Every feature.Choose your server count. The same BHIM KVH protection in every plan. Pick 1, 3, or 5 self-managed Linux servers — features stay the same.
Single server For one Linux server.
$15 / month
1 server · All features included
Get started Full BHIM KVH feature set SSH brute-force and suspicious-login detection HTTP rate detection and DoS mitigation Scoped SSH / HTTP IP blocking Management allowlists and timed blocks File integrity baselines and verification Process and network monitoring Incidents, timelines, and local evidence Health checks and operational metrics JSONL and CSV exports Explicit snapshots, restore, and quarantine Optional kernel telemetry and process graphs Optional malware and vulnerability scanning Optional AWS WAF IP-set integration CLI control and offline-first operation 3 servers For a small infrastructure setup.
$25 / month
3 servers · All features included
Get started Full BHIM KVH feature set SSH brute-force and suspicious-login detection HTTP rate detection and DoS mitigation Scoped SSH / HTTP IP blocking Management allowlists and timed blocks File integrity baselines and verification Process and network monitoring Incidents, timelines, and local evidence Health checks and operational metrics JSONL and CSV exports Explicit snapshots, restore, and quarantine Optional kernel telemetry and process graphs Optional malware and vulnerability scanning Optional AWS WAF IP-set integration CLI control and offline-first operation 5 servers For your growing Linux fleet.
$35 / month
5 servers · All features included
Get started Full BHIM KVH feature set SSH brute-force and suspicious-login detection HTTP rate detection and DoS mitigation Scoped SSH / HTTP IP blocking Management allowlists and timed blocks File integrity baselines and verification Process and network monitoring Incidents, timelines, and local evidence Health checks and operational metrics JSONL and CSV exports Explicit snapshots, restore, and quarantine Optional kernel telemetry and process graphs Optional malware and vulnerability scanning Optional AWS WAF IP-set integration CLI control and offline-first operation Each server uses its own machine-bound license key. Optional capabilities require configuration and their own prerequisites. Kernel telemetry needs a supported BCC setup; vulnerability scanning needs a pinned Trivy binary and database; AWS WAF integration requires a separate reviewed plan and AWS credentials. DoS mitigation depends on your traffic path and configured controls.