Advice
Scoped fixed-price project
Pricing is based on the number of use cases, environments, workshops and the discovery work required.
View Advice →Transparent proposal model
Pricing is based on a scoped outcome, not an open-ended pool of hours.
The price is confirmed in the proposal once use cases, integrations, routing, testing and ongoing-service capacity are known. You can see the cost drivers before contacting us.
Three commercial models
The same AIM structure is reflected in the proposal.
The proposal separates Defense First's work, Tailscale licences, third-party costs, customer tasks and acceptance criteria.
Integrate
Scoped or phased implementation
Pricing is based on use cases, integrations, connectors, migration, testing and hypercare.
View Integrate →Manage
Onboarding and monthly service
Pricing is based on environment size, change demand, service reviews and operational responsibility.
View Manage →Cost drivers
Six factors change the delivery scope.
Tailscale licensing is affected by provisioned tailnet seats, tagged resources beyond the included allowance, ephemeral-resource usage and required plan capabilities. Defense First's work is sized primarily according to architecture, use cases and operational responsibility.
1. Tailnets and environments
The number of organisations, clouds, sites and administrative boundaries.
2. Use cases
Administrator, employee, vendor, machine, Kubernetes and other access paths.
3. Integrations
IdP, SCIM, MDM/EDR posture, SIEM, APIs, webhooks and automation.
4. Routing
Subnet routers, site-to-site, exit nodes, app connectors, high availability and DNS.
5. Testing and migration
Allow/deny, failure and recovery tests, plus the scope of parallel operation and decommissioning.
6. Ongoing capacity
Monthly changes, response commitments, reporting, reviews and documentation.
What the proposal includes
Scope, responsibilities and acceptance criteria before work starts.
- the AIM service and scoped use cases to be delivered
- Defense First and customer tasks
- deliverables and acceptance criteria
- licensing and third-party dependencies
- billing milestones, change-request model and validity
Customer ownership
The customer purchases the Tailscale licence directly and owns the tailnet, Git repository, policies and documentation. Defense First does not add a margin to the licence price.
What is not included
Licences and other platforms are separated from service work.
Tailscale licences, platform extensions, IdP, MDM, EDR, SIEM, cloud, device and travel costs, and third-party work are not included unless stated otherwise in the proposal.
Price on requestWe respond to assessment requests by the next Finnish business day at the latest. We do not request credentials, keys or detailed network information for the proposal.
Frequently asked questions
What does proposal-based pricing mean in practice?
Why are there no starting prices?
The same number of users can mean one straightforward use case or multiple clouds, connector models, integrations and approval chains. A scoped proposal is more useful than an apparently precise starting price.
Can the work be purchased by the hour?
The primary model is a scoped outcome. Approved changes beyond the scope and separate investigations may be billed as additional work according to the proposal.
Are Tailscale licences included?
No. The customer purchases licences directly from Tailscale, keeping the subscription, tailnet and contractual relationship under customer control.
How long is the Manage agreement?
The initial term is at least six months. One-time onboarding is required unless Manage starts immediately after an accepted Integrate delivery.
