TWO PLANS. A CLEAR CHOICE.
Evidence is essential.
Depth is your choice.
One managed service. Two subscription plans. No per-event, per-log or per-export pricing maze.
THE EVIDENCE FOUNDATION
Core
Capture, preserve and prepare. A complete evidence-readiness foundation for MSPs.
Talk to 170tarv for pricing and onboarding
Request proposal →- Command, Incident Command and Assurance dashboards
- Workspace Admin, billing and account functions
- Microsoft Entra and Sentinel ingestion
- Raw capture, hashing, provenance and normalised events
- Basic incident timelines, chronology and reporting clocks
- Basic assurance and control visibility
- Standard signed evidence reports and verification manifests
- Standard retention and support
- Essential procurement documents and a signed trust pack
- Quote-led onboarding
THE FULL INCIDENT EVIDENCE BLACK BOX
Blackbox
Reconstruct serious incidents. Explain customer impact and the evidence behind each conclusion.
Talk to 170tarv for pricing and onboarding
Request proposal →- Everything in Core
- ConnectWise PSA and NinjaOne RMM integrations
- PSA/RMM/customer mapping and advanced blast radius
- Downstream customer impact and frozen resource scope
- Full incident reconstruction and evidence-backed findings
- Human decision rationale and obligation reasoning
- Confirmed, suspected and unknown findings with an uncertainty register
- Premium signed bundles and independent verification
- Full evidence index: hashes, provenance and timestamps
- Cited AI reconstruction, gap detection and report assistance
- Advanced assurance, incident workflows and regulator/customer report packs
- Full procurement pack with recovery, retention, service and insurance disclosures when available
- Longer retention, priority support and guided onboarding
COMPARE THE DEPTH
The same foundation.
More depth with Blackbox.
| Capability | Core | Blackbox |
|---|
| Evidence foundation | Microsoft-first capture, preservation, hashes and provenance | Everything in Core, plus PSA/RMM sources and customer mapping |
|---|
| Incident operation | Status, basic timeline, chronology and reporting clocks | Full reconstruction, findings, decisions and obligation reasoning |
|---|
| Customer impact | Evidence-readiness visibility | Advanced blast radius, customer impact and preserved scope snapshots |
|---|
| Reports and proof | Standard signed report and verification manifest | Premium signed bundle, full evidence index and independent verification |
|---|
| Assurance | Basic controls and evidence-support visibility | Advanced mappings and premium regulator/customer report packs |
|---|
| Investigation assistance | Human-led incident operation | Cited AI assistance for reconstruction, gaps and report drafting |
|---|
| Procurement | Security, data handling, access, verification and essential legal disclosures | Full trust pack with detailed recovery, retention, service and available insurance records |
|---|
| Retention and service | Standard retention, support and quote-led onboarding | Longer retention, priority/deeper support and guided onboarding |
|---|
Core gives you a complete readiness foundation. Blackbox adds the deeper reconstruction, customer impact and verification your most serious incidents demand.
Find your plan with 170tarv →Annual commitment.
Flexible payments.
Contracts are quoted in GBP for an annual term, payable monthly, quarterly or annually as agreed in your proposal. Paid pilot options and any conversion credit are agreed in writing. 170tarv manages activation, connector operations and commercial entitlements. Your team sees service health, reviews evidence, handles billing and requests changes. Vendor consent stays with your administrators.