Pricing & Plans

One platform to quantify, reduce and transfer OT cyber risk, free to start and packaged to suit your program.

  • Free levels, forever
  • Pay for the evidence you add
  • Add-ons when you need them
Talk to sales

Unlock more value with the full platform

Cyber Risk Quantification for industrial operators. Start with a free estimate from public data, then add evidence level by level until the number holds up in front of the board, the CFO and your insurer.

Talk to salesStart free
Range around the resultSame model at every level. Better inputs replace assumptions, so the range narrows.
  1. Level 1 · FreeEstimatePublic dataWidest
  2. Level 2 · FreeBaselinePublic data and your answersNarrower
  3. Level 3 · PremiumBoard-GradeYour answers in 3 frameworksNarrow
  4. Level 4 · PremiumEvidence-GradeYour answers and facility OT telemetryNarrowest
Level 1 · FreeEstimateFreeforeverA first number in dollars, before committing anythingAbout 2 minutesPublic data
Cyber Risk BriefReady at 18 of 18 · 12 answered
Expected Annual Loss$4.8M23%$3.1MRange today$7.4MDown from $6.2M last quarter
Plans
Level 1 · FreeEstimate
Freeforever

A first number in dollars, before committing anything

Start free
Level 2 · FreeBaseline
Freeforever

A sharper number without a formal assessment

Start free
Level 3 · PremiumBoard-Grade
Contact usfor pricing

A number the board, the CFO and insurers act on, with no OT telemetry needed

Talk to sales
Level 4 · PremiumEvidence-Grade
Contact usfor pricing

Sites that already produce OT telemetry they can share

Talk to sales
Add-ons
Available from Level 3 and up
Available from Level 3 and up
DeRISK ConsultantDeRISK DavyDeRISK Scenario SimulatorThreat-Intel Premium FeedThreat-Intel: Bring Your Own
DeRISK ConsultantDeRISK DavyDeRISK Scenario SimulatorThreat-Intel Premium FeedThreat-Intel: Bring Your Own
Pricing metric
Free, forever
Free, forever
Annual subscription, per company or facility
Annual subscription, per company or facility
Challenges it solves
  • No dollar figure for OT cyber risk
  • No time or budget for an assessment
  • A rough number nobody can defend
  • Not knowing which scenarios drive the loss
  • Boards and insurers asking for a defensible number
  • Not knowing which site carries the risk
  • Security budget with no measurable return
  • Self-reported answers questioned by insurers
  • Sites with OT telemetry that never reaches the number
What you get
  • Expected annual loss and VaR
  • Loss exceedance curve and revenue stress test
  • One company-level report, from public data only
  • Everything in Level 1
  • Control maturity and scenario contribution
  • A risk trajectory baseline
  • Five reports: Board, CISO, CFO, COO, CRO
  • Your own report and facility scope
  • Return on security spend
  • The same five reports
  • Built bottom-up from facility OT network data
See full plan comparison
DeRISK CRQ: every capability by plan
CapabilityLevel 1 EstimateFreeLevel 2 BaselineFreeLevel 3 Board-GradePremiumLevel 4 Evidence-GradePremium
Price
Annual priceFreeFreeContact us for pricingContact us for pricing
Effort
Questions to answerNoneFewer than 1050, in 3 frameworks50, in 3 frameworks
Time and setupAbout 2 minutesAbout 10 minutesSet up with our teamSet up with our team
Data and uncertainty
Data behind the numberWhat the model learns from at each level.Public dataPublic data and your answersYour answers in 3 frameworksYour answers and facility OT telemetry
Range around the resultSame model at every level. Better inputs replace assumptions, so the range narrows.WidestNarrowerNarrowNarrowest
Numbers not what you expected?A free estimate leans on public data and assumptions, so its range is wide. Add your own data and the range narrows.
How we handle uncertainty
Reports and scope
Company-level report✓✓✓✓
Preconfigured audience reports——55
Build your own report——✓✓
ScopeCompanyCompanyCompany or facilityCompany and facility, bottom-up
Risk magnitude
Expected annual loss and VaR✓✓✓✓
Loss exceedance curve✓✓✓✓
Revenue stress test and solvency✓✓✓✓
Per-scenario VaR✓✓✓✓
Scenario contribution %—✓✓✓
Risk trajectory baseline—✓✓✓
Risk drivers
Risk by FAIR scenario method✓✓✓✓
Risk by FAIR scenario effect✓✓✓✓
FAIR scenario register✓✓✓✓
Security posture
Control maturity (NIST 800-82r3)No evidence✓✓✓
Concentration · facility scope
Where the risk sits——✓✓
Facility posture heatmap——✓✓
Loss ratio by asset——✓✓
Downtime exposure——✓✓
Facility risk ranking——✓✓
Hotspot facility deep dive——✓✓
Exposure schedule——✓✓
Action and return
Return on security spend——✓✓
Remediation portfolio, ranked——✓✓
Before and after evidence——✓✓
Budget defense summary——✓✓
Investment decision table——✓✓
Marginal return view——✓✓
Execution sequence——✓✓
Methodology and transparency
Data sufficiency and confidence✓✓✓✓
Financial and contextual inputs—✓✓✓
Simulation parameters——✓✓
Full FAIR: TEF, vulnerability, LEF, loss magnitude——✓✓
Assumptions register and limitations✓✓✓✓
Inputs
Public data✓✓✓✓
Controls and financial questions—✓✓✓
Framework: DeRISK Control Model, NIST SP 800-82r3 or IEC 62443——✓✓
Facility OT network data———✓
Add-ons
DeRISK Consultant——Add-onAdd-on
DeRISK Davy——Add-onAdd-on
DeRISK Scenario Simulator——Add-onAdd-on
Threat-Intel Premium Feed——Add-onAdd-on
Threat-Intel: Bring Your Own——Add-onAdd-on

Quantify, reduce and transfer with one platform

DeRISKCRQ

Put a dollar figure on OT cyber risk, site by site

  • Expected annual loss and value at risk
  • Built on FAIR and FAIR-MAM
  • Your posture in the framework you choose
DeRISKConsultant

Turn the number into a funded plan

  • Next-best projects, ranked by the risk each one removes
  • In order, in less than one hour
  • Toward a risk, compliance or insurability target
DeRISKUWA

Package residual risk for transfer

  • An underwriting verdict in 10–20 minutes
  • EAL, VaR, OEP/AEP and MFL on every submission
  • Committee-ready reports for underwriters

More data, a higher level, a tighter range.

You pay for the evidence you add. The model is the same at every level.

Show on the chartPick one or more layers Illustrative, one hypothetical scenario.
10th to 90th percentile Most likely True most likely loss (unknown in practice)
How certain is a CRQ result?

Free means free.

Estimate and Baseline cost nothing, ever. No card, and nothing connects to your OT network.

You pay for evidence, not a different product.

Each level replaces assumptions with your own data. The range narrows. It never disappears.

One annual subscription, set up by our team.

Add-ons attach from Board-Grade. They add capabilities. They don’t change the range.

Pricing FAQ

What does each level add?

Every level builds on the one before it by adding one input or capability. Choose a product to see how.

Level inputs
  • Public dataLevel 1 Estimate
  • Under 10 questionsLevel 2 Baseline
  • 50 questions, 3 frameworksLevel 3 Board-Grade
  • Facility OT telemetryLevel 4 Evidence-Grade
Do I need OT telemetry to get a number?

No. Level 1 Estimate, Level 2 Baseline and Level 3 Board-Grade need none. Level 4 Evidence-Grade adds OT network data from your facilities when you have it to share.

What is free and what is paid?

Level 1 Estimate and Level 2 Baseline on DeRISK CRQ, and Standard on DeRISK UWA, are free, forever. Level 3 Board-Grade, Level 4 Evidence-Grade, Professional, Enterprise and every add-on are annual subscriptions quoted and set up by our team.

How do add-ons work?

Each add-on is its own annual subscription. They attach from Level 3 Board-Grade on DeRISK CRQ and from Professional on DeRISK UWA, and work the same way in both. Threat-Intel: Bring Your Own is a one-off setup, on request.

What is the number built on?

FAIR and FAIR-MAM, the standards risk teams and insurers already work to, extended for industrial environments by the DeRISK Consequence Model.

Which control framework is used?

The one you choose: the DeRISK Control Model, NIST SP 800-82r3 or IEC 62443. Board-Grade asks 50 questions in that framework.

Start with a free number, pay only for the evidence you add.

Get a first dollar figure for OT cyber risk with DeRISK CRQ Level 1 Estimate, or run one submission through DeRISK UWA Standard. Both free, forever. Premium levels and add-ons are quoted by our team.

Start free Talk to sales

No credit card. No OT data integration required.