SecvalisbySYSDEVOPS.EU

Cost calculator

Enter your own hours and hourly rate. The result also shows when Secvalis costs more than the work it saves.

Your starting point

Count the whole cycle, not only logging in and running the scan. Exclude the updates themselves, tests and maintenance windows.

What to include
  • logging in to each machine and running a scanner (e.g. Trivy)
  • collecting and storing the results in one place
  • merging duplicates: the same CVE on many machines
  • checking each CVE: severity, known exploits, CISA KEV, whether the package is actually used
  • setting priorities and deadlines, the action plan
  • checking what from the previous list has been fixed
  • watching for systems out of vendor support (EOL)
  • a report or note for your manager, auditor or client

With 10 servers and a thorough review this usually takes about 25–50 h a month.

Employee: gross × employer cost / 168; contractor: invoice net / 168

Usually about 30 minutes a week, so about 2 h a month: after logging in you check what has changed and what is urgent. Scans, the list and the report are done by Secvalis. More in a month with an audit or an urgent KEV entry.

Calculate hours from steps

Calculations run in your browser. We do not send your entered times, rate or result. The analytics event contains only a machine count range.

What the subscription costs per machine

Starter

up to 10 machines, ≈ €49.00 per month

≈ €0.16per machine per day

Pro

up to 50 machines, ≈ €149.00 per month

≈ €0.10per machine per day

Business

up to 200 machines, ≈ €499.00 per month

≈ €0.08per machine per day

Enter your numbers and press Calculate to compare it with your own work.

What hours do not show

Besides the time saved, the subscription includes:

  • History of every scan

    Scan history shows CVE counts, changes and CSV/PDF exports.

  • Tasks instead of a CVE list

    Package tasks organise vulnerability work.

  • Priorities from CVSS, EPSS and KEV

    CVSS, EPSS and KEV help assess a vulnerability.

  • Remediation deadlines

    Set remediation deadlines per account; the KEV threshold can shorten them.

  • Management report

    Management reports can be sent to eligible recipients on a schedule.

  • Evidence for the auditor

    Evidence Pack bundles reports, registers, data and a SHA-256 manifest.

A daily scan shows what happened on each day

The Secvalis agent can scan a machine every day: set up cron or a systemd timer, the agent prints ready examples with --schedule-help. Saved scan results land in the machine history with the date, vulnerability counts by severity and the change since the previous scan, so you see the state on a given day, not only on the day of a manual review. A failed run leaves no entry, its cause is in the agent log on the machine.

Manual review: 1× per month

Results per month

1

Longest gap

29 days

without fresh data

Secvalis with a daily schedule

Results per month

30

Longest gap

0 days

when every daily run succeeds

Empty squares are days without a scan result. The manual count follows "Times per month" from the hours helper.