure Vulnerability Scanning (Outpost24) SaaS
Contents 1. Introduction... 1 2. Pricing... 2 2.1 External Network Scan... 2 2.2 PCI DSS Approved Scanner Vendor (ASV) Scan... 3 2.3 External Web Application Scan... 4 2.4 Atos Security Professional Services... 5 ii
1. Introduction This is the Pricing Document that accompanies the Service Definition for Atos Infrastructure Vulnerability Scanning (Outpost24) SaaS. 1
2. Pricing 2.1 External Network Scan The table below is for between 1-10 IP addresses. Prices exclude VAT and are for year fee payable at point of order. External Network Scan Up to 10 IP addresses Monthly adhoc 8,195 4,295 Outpost24 OUTSCAN SaaS up to 10 IP addresses. Year1 includes Service commissioning, scan template setup, report setup, service initiation, SDA, 12 monthly and delivery of automatically generated scan reports. Includes automatic threat alerts between. Year 2 price conditional on no break in service from Year 1. 11,495 11,495 Analysis of trends, threats, issues identified in the OUTSCAN generated scan report. 17,195 17,195 Monthly one day time boxed workshop on prioritised remediation actions. Held at UK customer site. 2,595 2,595 Analysis of trends, threats, issues, and risks over the preceding 12 months. Includes recommended action plan for next 12 months. 3,595 3,595 12 ad-hoc of all or part of the scheduled scan IP addresses. The can be requested over the contract period in place at time of purchase. The table below is for between 11-50 IP addresses External Network Scan Up to 50 IP addresses Monthly 16,995 12,995 Outpost24 OUTSCAN SaaS up to 50 IP addresses. Year1 includes Service commissioning, scan template setup, report setup, service initiation, SDA, 12 monthly and delivery of automatically generated scan reports. Includes automatic threat alerts between. Year 2 price conditional on no break in service from Year 1. 45,995 45,995 Analysis of trends, threats, issues identified in the OUTSCAN generated scan report. 17,195 17,195 Monthly one day time boxed workshop on prioritised remediation actions. Held at UK customer site. 2
adhoc 5,195 5,195 Analysis of trends, threats, issues, and risks over the preceding 12 months. Includes recommended action plan for next 12 months. 13,995 13,995 12 ad-hoc of all or part of the scheduled scan IP addresses. The can be requested over the contract period in place at time of purchase. 2.2 PCI DSS Approved Scanner Vendor (ASV) Scan The table below is for between 1-10 IP addresses. Prices exclude VAT and are for year fee payable at point of order. PCI ASV Scan Up to 10 IP addresses Quarterly monthly verification 5,195 1,395 Outpost24 OUTSCAN PCI ASV up to 10 IP addresses. Year1 includes Service commissioning, scan template setup, report setup, service initiation, SDA, 4 quarterly compliance and delivery of automatically generated scan reports. Year 2 price conditional on no break in service from Year 1. 3,995 3,995 Analysis of trends, threats, issues identified in the OUTSCAN quarterly generated scan report. 5,995 5,995 Quarterly, one day time boxed workshop on prioritised remediation actions. Held at UK customer site. 1,795 1,795 12 additional compliance and scan results. No compliance report produced. 2,595 2,595 Analysis of trends, threats, issues, and risks over the preceding 12 months. Includes recommended action plan for next 12 months. Failed compliance findings enquiry resolution Time & materials Time & materials Security specialist to investigate PCI ASV scan non-compliance events. Rates as per SFIA rate card - Atos 3
The table below is for between 11-50 IP addresses PCI ASV Scan Up to 50 IP addresses Quarterly monthly verification 8,195 4,395 Outpost24 OUTSCAN PCI ASV up to 50 IP addresses. Year1 includes Service commissioning, scan template setup, report setup, service initiation, SDA, 4 quarterly compliance and delivery of automatically generated scan reports. Year 2 price conditional on no break in service from Year 1. 15,495 15,495 Analysis of trends, threats, issues identified in the OUTSCAN generated scan report. 5,995 5,995 Quarterly one day time boxed workshop on prioritised remediation actions. Held at UK customer site. 6,995 6,995 12 additional compliance and scan results. No compliance report produced. 5,195 5,195 Analyses trends over the year including, threats, vulnerability sources, and remediation progress. Failed compliance findings enquiry resolution Time & materials Time & materials Security specialist to investigate PCI ASV scan non-compliance events. Rates as per SFIA rate card - Atos 2.3 External Web Application Scan The table below is for between 1-10 IP addresses. Prices exclude VAT and are for year fee payable at point of order. External Web Application Scan Up to 10 web app addresses Monthly 8,995 5,195 Outpost24 OUTSCAN WAS SaaS up to 10 web app addresses. Year1 includes Service commissioning, scan template setup, report setup, service initiation, SDA, 12 monthly and delivery of automatically generated scan reports. Includes automatic threat alerts between. Year 2 price conditional on no break in service from Year 1. 11,495 11,495 Analysis of trends, threats, issues identified in the OUTSCAN WAS generated scan report. 4
adhoc 17,195 17,195 Monthly one day time boxed workshop on prioritised remediation actions. Held at UK customer site. 2,595 2,595 Analyses trends over the year including, threats, vulnerability sources, and remediation progress. 3,595 3,595 12 ad-hoc of all or part of the scheduled scan web app addresses. The can be requested over the contract period in place at time of purchase. The table below is for between 11-50 IP addresses External Web Application Scan Up to 50 web app addresses Monthly adhoc 18,995 14,995 Outpost24 OUTSCAN WAS SaaS up to 50 web app addresses. Year1 includes Service commissioning, scan template setup, report setup, service initiation, SDA, 12 monthly and delivery of automatically generated scan reports. Includes automatic threat alerts between. Year 2 price conditional on no break in service from Year 1. 45,995 45,995 Analysis of trends, threats, issues identified in the OUTSCAN WAS generated scan report. 17,195 17,195 Monthly one day time boxed workshop on prioritised remediation actions. Held at UK customer site. 5,195 5,195 Analyses trends over the year including, threats, vulnerability sources, and remediation progress. 13,995 13,995 12 ad-hoc of all or part of the scheduled scan web app addresses. The can be requested over the contract period in place at time of purchase. 2.4 Atos Security Professional Services Atos Security Professional Services can be engaged to facilitate and enable adoption and utilisation of Atos Infrastructure Vulnerability Scanning service. Service Price Minimum order size Atos Security Professional Services At SFIA rate card - Atos Day 5
6