Enterprise packet investigation · Pricing
Use the same evidence-backed RCA and security workflows in managed SaaS, dedicated SaaS, or your own infrastructure. Start with a representative capture, then qualify the operating boundary.
Two products · one platform
PacketSafari RCA and PacketSafari Security are distinct products for different investigation goals. They share the platform, evidence lifecycle, and deployment models.
Move from an operational question to preliminary direction, independent verification, and a report grounded in exact packet evidence.
ExploreInvestigate suspicious traffic and disputed control outcomes across signatures, behavior, policy context, wire actions, and exact packet evidence.
ExploreWhen a firewall, IDS, IPS, proxy, VPN, or application control reports a decision that does not match the observed outcome, validate the evidence chain as one qualified case.
Choose the operating model
Enterprise plans are annual, contact-sales offers. Capacity, usage, support, and deployment commitments are confirmed against representative workloads.
Managed team platform
For teams that want shared RCA and security investigations without operating a dedicated environment.
Isolated managed profile
For enterprises that need dedicated capacity, controlled AI routing, and an acceptance-tested operating profile.
Customer-controlled deployment
For sensitive, sovereign, or disconnected environments where packets, identity, storage, AI, and egress remain under customer control.
Teams SaaS, Dedicated Enterprise SaaS, and Enterprise On-Prem are presented with a qualified capture target of up to 1 GB per capture. The supported profile is confirmed against representative captures and the selected deployment before contract.
The differences that matter
RCA and Security stay grounded in reviewable packets across deployments. The operating boundary is what changes.
Managed EU or US service
Isolated managed environment
Customer controlled
Approved hosted routes
Customer-approved private route
Customer-operated endpoint
Shared service capacity
Reserved and contracted
Infrastructure defined
Team organization controls
Enterprise organization controls
Customer identity boundary
Organization policy
Contracted policy
Customer managed
PacketSafari managed
PacketSafari managed profile
Shared responsibility
What happens next
A concise evaluation path gives technical and commercial stakeholders the evidence they need without forcing a premature deployment or contract decision.
Start with the operational or security decision your team needs packet evidence to settle.
Review how PacketSafari moves from the capture to direction, independent verification, and a report.
Measure evidence quality, coverage, uncertainty, and time to a useful result on a known capture.
Agree deployment, data and AI boundaries, capacity, ownership, and the supported commercial profile.
Complete feature comparison
Review investigation, evidence, capacity, governance, AI boundaries, operations, integration, and support in one canonical matrix.
Get packet-grounded preliminary direction quickly when an outage, failed release, regression, or customer escalation cannot wait for a full deep investigation.
A preliminary result and later independent verification remain separate milestones in one investigation.
Compare different measurement points or good-vs-bad captures across timing, flows, protocols, and exact packet evidence.
Strong candidates are adopted, rebutted, contradicted, or marked inconclusive.
Email delivery remains subject to entitlement, consent, and deployment mail configuration.
The supported profile is confirmed against representative captures and the selected deployment before contract.
For full investigations on supported hosted OpenAI flagship routes. Availability is confirmed during qualification. OpenRouter and on-premises routes remain Standard.
Supported providers and models are confirmed for the selected deployment, investigation workflow, and evidence-quality requirements.
Compatibility, evidence quality, latency, and capacity are evaluated against the selected deployment before support is committed.
Reconcile the observed session, control decision, wire action, and endpoint outcome in one reviewable investigation.
Organization-visible captures, cases, tags, saved filters, investigations, chats, and reports stay in one governed workspace.
Start investigations and consume structured or report output without driving the browser.
Upload captures, launch analysis, and return SSE, NDJSON, JSON, or Markdown output.
On-premises releases can be delivered through a connected registry or a local offline bundle.
Frequently asked questions
For a deployment-specific answer, bring the data boundary, workload, and stakeholders that need to approve the operating profile.
PacketSafari is built for network, support, engineering, security, and assurance teams that need to turn complex packet captures into reviewable findings without losing packet-level evidence.
Material findings preserve reproducible pivots such as frames, filters, streams, decoded fields, and timelines so an analyst can inspect the basis of the answer.
Managed SaaS uses the standard PacketSafari-operated service. Dedicated SaaS is qualified around enterprise isolation, capacity, retention, and operations. On-premises runs inside customer-operated infrastructure and boundaries.
Yes. On-premises deployment is the appropriate path when raw packet evidence must remain inside customer-controlled infrastructure. Anonymization and approved AI-routing options can also be qualified for other deployment models.
Use a representative investigation your team already understands, then compare the direction, packet evidence, report quality, coverage, data boundary, and operational fit with your current process.
Enterprise pricing depends on deployment model, team scope, investigation capacity, storage and retention, implementation work, and specifically contracted operational requirements.
The security and Trust Center pages describe the current hosted and on-premises boundaries. Additional architecture, data-handling, and responsibility material can be reviewed during enterprise scoping.
Use your captures, questions, and boundary
Measure time to useful evidence, verification quality, investigation coverage, concurrency, recovery, and storage behavior against the workload production will require.
Request a demo