Project Perception, like many AI services, uses consumption based pricing. You pay for what the agents do, measured in Security Compute Units, and more intensive tasks consume more units. That changes how a SOC is budgeted.<\/p>\n
Traditionally, security costs are mostly fixed. Licences per user or device, a SIEM priced per gigabyte, and salaries. You know roughly what next year will cost.<\/p>\n
Paying per task is different. A quiet month costs less. A month with a major incident, or a month when you run red agents across the whole estate, costs more. That is fair, but it is harder to predict.<\/p>\n
So how should management think about it? First, compare the right things. The question isn\u00b4t what the agents cost, but what the same work would cost otherwise: analyst hours, consultants, delays. If an agent investigates an incident in minutes that would take an analyst two hours, the unit price is easy to judge.<\/p>\n
Second, set budgets and limits. Decide how much capacity the agents may use per month, and what happens when it runs out. Nobody wants to discover in the middle of an incident that the budget is empty.<\/p>\n
Third, prioritise. Use the agents where they create the most value: high volume triage, continuous exposure reduction and investigation of serious incidents.<\/p>\n
Fourth, follow up monthly. Cost per incident, cost per closed attack path, time saved.<\/p>\n
Variable costs need fixed rules.<\/p>\n","protected":false},"excerpt":{"rendered":"
Project Perception, like many AI services, uses consumption based pricing. You pay for what the agents do, measured in Security Compute Units, and more intensive tasks consume more units. That changes how a SOC is budgeted. Traditionally, security costs are mostly fixed. Licences per user or device, a SIEM priced per gigabyte, and salaries. You […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[11,4],"tags":[173,38,70],"class_list":["post-1539","post","type-post","status-publish","format-standard","hentry","category-business","category-security-architecture","tag-ai-agents","tag-business","tag-cost"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1539"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1539\/revisions"}],"predecessor-version":[{"id":1556,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1539\/revisions\/1556"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}