Billing Items

(Mandatory) Edition

Billing factor: service edition + Quota. Different editions provide different functions.

Yearly/Monthly and pay-per-use billing

• Yearly/Monthly: Service edition + Quota x Required duration
• Pay-per-use billing: Service edition + Quota unit price x Billing duration

(Mandatory) Quota

Value-added package (optional)

Large screen

SecMaster large screen can display security analysis result on a large screen, making it easier for you to obtain better demonstration effects for some scenarios such as onsite presentation, reporting, and real-time monitoring.

Billing factors: large screen - security situation metrics.

Yearly/Monthly and pay-per-use billing

• Yearly/Monthly billing: Large screen - Security situation metric unit price x Required duration
• Pay-per-use subscriptions: Large screen – Unit price of security situation metrics x Billing duration

Log audit

If security data collection and storage are required, you can purchase the data collection volume and data retention volume packages separately.

Billing factors: security data collection volume and security data storage volume.

Yearly/Monthly and pay-per-use billing

• Yearly/Monthly billing

  Unit price of the security data collection package x Required duration

  Unit price of the security data retention package x Required duration

• Pay-per-use billing

  Billed for the actual log data volume collected for you.

  Billed for the actual log data volume stored for you.

Security analysis

If security data collection, security data retention, security data export, platform security data, and security modeling analysis are required, you can purchase security analysis quotas separately.

Billing factor: security analysis data volume.

Yearly/Monthly and pay-per-use billing

• Yearly/Monthly: Security analysis data volume/day x Required duration
• Pay-per-use billing: You will be billed for tha actual security analysis data volume you use.

Security orchestration (SOC)

Security orchestration can help you handle and investigate incidents automatically. You can buy security orchestration separately.

Billing factor: You will be billed for how many times workflow nodes (including the start and end nodes, but excluding judgement nodes) are executed during playbook execution.

Yearly/Monthly and pay-per-use billing

• Yearly/Monthly billing: Security analysis and security orchestration analysis times/day x Required duration
• Pay-per-use billing: You will be billed for how many times workflow nodes (including the start and end nodes but excluding judgement nodes) are executed when a playbook is executed.

Purchase

• The standard and professional editions provide a value-added package (including large screen, security analysis, security orchestration, security data collection, and security data retention) at an extra cost. To use these functions, purchase the standard or professional edition first.

Billing

Value-added packages are billed separately. There is no impact on the service edition and quota you have purchased.

Free quotas

A certain free quota is offered for security analysis and security orchestration in the value-added package. Table 3 shows details about free quotas.

If the free quotas cannot meet your business needs, you can enable corresponding functions in the value-added packages separately.

Use

If you purchase yearly/monthly security data collection, security data retention, security analysis, and security orchestration, there are some limitations you need to know. The details are as follows:

• Security data collection and security data retention packages:
  • The quotas of security data retention and security data collection packages can be counted together. However, these packages cannot cover what you used before the purchase. Subscriptions to these packages cannot be cancelled.
  • For yearly/monthly security data collection and retention packages, data volume in excess of the package quotas will be billed on a pay-per-use basis.
  • Pay-per-use resources will not be disabled automatically even if yearly/monthly security data retention and security data collection packages expire. They will always be enabled on a pay-per-use basis.

    For yearly/monthly security data collection package, data volume in excess of the package quota will be billed each day on a pay-per-use basis.

    For example, a user purchases a security data collection package with 5 GB/day/quota for one month. If the user uses 5 GB data collection before 22:00 on the purchase day, and then uses 2 GB data collection 22:00 00 and 24:00, the extra 2 GB will be billed on a pay-per-use basis. Starting from 00:00 on the next day, a 5 GB/day/quota is available to the user again.

• Security analysis and security orchestration:
  • Security analysis: You will be billed based on data volume you specify. If the quota for security analysis is used up, this function becomes unavailable on that day, but it turns to be available at 00:00 the next day.
  • Security orchestration: You will be billed for times playbooks are executed for you. If the quota for security orchestration is used up, this function becomes unavailable on that day, but it turns to be available at 00:00 the next day.

  For example, if you purchased security analysis of 1 GB/day for one month and used 1 GB before 22:00 on the purchase day, security analysis will become unavailable between 22:00 and 24:00 on that day.

Security analysis

Security data collection

120 MB/day/quota

120 MB/day/quota

Security data retention

120 MB/day/quota

120 MB/day/quota

Security data export

120 MB/day/quota

120 MB/day/quota

Platform security data

40 MB/day/quota

40 MB/day/quota

Security Modeling Analysis

×

120 MB/day/quota

Threat management

Preset threat models

×

Calculation model data: 120 MB/day/quota; Preset models: 200

Preset response playbooks

×

Preset playbooks: 30

Security orchestration (SOC)

Security orchestration

×

Operations: 7,000

Security Data Collection

The volume of data you expect SecMaster to collect each day.

Minimum value: 5 GB. You can estimate the volume by multiplying the number of ECSs you have by 120 MB. Maximum volume for each order: 500 GB.

When you make a purchase, SecMaster auto-fills this parameter based on the new log volume you specify. You do not need to configure this parameter separately.

5 *1 GB

0 GB to 5 GB (included)

5 *2 GB

5 GB to 0 GB (included)

5 *3 GB

10 GB to 15 GB (included)

...

The others follow the same rule. A maximum of 500 GB can be purchased through an order.

...

The others follow the same rule.

Security Data Retention

The volume of data you expect SecMaster to store.

The minimum volume is 100 GB. You can estimate the volume by multiplying new log volume per day by seven. The maximum volume for each order is 3,500 GB.

When you make a purchase, SecMaster auto-fills this parameter based on the new log volume you specify. You do not need to configure this parameter separately.

100 *1 GB

0 GB to 100 GB (included)

100 *2 GB

100 GB to 200 GB (included)

100 *3 GB

200 GB to 300 GB (included)

...

The others follow the same rule. A maximum of 3,500 GB can be purchased through an order.

...

The others follow the same rule.