Billing

This page explains the Billing tab: you add the machines you need and pay after, only for the hours they run. Your rates are on your Billing tab.

You use first and pay after

Add a card on the Billing tab (in the sidebar) and you can add machines straight away. You pay only for usage that already happened: we charge your card when your unbilled machine-hours reach a threshold, and on the 1st of each month for the rest of the month before. Each charge comes with an invoice-receipt by email.

Two things are counted, at the rates on your Billing tab:

How finely events are grouped into rows (your Unique event setting) changes what you see, never what you pay. Hours and days are counted in UTC.

One machine per service in containers

In containers, register one machine per service, not one per container. As a guide, one machine covers up to 10 running containers of that service, and a larger service registers more machines. See Use es-python in a container.

When a machine counts as on

es-python checks in with EyalSec every few minutes while it runs, so an es-python machine is billed for the hours it was actually running and not for the hours it was switched off. Products that check in only when they report something are billed for every hour they are installed. A machine you have added but not installed yet is never billed. A machine you turn off is not billed while it is off, and is billed again from the hour you turn it on. Deleting a machine stops its billing that hour.

The Billing tab lists this month's machine-hours, the cost of each machine and your rates.

How many machines a card holds

A card account holds up to 50 es-python machines. Several Python versions on one computer are one machine, and a machine you have turned off keeps its place. To add more, email sales@eyalsec.com and we will set up the rest.

The es-python detection allowance

Every hour an es-python machine is on adds to a detection allowance for the month, shared across all your es-python machines, so a busy machine draws on what a quiet one did not use. The Billing tab shows how much of it you have used.

Going over costs nothing in a month on its own. Only when you are over it two months running does the second month add a charge, on the detections above the allowance, up to a most per machine shown on your Billing tab. That amount:

• is its own line on your invoice, and you can question it by writing to support@eyalsec.com;
• rides on a machine-hours charge that is already due, and waits for the next one if there is none, so it never starts a charge;
• never counts toward your spend limit and never pauses your account. If a charge carrying it is declined, it comes off and we charge the machine-hours alone.

How many event rows a machine stores

Repeats of an event only raise its count, so a busy loop stays one row. Each machine stores up to 1,000,000 new event rows per calendar month (UTC). Above that, until the 1st:

• repeats of a stored event still raise its count;
• the first row of each new sink and severity on your account is still stored, so a flood cannot hide a new kind of finding;
• another new flow into a sink and severity already seen this month is counted, and not stored.

The Billing tab names any machine that has reached it. Detections are counted the same way whether or not a row is stored.

Add a card

Until there is a card on your account, you can sign in and look around, but adding a machine is refused with:

Add a card on the Billing page to add machines. You are charged only for the hours your machines run and what they detect.

1. Open Billing and fill in Billing details: the company or name, the address invoices go to, the country and, if you have one, your VAT or tax ID. These go on every invoice.
2. Tick the box to agree to the Terms of Service, the Refund policy and automatic charges to your card for your usage, and click Save details. The box is required: without it the details are not saved and no card can be added.
3. Click Add a card. A secure payment page opens and takes a small card check (₪1), the same kind of check many cloud providers make. Your card details stay with the payment provider; EyalSec keeps only the last four digits, the brand and the expiry date.
4. You come back to the Billing tab, which now says Active, and you can add machines. The card check is taken off your first bill.

The Service is sold to businesses, and you must be 18 or older to buy it. A card saved before the box existed keeps working; the box is asked for the next time you save your details.

Machines with a Raise policy

Every account can use Raise, which blocks a risky action instead of only reporting it. A machine with a Raise policy is billed at a higher hourly rate, shown on your Billing tab, only for the hours it has one, and only that machine. A machine has a Raise policy while a Raise rule is in effect on it, or a web protection setting blocks requests. Machines that only report stay at the base rate, and detections never cost more because of it.

The Billing tab shows the Raise machine-hours as their own line.

Credit

Any credit on your account comes off your bill first, before your card is charged. The Billing tab shows what is left. When the credit is used up, add a card so your machines keep reporting: without one, the account is paused until a card is added.

When we charge

• When machine-hours reach your threshold. The first threshold is $100 of unbilled machine-hours. Each time a charge goes through, it doubles, up to $2,000, so a growing account is charged less often.
• On the 1st. We charge the rest of the month before, detections included.

We never charge less than $10 at a time, to keep card fees off your bill. A month that comes to less is carried to your next charge and shown on the Billing tab; it is not a debt and never pauses the account.

The Billing tab shows what you have used this month, what is already charged, what is not billed yet, and the point at which we charge next. A month's charges always add up to exactly what the month's usage costs, however many there were.

Currency and taxes

Prices are in US dollars. Cards are charged in shekels at the Bank of Israel representative rate of the day of the charge, and every invoice shows the dollar amount, the rate and its date. We round in your favour.

Customers in Israel are charged VAT. Everywhere else, invoices carry 0% Israeli VAT as an export of services. A customer in the EU adds a company name and an EU VAT number, because the 0% rate with the reverse charge applies to EU businesses; invoices to the EU, the UK, Switzerland and Norway note that the reverse charge applies.

We cannot take card payments for some countries under sanctions rules. If yours is one of them, the Billing tab says so; email sales@eyalsec.com and we will tell you what we can do.

When the account is paused

If a charge is declined, or your credit runs out with no card on file, the account is paused at once until it is paid:

• new events are not collected, your machines stop accruing hours, nothing new can be installed or added, and most changes on the dashboard are refused;
• your applications keep running exactly as before: the agents simply keep the settings they already had;
• your data stays safe, and you can still sign in, read your events and use the Billing tab.

You stay in control of your machines while the account is paused. You can turn a machine off, uninstall or delete it, delete the account once nothing is owed, and change your filters, Raise and Don't send rules, web protection and outbound policy. An es-python machine picks up a turn-off or a changed setting at its next check-in. Other changes wait until the account resumes.

Resume

Open Billing: it shows the amount owed and what it will be charged as. Click Pay now to charge your card, or Replace card (or Add a card) to save one, which is charged for the amount owed as soon as it is saved. When everything owed is paid, the account resumes immediately. After a decline we also retry your card automatically one, three, five and seven days later.

Spend limit

A spend limit is optional. Set it in dollars a month on the Billing tab, for what your machine-hours cost, Raise included. We email you when the month reaches 80% of it, and at 100% new events pause and your machines stop accruing hours until the 1st. Detections are billed separately on the 1st, so what your machines detect can never pause your monitoring. Raise or remove the limit and collection resumes within minutes.

Stop or cancel

You can stop at any time, with no notice period:

• Delete a machine on the Machines page and its billing ends from the next hour. An es-python machine is also not billed for the hours it is switched off.
• Close your account by deleting it from Settings. Export anything you wish to keep first.

Usage up to the hour you stop is charged on the next bill, and nothing after it. When you delete the account, we first charge everything not yet billed, whatever the amount; if that charge does not go through, the account is not deleted until it is paid. Your invoices are kept, as tax law requires. To ask for a refund, write to support@eyalsec.com within 30 days of the charge; the Refund policy has the details.

When changes take effect

A new card, a payment or a product added to your account takes effect on the dashboard at your next page load. You do not need to sign out or reinstall anything on your machines. For anything about a bill, email support@eyalsec.com.