Starter
USD 750 / month
4,000 tokens / month
- 1 managed product
- Up to 5 named external targets
- Up to 1 repository
- Up to 1 scoped check cycle per month
Mithril Fund · Continuous Security
Use Mithril service tokens for scoped security checks, assessments and expert support. Choose the work that addresses your next security priority.
Web, API, mobile, desktop, IoT, cloud, identity, development infrastructure, AI and governance. Supported methods and availability are confirmed for your environment.
Choose a service budget, then decide how to use it. All prices exclude applicable taxes.
USD 750 / month
4,000 tokens / month
USD 2,500 / month
16,000 tokens / month
USD 6,500 / month
40,000 tokens / month
From USD 15,000 / month
96,000 tokens / month
Managed asset and cycle limits bound the scope; they do not promise a complete assessment of every asset each month. Enterprise custom scopes and pricing require a written estimate.
Allocate tokens to diagnostic services and expert support. A balanced mix can be a useful starting point; your risks and priorities determine the allocation.
Expert support pack: 2,000 tokens. Each pack covers 60 minutes of total professional work, including preparation, validation, review and notes. The estimate specifies how much is meeting time.
Service estimates depend on target count, build, depth and execution limits. Tool-specific token rates are being calibrated and are confirmed in your estimate. Required validation and report quality review are part of an assessment’s quoted scope.
4 packs · 4 total professional hours
8,000 tokens allocated to expert support
8,000 tokens remaining for services
This is a planning example, not a purchase or reservation. Expert work requires a confirmed appointment; your balance alone does not reserve time.
Prioritize authorized exposure, repository or configuration checks. Each estimate defines targets, execution limits and the result you receive.
Agree a tested build, methods, coverage and report. Required human validation and quality review are included in the assessment estimate.
Use packs for design questions, threat modeling, findings review and additional remediation support, within an agreed delivery window.
Automated check results and human-validated assessments are identified separately. A clean result is not proof that an environment has no vulnerabilities.
Web/API work maps to OWASP ASVS and WSTG; mobile to MASVS and MASTG; desktop to TCASVS and platform guidance; IoT to applicable ISTG, NIST and ETSI requirements. Each engagement identifies the exact standard version, tested build, evidence, exclusions and unknowns.
Full assessments, regulatory TLPT, certification, specialist physical testing, 24/7 monitoring and incident containment require separately qualified arrangements.
Discuss the next security decision your team needs to make. We will confirm scope, suitable services and availability before an agreement or payment.
Book a free scoping sessionProvide high-level business information only. Confidential technical materials use an agreed private channel.