Shomar Security Platform
Standard Commercial Paper & Enterprise Rate Card
1Executive Overview & Strategic Value Proposition
Shomar is the unified security operations, automated vulnerability assessment, and continuous compliance platform purpose-built for African and emerging-market technology companies, regulated financial institutions, and multinational enterprises. By integrating automated penetration testing, continuous regulatory compliance, and software supply chain security into a sovereign architecture, Shomar replaces fragmented vendor stacks, eliminates static consultant PDF backlogs, and enables instant board and auditor verification.
Continuous target surface discovery, automated exploit proof-of-concept verification, and board-ready retest reports generated in minutes.
16+ Pan-African & international frameworks (NDPA, ISO 27001, SOC 2, PCI DSS 4.0, CBN Cybersecurity), automated evidence vaults & auditor portal.
Source code SAST, SCA dependency vulnerability analysis, secret leak prevention, PCI ASV readiness scans, and customer-controlled local scan workers.
2Core Platform Licensing Tiers (Full Platform Bundles)
Organizations licensing the complete Shomar platform benefit from the Full Platform Bundle, which activates all three solution pillars (VAPT + Compliance + SecOps) with integrated multi-module platform savings.
| Licence Tier | Target Buyer Profile | Annual Subscription | Monthly Equivalent | Included Scale & Allowances |
|---|---|---|---|---|
| Starter Annual | SMEs, Early Fintechs, Startups | $4,600 / yr | ~$383/mo | 3 Users • 3 Projects • 100 Scans/mo • 2 VAPTs/qtr • 1 Framework • 5 GB Vault |
| Growth AnnualMost Popular | Scaling Fintechs, Payments, SaaS | $11,550 / yr | ~$962/mo | 10 Users • 15 Projects • 500 Scans/mo • 8 VAPTs/qtr • 3 Frameworks • 25 GB Vault |
| Business AnnualRecommended | MFBs, Finance Houses, Regulated Fintechs | $27,000 / yr | ~$2,250/mo | 25 Users • 50 Projects • 1,500 Scans/mo • 20 VAPTs/qtr • 6 Frameworks • 100 GB Vault |
| Enterprise BespokeBespoke | Banks, Multinationals, Regulators | From $60,000 / yr | Custom SLA | Custom Users • Custom Repos • Custom Scans • Continuous VAPT • Sovereign On-Prem Enclave |
3Modular & A La Carte Pricing Schedule (Buy What You Need)
For organizations with targeted requirements, individual pillars can be licensed independently. Clients who bundle all three pillars unlock substantial commercial savings:
| Solution Pillar | Starter Scale | Growth Scale | Business Scale | Enterprise Scale |
|---|---|---|---|---|
| VAPT (Penetration Testing) | $1,800/yr | $3,600/yr | $8,000/yr | From $20,000/yr |
| Compliance & Audit Management | $1,800/yr | $5,000/yr | $13,000/yr | From $25,000/yr |
| SecOps & DevSecOps Scanning | $2,000/yr | $4,500/yr | $9,000/yr | From $22,000/yr |
| Combined A La Carte Value | $5,600/yr | $13,100/yr | $30,000/yr | From $67,000/yr |
| Full Platform Bundle Rate | $4,600/yr | $11,550/yr | $27,000/yr | From $60,000/yr |
| Full Platform Client Savings | Save $1,000 (17.9%) | Save $1,550 (11.8%) | Save $3,000 (10.0%) | Save $7,000 (10.4%) |
4Comprehensive Usage Allowances & Entitlement Matrix
| Entitlement Dimension | Starter | Growth | Business | Enterprise | Scope & Operational Guidance |
|---|---|---|---|---|---|
| Included Named Users | 3 | 10 | 25 | Custom | Named user accounts with role-based access control (RBAC). |
| Connected Projects | 3 | 15 | 50 | Custom | Connected repositories, web apps, or API workspaces. |
| Standard Scans / month | 100 | 500 | 1,500 | Custom | Completed automated SAST, SCA, secret detection, and PCI ASV readiness runs. |
| Concurrent Scan Slots | 1 | 3 | 8 | Custom | Parallel execution slots across pipelines and worker nodes. |
| Automated VAPTs / quarter | 2 | 8 | 20 | Continuous | Automated penetration tests with executive retest reports. |
| Compliance Frameworks | 1 | 3 | 6 | Unlimited | Independently assessed frameworks (NDPA, ISO, SOC 2, PCI). |
| Evidence Storage Vault | 5 GB | 25 GB | 100 GB | Custom | Cryptographically verifiable regulatory audit evidence vault. |
| Scan-History Retention | 90 days | 12 months | 24 months | 7+ Years | Longitudinal vulnerability telemetry and auditor trend lines. |
| Support SLA | Email (24h) | Priority (8h) | Priority+Onb. | 24/7 (15m P1) | Contractual response times with named account engineer. |
5Standard Add-On Catalog Rate Card
Add capacity as needed without requiring a tier upgrade:
| Add-On Item | Capacity Expansion | Annual Rate | Scope & Operational Benefit |
|---|---|---|---|
| Additional Users | +5 Named Users | $300 / yr | Expands seats across Developer, Auditor, or Executive roles. |
| Additional Projects | +5 Connected Projects | $600 / yr | Adds 5 repositories, mobile apps, or API targets. |
| Additional Standard Scans | +250 Scans / month | $1,200 / yr | 250 additional monthly completed scans for active CI/CD. |
| Additional Automated VAPTs | +4 VAPTs / quarter | $1,600 / yr | 4 additional bounded penetration testing assessments per quarter. |
| Additional Framework | +1 Framework | $1,500 / yr | One independently maintained compliance framework & controls. |
| Premium Onboarding Package | One-Off Package | $1,000 one-off | Dedicated security engineer onboarding, policy mapping & auditor prep. |
6Deployment Architecture & Code Sovereignty Guarantee
Multi-Tenant Cloud SaaS
Hosted on hardened AWS infrastructure in Europe / South Africa. Zero code retention: repositories cloned into ephemeral RAM containers and destroyed immediately post-analysis.
Instant ActivationCustomer-Controlled Scan Workers
Hybrid SaaS: management plane in cloud, scan workers deployed in customer VPC. Source code NEVER leaves the customer perimeter. Only vulnerability findings and SHA hashes egress.
Zero Code EgressSovereign On-Prem Enclave
100% air-gapped or private cloud deployment inside sovereign customer data center. For Tier-1 banks, central regulators, defense and national infrastructure.
Air-Gapped Sovereign7Service Level Agreements & Corporate Billing Coordinates
Incident Response SLAs
Corporate Banking Coordinates
Commercial Order Schedule & Client Sign-Off Form
To execute an annual subscription under this standard rate card, complete this section and return a countersigned copy to [email protected].