pricing
Pay to protect what's real — not to chase false alarms.
Simple per-endpoint plans, with cloud, identity, and managed options as you scale. Every plan includes deception and AI detection.
Core
For growing teams putting deception to work.
- ✓Deception Grid — up to 1,000 decoys
- ✓Sentryl AI detection
- ✓Endpoint Defense agent
- ✓Standard response playbooks
- ✓Email & chat support
- ✓30-day data retention
Enterprise
Full-surface deception and autonomous response.
- ✓Everything in Core, plus:
- ✓Unlimited decoys + cloud & identity traps
- ✓Autonomous response & SOAR/SIEM integrations
- ✓Custom playbooks & threat hunting
- ✓SSO/SCIM, RBAC, audit logs
- ✓1-year retention + priority support
Managed
Decoyly runs your detection & response 24/7.
- ✓Everything in Enterprise, plus:
- ✓Fully managed MDR by Decoyly analysts
- ✓Dedicated security engineer
- ✓Custom compliance & reporting
- ✓Air-gapped / OT deployments
- ✓99.99% SLA
All prices in USD. 14-day free trial on Core and Enterprise — no card required.
faq
Common questions.
How is Decoyly priced?+
Core and Enterprise are billed per protected endpoint per month, with annual and multi-year discounts. Managed is scoped to your environment — reach out and we'll build a quote.
Will decoys slow down production?+
No. Decoys are lightweight and isolated from real assets. They generate no production traffic and have no measurable performance impact.
How long does deployment take?+
Most teams have a fully seeded deception grid running in under fifteen minutes. Cloud and identity traps deploy through your existing IdP and cloud accounts.
Do you integrate with our existing stack?+
Yes. Decoyly feeds your SIEM/SOAR, ticketing, and chat tools, and exposes REST and GraphQL APIs. It complements EDR rather than replacing your whole stack.
What about compliance?+
Enterprise and Managed include SOC 2, ISO 27001, and PCI-aligned reporting, plus forensic-grade evidence capture for every confirmed incident.
deploy
See an attacker walk into the trap.
Book a 30-minute live demo. We'll deploy a Decoyly grid in a sandbox and run a real intrusion against it — start to containment.