Pricing

Scale as you grow.

Each tier unlocks additional pipeline capabilities. Start free, upgrade when you need more.

Coming Soon

Basic

10K events/min — Free
  • Ingest + Parquet storage
  • GeoIP enrichment
  • HTML reports
  • S3 cloud upload
  • Full documentation

Professional

50K events/min — $99/year
  • Everything in Basic
  • IP reputation scoring
  • Basic hunt algorithms
  • MCP server integration
  • Priority email support

Enterprise

Unlimited events/min — $999/year
  • Everything in Professional
  • ML anomaly detection
  • Threat Intelligence support
  • Workflow integration support
  • Dedicated support

Complete your purchase

Annual license per Suricata instance with perpetual fallback — stop paying and keep the last version you had.
Runs on your VPC or on-premise. No telemetry. No phone home. Fully air-gap capable.
Ed25519-signed licenses with provenance metadata included in every Parquet file.
Are You Ready?

Ready for CMMC compliance?

Deploy Rockfish NDR in minutes. Single binary. No dependencies. Full pipeline.

We built this for Defense Industrial Base contractors.

Now we want to prove it.

We are looking for defense contractors and C3PAOs to deploy Rockfish NDR in a production environment at no cost. Slots are limited.

Requirements are simple: you run it, we support it, you tell us what you think. If that sounds like a fair trade, let's talk.

Request a Pilot Slot