Buying SecMaster

Scenarios

SecMaster provides the basic, standard, and professional editions for your choice. You can buy one of them on a yearly/monthly or pay-per-use basis. You can purchase a SecMaster edition that best fits your workloads.

During the purchase, if you are stuck due to insufficient permission, refer to Assigning Permissions.

Procedure

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
On the Security Overview page, click Buy SecMaster in the upper right corner.
(Optional) Obtain purchase authorization.

Access authorization is required only when first time you buy the service. SecMaster needs your authorization to obtain the ECS asset details. On the Access Authorization slide-out panel displayed, select Agree and click OK.

On the purchase page, configure parameters by referring to the following table.

**Table 1** Parameters for purchasing SecMaster
Parameter	Description
Billing Mode	Select Yearly/Monthly or Pay-per-use billing mode based on your needs. Yearly/Monthly billing is a prepaid mode in which you pay for the service before using it. Your bill is settled based on the required period. The longer you use the service, the more discounts you got. Pay-per-use billing is a postpaid mode in which you pay for what you use. You are billed by second based on the actual usage. Your bill is settled by the hour. With the pay-per-use billing mode, you can easily adapt to resource requirement changes, reducing the risk of over-provisioning of resources or lacking capacity. In this mode, there are no upfront commitments required.
Region	Select the region where your cloud resources are located.
Edition	SecMaster provides basic, standard, and professional editions for your choice. For details about their differences, see Edition Differences.
Quota	The maximum number of ECSs you want to protect. The quota must be greater than or equal to the total number of ECSs within your account. This value cannot be changed to a smaller one after your purchase is complete. NOTE: The maximum quota is 10,000. If some of your ECSs are not protected by SecMaster, threats to them cannot be detected in a timely manner, which may result in security risks, such as data leakage. To prevent this, increase the ECS quota upon an increase of the host asset quantity.
Large Screen	You can enable Large Screen, Log Audit, Security Analysis, and SOC function. If you want to purchase value-added package in yearly/monthly billing mode, select a required duration. For details about the value-added package and recommended configurations, see Value-added Package Specifications.
Log Audit
Security Analysis
SOC
Tag	TMS's predefined tag function is recommended for adding the same tag to different cloud resources. You can also create tags when purchasing SecMaster.
Required Duration	Select the required duration as required. You do not need to configure this parameter in pay-per-use mode. The Auto-renew option enables the system to renew your service by the purchased period when the service is about to expire.

Confirm the product details and click Next.
After confirming that the order details are correct, read the SecMaster Disclaimer, select "I have read and agree to the SecMaster Disclaimer", and click Pay Now.
On the payment page, select a payment method and complete the payment.

Value-added Package Specifications

Based on the standard and professional editions, SecMaster provides the following functions in the value-added package:

Large Screen
- Function description:
  There are always such scenarios as presentation, reporting, or real-time monitoring where you need to present the analysis results of SecMaster on big screens to achieve better demonstration effect.
- Purchase configuration description:
  Make a purchase based on your service needs.

Log Audit

Function description:
It collects varied types of log data and stores the collected data for security analysis. You can set the data collection volume and data retention volume for each day.

Purchase configuration description:

In pay-per-use billing mode, you will be billed based on the actual collection and storage volume. You do not need to configure specifications.

In yearly/monthly billing mode, you need to specify New Log per day based on your estimations on service requirements. SecMaster will automatically allocate package specifications based on the value you provide. For details about the specifications, see Table 2.

**Table 2** Specifications of the security data collection and retention packages
Package	Recommended Configuration for Yearly/Monthly Subscription	Package Specifications	Applicable Range
Security Data Collection	The volume of data you expect SecMaster to collect each day. Minimum value: 5 GB. You can estimate the volume by multiplying the number of ECSs you have by 120 MB. Maximum volume for each order: 500 GB. When you make a purchase, SecMaster auto-fills this parameter based on the new log volume you specify. You do not need to configure this parameter separately.	5 *1 GB	0 GB to 5 GB (included)
		5 *2 GB	5 GB to 0 GB (included)
		5 *3 GB	10 GB to 15 GB (included)
		... The others follow the same rule. A maximum of 500 GB can be purchased through an order.	... The others follow the same rule.
Security Data Retention	The volume of data you expect SecMaster to store. The minimum volume is 100 GB. You can estimate the volume by multiplying new log volume per day by seven. The maximum volume for each order is 3,500 GB. When you make a purchase, SecMaster auto-fills this parameter based on the new log volume you specify. You do not need to configure this parameter separately.	100 *1 GB	0 GB to 100 GB (included)
		100 *2 GB	100 GB to 200 GB (included)
		100 *3 GB	200 GB to 300 GB (included)
		... The others follow the same rule. A maximum of 3,500 GB can be purchased through an order.	... The others follow the same rule.

The quotas of security data retention and security data collection packages can be counted together. However, these packages cannot cover what you used before the purchase. Subscriptions to these packages cannot be cancelled.
For yearly/monthly security data collection and retention packages, data volume in excess of the package quotas will be billed on a pay-per-use basis.
Pay-per-use resources will not be disabled automatically even if yearly/monthly security data retention and security data collection packages expire. They will always be enabled on a pay-per-use basis.
For yearly/monthly security data collection package, data volume in excess of the package quota will be billed each day on a pay-per-use basis.

For example, a user purchases a security data collection package with 5 GB/day/quota for one month. If the user uses 5 GB data collection before 22:00 on the purchase day, and then uses 2 GB data collection 22:00 00 and 24:00, the extra 2 GB will be billed on a pay-per-use basis. Starting from 00:00 on the next day, a 5 GB/day/quota is available to the user again.

Security Analysis

Function description:
Security analysis is the cloud native security information and event management solution SecMaster provides for you. The solution collects logs, reports alerts, aggregates security data, performs association analysis, and more.

Purchase configuration description:

Table 3 lists the free quota of security analysis. You can increase the quota at an extra cost if needed.

In pay-per-use billing mode, you will be billed based on the actual volume. You do not need to configure specifications.

In yearly/monthly billing mode, you need to set the data volume as required. For details, see Table 4.

**Table 3** Specifications for free security analysis quota
Function		Standard Edition	Professional
Security Analysis	Security data collection	120 MB/day/quota	120 MB/day/quota
	Security data retention	120 MB/day/quota	120 MB/day/quota
	Security data export	120 MB/day/quota	120 MB/day/quota
	Platform security data	40 MB/day/quota	40 MB/day/quota
	Security Modeling Analysis	×	120 MB/day/quota

**Table 4** Recommended security analysis configurations
Value-added Function	Recommended Quantity for Yearly/Monthly Subscription
Security Analysis	You can estimate the security analysis data volume based on 120 MB/ECS/day. This estimate volume will be applied to security data collection, security data retention, security data export, platform security data, and security modeling analysis as well. If the quota for security analysis is used up, this function becomes unavailable on that day, but it turns to be available at 00:00 the next day. For example, if this parameter is set to 1 GB/day, each day there will be 1 GB of security data that can be collected, 1 GB of security data stored, 1 GB of security data exported, 1 GB of platform security data reported, and 1 GB of data for security modeling analysis.

SOC

Function description:
Once SecMaster detects a threat, Security Orchestration (SOC) starts automated response orchestration and works with related cloud services to block and isolate threat sources. SOC provides quick and effective security event responses.

Purchase configuration description:

Table 5 lists the free quota of security orchestration. You can increase the quota at an extra cost if needed.

In pay-per-use billing mode, you will be billed based on the actual security orchestration operation times. You do not need to configure specifications.

In yearly/monthly billing mode, you need to set the operation times as required. For details, see Table 6.

**Table 5** Specifications for free security orchestration quota
Function	Standard Edition	Professional Edition
Security Orchestration	x	Operations: 7,000

**Table 6** Recommended security orchestration configurations
Value-added Function	Recommended Quantity for Yearly/Monthly Subscription
SOC	SecMaster supports 10,000 operations per day for each server. Set this parameter as required. If the quota for security orchestration is used up, this function becomes unavailable on that day, but it turns to be available at 00:00 the next day.

Verification

After the payment is successful, you can view the SecMaster edition you have purchased on the Purchased Resources page on the management console.

Related Operations

To change the asset quota, choose Purchased Resources, select the target region, and click Increase Quota. For details, see Increasing the Quota.
To enable the value-added package function, choose Purchased Resources and click Buy Value-add Pack in the upper right corner. For details, see Purchasing Value-Added Packages.
If your yearly/monthly edition is about to expire or has expired, you can choose Purchased Resources, select the target region, and click Renew to make a renewal. For details, see Renewing Your Subscriptions.
If you no longer need the asset quota or value-added package, go to the Security Overview page, hover over the edition information in the upper right corner of the page, and click Unsubscribe or Cancel to unsubscribe from the service. For details, see Unsubscribing from SecMaster.