--- title: "37 of 105 security products print a price: the five basics, costed for 100 people" summary: "TechBag's count of endpoint, email, firewall, vulnerability and DLP products: who publishes a list price, who hosts in India, and a 100-person budget. September 2026." url: https://www.thetechbag.com/blog/5-security-services-tools-every-organization format: Analysis desk: "Security operations" published: 2025-02-25 facts_checked: 2026-09-30 author: TechBag (The TechBag Journal) tags: ["endpoint protection","EDR","email security","firewall","vulnerability management","DLP","pricing","India data residency","CERT-In","DPDP","GST"] cover: https://www.thetechbag.com/blog/covers/5-security-services-tools-every-organization.png --- # 37 of 105 security products print a price: the five basics, costed for 100 people *TechBag's count of endpoint, email, firewall, vulnerability and DLP products: who publishes a list price, who hosts in India, and a 100-person budget. September 2026.* Analysis · Security operations · By TechBag · Published 2025-02-25 · Facts checked 2026-09-30 · Canonical: https://www.thetechbag.com/blog/5-security-services-tools-every-organization The short version - Of the 105 products TechBag tracks across the five baseline security categories, 37 print a list price, and 23 of those 37 are endpoint products. Email, DLP and firewall are mostly quote-only.[1] - At published list prices, a 100-person company pays about US$18,800 a year before GST for endpoint, email, vulnerability scanning and DLP, with the firewall quoted separately. DLP, not endpoint, is the biggest line. - The 2023 list counted antivirus twice and named a ratings service. The one control Indian law actually spells out is 180 days of logs, kept in India, under CERT-In’s Directions of 28 April 2022.[8] In January 2023 this blog listed five security tools every organisation should have and named a vendor for each. The list was right in spirit and useless as a purchase order: it did not say what anything cost, which items overlap, or where the data would sit. The question an Indian IT head is actually asking is narrower. Which five things do I buy first, what will a company of my size pay for them, and which of them can I price without a sales call? This piece answers that from TechBag’s own guides, as of September 2026. ## The 2023 list counted antivirus twice The original named SecurityScorecard for risk and compliance, Data Resolve inDefend for data loss prevention, ESET and ZoneAlarm for antivirus and firewall, BlackBerry Protect for endpoint security and TitanHQ for email. Three years on, two of those five categories are one purchase. Every vendor in TechBag’s endpoint guide sells antivirus as the prevention tier of the same agent that does detection and response; the price gap between the tiers is the second job, not a second product.[1] The vendors have moved too. BlackBerry no longer owns its endpoint line: Arctic Wolf bought Cylance from BlackBerry, closing on 3 February 2025, and folded the products into its Aurora line.[6] Our earlier version itself described ZoneAlarm as protection for home and mobile computers. SecurityScorecard gives any organisation a free rating of its own domain and quotes every paid tier by the number of other organisations monitored, which makes it a third-party risk tool rather than a baseline control.[7] **Figure: Fold antivirus into endpoint, swap ratings for scanning, and the five become a different list** *The 2023 categories and vendors against the five baseline categories TechBag would buy, September 2026* The 2023 list - Risk management and compliance: SecurityScorecard - Data security and DLP: Data Resolve inDefend - Antivirus and firewall: ESET, ZoneAlarm - Endpoint security: BlackBerry Protect - Email security: TitanHQ The five, re-cut for 2026 - Endpoint protection: antivirus is the entry tier, EDR the upgrade - Email security on top of what Microsoft 365 or Google already filters - A firewall sized by its threat-inspected throughput, not the raw figure - Vulnerability management: scan your own estate before rating anyone else’s - DLP, once you have decided what sensitive means Source: TechBag browse guides for endpoint, email, firewall, vulnerability management and DLP · as of 30 September 2026 Our view Our view: security ratings belong in the vendor-onboarding process, not in the first five. The Indian regulators who name a control name scanning of your own systems: RBI’s 2026 Directions ask regulated banks for a vulnerability assessment every six months on internet-facing systems.[11] A rating tells you what the internet can see of your supplier; a scanner tells you what is unpatched in your own rack. ## Endpoint is the one open market, and detection costs three times prevention Of 36 endpoint products in TechBag’s guide, 23 publish a price, which makes endpoint the only one of the five categories where a buyer can build a budget from public pages.[1] The prices fall into two bands. Prevention, the job antivirus used to do, runs from US$42.20 a device a year for ESET PROTECT Entry to US$59.99 for CrowdStrike Falcon Go. Detection and response, the tier that records what happened and lets a person act on it, starts near US$180: US$179.99 for SentinelOne Singularity Complete at reseller list and US$184.99 for CrowdStrike’s Falcon Insight XDR bundle. On CrowdStrike’s own list, the second job costs 3.1 times the first.[1] **Figure: Prevention costs US$36 to US$60 a seat a year; detection and response starts near US$180** *Published US$ list price per device per year (Microsoft per user), entry tier of each product, as verified in August 2026* Microsoft Defender for Endpoint P1 per user US$36 ESET PROTECT Entry US$42.2 ESET PROTECT Advanced US$55 Bitdefender GravityZone Business Security US$57 CrowdStrike Falcon Go US$60 SentinelOne Singularity Complete EDR, reseller list US$180 CrowdStrike Falcon Insight XDR EDR US$185 | | Value (US$) | | --- | --- | | Microsoft Defender for Endpoint P1 | 36 | | ESET PROTECT Entry | 42.2 | | ESET PROTECT Advanced | 55 | | Bitdefender GravityZone Business Security | 57 | | CrowdStrike Falcon Go | 60 | | SentinelOne Singularity Complete | 180 | | CrowdStrike Falcon Insight XDR | 185 | Source: TechBag endpoint protection guide, vendor pricing pages verified 22 August 2026 · as of 30 September 2026 · Microsoft Defender for Endpoint P1 is US$3 per user per month standalone, and costs nothing extra when it comes inside a Microsoft 365 plan Our view Our view: a 100-person company with no one to read alerts should buy the prevention tier and spend the difference on a managed service, not on an EDR licence nobody opens. TechBag’s guide puts it bluntly: an EDR with no one to triage it is shelfware.[1] ## Everywhere else, the price is a conversation Outside endpoint, list prices thin out. Five of 22 email-security products publish one, two of 18 DLP products, and none of the 13 products in the firewall and network-security guide.[2] [4] [5] Vulnerability management is the partial exception, with 7 of 16, including Tenable Vulnerability Management from US$3,700 a year for 100 assets.[3] **Figure: Nearly two in three endpoint products print a price; for email and DLP it is one in four or fewer, for firewalls none** *Products in each TechBag guide with and without a published list price, count, as verified in August 2026* Endpoint protection 23 13 36 products Vulnerability management 7 9 16 products Email security 17 22 products DLP and insider risk 16 18 products Firewall and network security 13 13 products | | Published price | Quote only | | --- | --- | --- | | Endpoint protection | 23 | 13 | | Vulnerability management | 7 | 9 | | Email security | 5 | 17 | | DLP and insider risk | 2 | 16 | | Firewall and network security | 0 | 13 | Source: TechBag browse guides: endpoint (36), vulnerability (16), email (22), firewall (13), DLP (18) · as of 30 September 2026 The reasons differ by category. A firewall is an appliance plus a yearly protection bundle sold through the channel, so the price depends on the model and the partner.[5] Email filters are priced per mailbox but sold in suites whose awareness, DMARC and archiving pieces are separate SKUs.[2] DLP is quoted because the licence is the small number: the project is deciding what counts as sensitive, and the vendor wants to scope that before it names a figure.[4] A quote-only market is not a reason to avoid a category, but it changes how you buy it. Without a list price there is no anchor, so the first quote sets the frame for the rest. Ask at least two vendors in the same week for the same scope, written down: the number of mailboxes or users, the channels covered, the retention period and the hosting region. Ask each for the line items, not the total, because the add-ons named in the guides (awareness training, DMARC, archiving, a second console) are where two quotes for “email security” stop being comparable. And ask what the price becomes at renewal, in writing, before you sign the first year. TechBag countTechBag count 37 of 105 products, 35%, carry a published list price. For endpoint, email and vulnerability management we used each guide’s own “published” flag; the DLP and firewall guides have no flag, so we counted a product only where the guide records a figure from the vendor’s page or a public marketplace offer, not a reported estimate.[1] [2] [3] [4] [5] ## Where your security data sits is the other question nobody prints A security product holds the most sensitive log in the company: who logged in where, which file left, which mail was quarantined. India hosting for that data is documented for a minority. In endpoint, 10 of 36 products document an Indian data centre or an on-premises console, among them SentinelOne and Sophos in Mumbai and Seqrite in India; CrowdStrike announced an in-country cloud in January 2026 that the guide records as announced, not live.[1] In email it is 5 of 22, Proofpoint’s India data centre and Sophos Central in Mumbai.[2] **Figure: Fewer than two in five products in any category document hosting in India** *Share of products documenting an India data region or on-premises deployment, %, as verified in August 2026* Vulnerability management 6 of 16 38% Endpoint protection 10 of 36 28% Email security 5 of 22 23% DLP and insider risk 2 of 18 11% | | Value (%) | | --- | --- | | Vulnerability management | 38 | | Endpoint protection | 28 | | Email security | 23 | | DLP and insider risk | 11 | Source: TechBag browse guides for endpoint, vulnerability management, DLP and email security · as of 30 September 2026 · firewalls excluded: the appliance sits in your own rack. DLP counts India regions only; four more DLP products come from India-built vendors “Not documented” is not the same as “not available”. It means the vendor has not said so in writing, and an Indian buyer who needs residency should get it into the order form rather than the sales deck. Two questions settle most cases: which region the console and its telemetry are stored in, and whether support staff outside India can read that telemetry. The second matters as much as the first, and it is the one vendor pages answer least often. Our view is that the gap between categories is about deployment, not goodwill. Endpoint still offers on-premises consoles (the guide lists Seqrite, ESET PROTECT On-Prem, GravityZone, Check Point and FortiEDR among them), so a buyer who needs the data in India can keep it in the building.[1] Email security has no such fallback outside a few gateway appliances; 17 of the 22 products are marked unverified for India hosting.[2] ## A 100-person company, priced at list Take one published product per category for a company of 100 people and 100 devices: ESET PROTECT Advanced for endpoint, Proofpoint Essentials at its Business tier of US$2 a user a month for email, Tenable Vulnerability Management for 100 assets, and Safetica’s DLP at the bottom of its US$72 to US$144 per-user range.[1] [2] [3] [4] These are not recommendations; they are the products whose prices a buyer can see. **Figure: At list, DLP is the largest slice of a 100-person security budget, not endpoint** *US$ per year at published list price, 100 users or devices, before GST, as verified in August 2026* - DLP: SafeticaUS$7,200 38% - Endpoint: ESET PROTECT AdvancedUS$5,500 29% - Vulnerability: Tenable VMUS$3,700 20% - Email: Proofpoint EssentialsUS$2,400 13% | | Value (US$) | Share | | --- | --- | --- | | DLP: Safetica | 7,200 | 38% | | Endpoint: ESET PROTECT Advanced | 5,500 | 29% | | Vulnerability: Tenable VM | 3,700 | 20% | | Email: Proofpoint Essentials | 2,400 | 13% | Source: TechBag browse guides (ESET, Proofpoint, Tenable and Safetica list prices), TechBag arithmetic · as of 30 September 2026 · firewall excluded: appliance plus yearly bundle, quote-only. Safetica at the low end of its published range TechBag countTechBag count US$7,200 + US$5,500 + US$3,700 + US$2,400 = US$18,800 a year before tax; with 18% GST on a reseller invoice, about US$22,180. The firewall comes on top and cannot be priced from a public page. The order we would buy in follows the attack paths and the law, not the price: endpoint and email first, because they are where intrusions start and the cheapest to fix; logs next, because CERT-In requires them; scanning third; DLP last, after someone has written down what the company counts as sensitive. Bought in that order, the expensive line arrives when it can actually be configured. If you are buying this in India Two of these categories have published rupee prices from Indian vendors. Seqrite Endpoint Protection lists EPS Core at ₹799 an endpoint a year, so ₹79,900 for 100 devices, or ₹94,282 with 18% GST; Seqrite is not CERT-In empanelled, which matters only if a regulator asks for an empanelled auditor, not for the product.[1] Mitigata lists vulnerability assessment and penetration testing from ₹52,000.[3] Data Resolve, the 2023 DLP pick, is built in India and quotes in rupees.[4] Everything else on this page is US$ list, bought in INR through a reseller with 18% GST on the invoice, or bought direct on a card with IGST paid under reverse charge. The regulation that bites every company is **CERT-In’s Directions of 28 April 2022**: report a listed incident within six hours, and keep logs of all ICT systems for 180 days within Indian jurisdiction.[8] The **DPDP Rules**, notified on 13 November 2025, bring the duty to keep reasonable security safeguards into force on 13 May 2027; the 2023 Act sets penalties of up to ₹250 crore for failing it.[9] Regulated entities carry more: **SEBI’s CSCRF** has applied since 31 August 2025, and **RBI’s Directions of 31 July 2026** ask banks for six-monthly vulnerability assessments and annual penetration tests on internet-facing systems.[10] [11] How we did this Figures as of 30 September 2026 Counts come from five TechBag browse guides, product by SKU, as vendor-doc-verified on 22 August 2026 (endpoint, email, firewall, vulnerability management) and 24 August 2026 (DLP): 105 products in all. A product counts as priced where the guide marks a published list price or, for the two guides without that flag, records a figure from the vendor’s page or a public marketplace offer; reported estimates are excluded. India hosting uses each guide’s own field: an India data region or an on-premises console for endpoint, email and vulnerability management, an India region only for DLP; firewalls are excluded. The 100-person example multiplies published list prices and adds no discount; real quotes will differ. Prices are as verified in August 2026 and stated as of September 2026. No vendor was contacted. Spotted an error? Write to us; corrections are published at the foot of the piece. Sources 1. [TechBag, Endpoint protection (EPP, EDR, XDR) guide: 36 products, published prices, India hosting](https://www.thetechbag.com/browse/security/endpoint-protection) — vendor-doc-verified 22 August 2026 2. [TechBag, Email and collaboration security guide: 22 products, published prices, India data residency](https://www.thetechbag.com/browse/security/email-security) — vendor-doc-verified 22 August 2026 3. [TechBag, Vulnerability and exposure management guide: 16 products (Tenable VM from US$3,700 for 100 assets; Mitigata VAPT from ₹52,000)](https://www.thetechbag.com/browse/security/vulnerability-management) — vendor-doc-verified 22 August 2026 4. [TechBag, DLP and insider risk guide: 18 products (Safetica US$72 to US$144 per user per year)](https://www.thetechbag.com/browse/data-security-privacy/dlp-insider-risk) — vendor-doc-verified 24 August 2026 5. [TechBag, Firewall and network security guide: 13 products, none with a published price](https://www.thetechbag.com/browse/network-security-sase/firewall-network-security) — vendor-doc-verified 22 August 2026 6. [BlackBerry Ltd, Form 10-K for fiscal 2025 (sale of the Cylance endpoint security assets to Arctic Wolf completed 3 February 2025)](https://www.sec.gov/Archives/edgar/data/1070235/000107023525000068/bbry-20250228.htm) — fiscal year ended 28 February 2025 Integration into Arctic Wolf's Aurora platform as reported by SecurityBrief Asia, 10 February 2025. 7. [SecurityScorecard, pricing (free rating for your own domain; paid tiers quote-only, priced by organisations monitored)](https://securityscorecard.com/pricing/) — undated page 8. [CERT-In, Directions under section 70B(6) of the IT Act (six-hour reporting; 180-day log retention in India)](https://www.cert-in.org.in/Directions70B.jsp) — 28 April 2022 9. [MeitY, Digital Personal Data Protection Act, 2023 (Schedule penalties) and DPDP Rules, 2025 (notified 13 November 2025; substantive duties from 13 May 2027)](https://www.meity.gov.in/data-protection-framework) — 13 November 2025 10. [SEBI, Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities](https://www.sebi.gov.in/legal/circulars/aug-2024/cybersecurity-and-cyber-resilience-framework-cscrf-for-sebi-regulated-entities-res-_85964.html) — 20 August 2024; in force 31 August 2025 11. [RBI, Cybersecurity, Technology Risk and Resilience Framework Directions, 2026, via practitioner summary](https://taxguru.in/rbi/rbi-issues-commercial-banks-cybersecurity-technology-risk-resilience-framework-directions-2026.html) — 31 July 2026 RBI PDF not fetched. Related on TechBag: the [endpoint protection guide](https://www.thetechbag.com/browse/security/endpoint-protection) for every tier priced in US$ and INR, and the [SIEM and log management guide](https://www.thetechbag.com/browse/security/siem-log-management) for the 180 days of logs CERT-In asks for. **Disclosure.** TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view. Go deeper on TechBag - [Endpoint protection guide (EPP, EDR, XDR)](https://www.thetechbag.com/browse/security/endpoint-protection) — 36 products, prevention and detection tiers priced in US$ and INR - [SIEM & log management guide](https://www.thetechbag.com/browse/security/siem-log-management) — the 180 days of logs CERT-In asks for, priced by meter - [DLP & insider risk guide](https://www.thetechbag.com/browse/data-security-privacy/dlp-insider-risk) — 18 products, standalone against platform module, India-built options