/ Surya pricing
What do you need running?
Priced for clinics, plants and the offices that run them. One invoice, published rates, no hourly engineering. This is regulated IT: the compliance platform is in every Endpoint agreement, priced as its own line.
Everything physical is yours, on your paper, at cost where Surya sources it. Surya operates it.
Four questions, each Yes or No. Each Yes adds the part of the standard that answers it, and the price follows.
Answer the four questions to see the price.
/ Rate card
Rate card.
Start here · A locker at every site
$2,000 per site per month, plus the locker
Standby at the site: $2,000 per site per month, any site type. The locker: $5,000 per site per year for the locker software license, drafted on signing and at each anniversary. The locker hardware is yours, passed through at cost as a one-time setup fee, sized and configured for the site: laptop bays, or mixed bays for edge devices. More than one make; the site decides. JML, without an identity team: $25 per person per month, $500 minimum per tenant, and $4,000 one-time per tenant to implement; with an identity team, by quote. An organization with its own identity team buys the sites alone: Standby and the locker license per site, replenishment on the meter, JML by quote.
Start with a locker at every siteSurya Endpoint
$100 per person per month
$100 per person from 50 people; one package to 50 at $5,000 a month. The locker operated at every site with 15 or more people, inside the seat price; smaller sites served from Research Triangle Park at the same price. The locker itself is yours: hardware at cost on your paper, software license $5,000 per site per year.
Regulated IT
Compliance platform (Vanta)
Compliance platform (Vanta): $12,400 per year at Vanta list, part of every Endpoint agreement, shown as its own line, drafted annually. Attestation audit excluded; engaged through Vanta's marketplace.
Surya Fabric
$250 per security appliance · $100 per switch · $50 per access point, per month
A managed network device is a security appliance (firewall or SD-WAN edge), a switch (campus or industrial; a stack member counts as a switch), or an access point. Cameras, phones, printers and sensors are not Fabric devices. No site flat rate, no plant flat rate, no floor.
Surya Server
$350 per server per month
Server operated (Windows or Linux): $350 per server per month. Patching, backup verified and restore tested, monitoring, access control, evidence into the compliance platform. On your hardware, in your Azure, or on Surya session hosts. Your application vendors (ERP, historian, practice management, imaging) stay yours; Surya is the operator they work with. Server takeover: $500 one-time per server; waived for existing accounts.
Surya Server profileSurya Standby
$999 / $1,999 per site per month, alone
Laptop site: office, branch. Critical site: clinic, dental, veterinary, plant floor, imaging, utilities, construction yards. $150 per swap when bought alone; swaps are included inside Endpoint and Fabric. The locker itself is yours: hardware at cost on your paper, software license $5,000 per site per year. Month to month, 30-day out.
Surya Agent Platform
$1,500 then $750 per month to 50 seats
$1,500 for months 1-12, $750 from month 13; 2x above 50 seats; a seat is a person on Endpoint ($3,000 then $1,500). One production function is included in months 1-12, built with you once the prerequisites are met. Function build (second and later functions) $4,000 each; catalogue function $500 per function per month. Base compute for the roster is Surya's and included. Client-specific agents run on your paper, in your Azure or on hardware at your site, operated by Surya; capacity beyond the included base is quoted.
Fabric devices
| Security appliance (firewall or SD-WAN edge) | $250 per device per month |
|---|---|
| Switch, campus or industrial (Catalyst, Meraki MS, Cisco IE; a stack member counts) | $100 per device per month |
| Access point | $50 per device per month |
| OT and CPS | $1,999 per site per month, with or without Fabric at the site |
One-time fees
| Endpoint tenant deployment | $7,500 per tenant |
|---|---|
| Endpoint additional site | $1,500 per site beyond the first |
| Fabric takeover, keep what you have | $2,000 per site |
| Fabric deployment, standard kit | $4,000 per site, also billed when a managed-in-place site moves to the kit. Equipment is a separate one-time purchase |
| Plant survey | $2,500, paid first and credited against the $4,000 deployment |
| Server takeover | $500 per server; waived for existing accounts |
| Function build (second and later functions) | $4,000 |
Move meter
| Kit and ship | $135 per device |
|---|---|
| Kitting | $25 per device |
| Box and retrieve | $110 per device |
| Receiving | $10 per device |
| Wipe with certificate | $20 per device |
| Reprovision | $95 per device |
| IMAC | $95 per device |
| Recycle handoff | $20 per device |
| Storage | $8 per device per month |
The move meter applies to shipped moves and mass deployment events, per device.
Terms
- Your paper: everything physical is yours, on your paper, at cost where Surya sources it: lockers, network kit, sensors, servers, dedicated compute. Surya operates it. Surya carries no equipment for you on its books.
- Term: 12 months for Endpoint, Fabric and Agent Platform, from the service start date; no ending early within the term. Renews for 12 months; 60 days' notice to end. Standby alone: month to month, 30 days' notice.
- Payment: by ACH draft from a US business account, authorized on signature. Each invoice is issued and drafted on its due date. India: e-NACH mandate, debited in INR at the rate on the debit date.
- Monthly services: drafted on the 15th of the month of service, on the counts in effect on the 1st of that month (people, managed network devices, sites).
- On signing: the one-time fees, the first month of service prorated from the service start date, and the compliance platform and any locker licenses for the year are drafted together.
- Pass-through: Microsoft, Azure and carrier charges are drafted with the monthly services at the vendor's price for that month.
- Counts: the 1st-of-month count is sent to you the same day; ten days to dispute a line before the draft.
- Failed draft: re-presented after 3 business days; a second failure suspends new work (moves, deployments, function builds; never leaver removals or recovery) until it clears.
- Prices: Surya's own lines are fixed for the term and may change at renewal with 90 days' notice. Pass-through lines move with the vendor.
- A person is a licensed user in your Microsoft tenant, billed on the count in effect on the 1st of each month.
- The standard kit and its spare set are a separate one-time purchase on your paper; deployment and monthly rates do not include equipment.
- When a managed-in-place site moves to the standard kit, the $4,000 deployment applies and the takeover fee is not credited.
- Outside the United States: same price per person. Lockers, spares and swaps are delivered in the United States; people elsewhere are served remotely.
- Existing accounts: an account Surya already operates moves to these prices without deployment or takeover fees. One-time fees apply only to sites moving to the standard kit.
- Agreements: master services agreement; business associate agreement where protected health information is in scope. SOC 2 Type II report under NDA.
- Administration and exit: you hold Meraki organization admin, with Surya as a delegated Meraki administrator, and you hold tenant global admin, with Surya operating through application identities you consent to; both are removed within five business days of exit with the configuration of record and the compliance evidence export returned.
- Compute: Base compute for the roster is Surya's and included. Client-specific agents run on your paper, in your Azure or on hardware at your site, operated by Surya; capacity beyond the included base is quoted.
- Locker license: $5,000 per site per year at every site with a locker, at every rung (A locker at every site, Standby alone, and Endpoint sites with 15 or more people), drafted on signing and at each anniversary; the locker hardware is yours, at cost on your paper.
- A locker at every site: month to month, 30-day out; the locker hardware is yours, passed through at cost; the locker license is $5,000 per site per year, drafted on signing and at each anniversary; on moving up to Endpoint the deployment fee is waived and the JML implementation credited.
/ Two ways in
Manage in place, or move to the standard kit.
Keep what you have
Surya takes over the supported network already at the site. $2,000 takeover per site.
Standard kit
Standardized equipment you buy as a separate one-time transaction, on your paper, through Surya or your own source; deployed site by site. The $4,000 deployment fee covers configuration, segmentation, failover, monitoring onboarding and acceptance; it does not include the kit.
Both paths use the same monthly device rates: $250 per security appliance · $100 per switch · $50 per access point, per month.
The two kits
- Full Meraki.
- Hybrid Meraki, with Cisco Catalyst switching cloud-managed from the Meraki dashboard.
Surya specifies, configures and operates the site network. The kit and its spare set, Meraki licensing, circuits and sensor platform are on your paper.
A quarter to a half less than a clinic group or plant under HIPAA or CMMC pays today
Modeled on published 2026 rate guides; your figure comes from the scope review.
Published 2026 managed IT rate guides put a HIPAA-scope or regulated-manufacturing seat at $160 to $250 per person per month, network devices at $25 to $75 each, compliance work (platform, annual risk analysis, penetration test) outside the seat, and projects and hourly at 30 to 50% on top. Surya is one invoice. Year one, both worked examples, at the midpoint of each band, servers included on Surya's side, no onboarding charged to an incumbent you already have.
| Line | Typical incumbent | Surya |
|---|---|---|
| Seat $165-250 (mid $207.50) | $112,050 | $60,000 |
| Network, 15 devices at $25-75 a month | $9,000 | $18,000 |
| Server operated | in seat | $4,700 |
| Compliance platform (the same platform at list on either side) | $12,400 | $12,400 |
| Locker licenses, two sites; lockers at cost on your paper | none | $10,000 |
| Projects and hourly, 30-50% on the seat | $33,615-56,025 | none |
| Deployment and takeover | $0 | $16,500 |
| Year one | $167,065-189,475 | $121,600 |
| Line | Typical incumbent | Surya |
|---|---|---|
| Seat $160-250 (mid $205) | $295,200 | $144,000 |
| Network, 22 devices at $25-75 a month | $13,200 | $21,000 |
| OT visibility operated (sensor platform on your paper either way) | hourly | $23,988 |
| Servers operated, four | in seat | $18,800 |
| Compliance platform (the same platform at list on either side) | not in seat | $12,400 |
| Locker license, one site | none | $5,000 |
| Projects and hourly, 30-50% on the seat | $88,560-147,600 | none |
| Deployment with survey | $0 | $11,500 |
| Year one | $396,960-456,000 | $236,688 |
Microsoft licensing is the same on both sides and is left out. Surya year one includes the one-time fees; the standard kit, where chosen, is a separate purchase on either side. Risk analysis and penetration testing are bought separately on either side and are left out. Clinic group 27 to 36% less; plant 40 to 48% less. Locker hardware is bought at cost on your paper and is left out. Shipped moves and mass deployment events are on the published meter on either side.
- https://mind-core.com/blogs/what-does-managed-it-services-cost-for-medical-practices
- https://uprite.com/hipaa-compliant-it-cost-texas/
- https://itbudgetcalculator.com/managed-services-cost
- https://atlantsecurity.com/learn/vciso-cost
- https://itsasap.com/blog/managed-it-manufacturers-cost
- https://expertip.net/what-should-managed-it-cost-for-a-manufacturing-company/
/ Beyond traditional IT / Pricing
How Surya is priced.
Entry components and operated products are purchases into the same Surya system: start with what you need and expand only when you choose. A quote lists only what applies to your scope. A component purchase may be licensing alone, equipment and setup, or a defined deployment. An operated product adds ongoing Surya operation. Every quote separates what Surya charges from what you own.
- No hourly engineering.
- No consulting blocks or retainers.
- No named-resource or per-engineer pricing.
- No charge for access to people.
Surya Control is not sold separately. It is the operating layer included with the Endpoint workstation service and with Fabric, and it is how the agents are held: routine work on the approved list, consequential changes only with your named owner. Standby on its own does not include it. Room deployment and management have their own scope; workstation and site-network services are purchased separately. Surya Standby, Surya Endpoint and Surya Fabric are the products; Surya's IT agents, backed by Surya's human team 24/7, are how they are delivered. Surya Agent Platform is bought on its own as the Microsoft foundation for the business agents your team builds.
/ How to start
Six steps from the outcome you need to the next site.
/ 01
Pick the outcome
Standby keeps sites working, Endpoint keeps people productive, Fabric keeps sites connected. Each can be bought directly.
/ 02
Check fit and your sites
Qualification checks your sites against the product standard: which products, how many sites, the named agents that deliver them, and whether your team will build its own agents on the platform.
/ 03
One written quote
Only the purchased scope: the products, the sites, the agents that deliver them, and the platform where your own agents are in scope.
/ 04
Setup
Install to the standard. The tuning session: names, how they speak, where they hand off to a person. If the platform is in scope, your first own agent is built with Surya in the room.
/ 05
Day one
The purchased scope is ready and its agents are in Teams, backed by Surya's human team, 24/7. Where physical recovery is included, the agreed replacement stock and storage are in place.
/ 06
The next site
The same products and the same standard, one site at a time.
What you buy, hire by hire
Choose the job you need done. Your quote identifies the Surya products, site equipment and permissions required to deliver it.
A plant group
- Mara - The swap: Surya Endpoint for the workstations in scope. Scope Mara →
- Dale - The door: Supported Surya Endpoint scope for joiners and leavers. Scope Dale →
- Ruth - The network: Surya Fabric for the site network in scope. Scope Ruth →
- Sol - The floor boundary: Surya Fabric with the purchased OT and CPS scope. Scope Sol →
- Wes - The night shift: Supported Surya Endpoint scope for after-hours requests. Scope Wes →
A clinic group
- June - The front desk: Surya Endpoint for the workstations in scope. Scope June →
- Ana - Provider IT onboarding: Supported Surya Endpoint scope for provider joiners and leavers: devices, accounts and approved access, not professional credential verification. Scope Ana →
- Theo - The clinic network: Surya Fabric for the site network in scope. Scope Theo →
- Nora - The access keeper: Supported Surya Endpoint scope for identity, access and its evidence. Scope Nora →
- Sam - The night shift: Supported Surya Endpoint scope for after-hours requests. Scope Sam →
Hires that share a product share one purchase, and recovery already included in Endpoint or Fabric scope is not a second purchase. Choosing hires is an enquiry, not an order: qualification confirms the supported scope. Surya Agent Platform can be bought on its own. Every agent on it, Surya's and yours, runs under identities in your own Microsoft 365 tenant that your administrator can see, audit and revoke, and under Surya Control.
Component purchases can work alongside your existing platforms, providers and contracts. Compatibility and any transition work are confirmed before expanded scope is accepted. Expansion is optional.
/ What a quote contains
Each applicable line shown separately, never blended into one number.
Optional Surya operation
Where an operated product is purchased, ongoing operation of that scope. Surya Control is included only with the Endpoint workstation service and Fabric; it is not a separate purchase. Other component operation follows its own written scope.
Defined setup or deployment
Where setup or deployment is purchased, a fixed fee for the declared scope, quoted and agreed before the work starts. A licensing-only order has none.
Hardware and equipment
Purchased component hardware, such as a smart locker or Neat devices, is owned by you. Endpoints and spares for Standby and Endpoint are purchased and owned by you. Where Surya operates a recovery arrangement, the locker is yours too: hardware at cost on your paper, operated by Surya, with the locker software license per site per year. For Surya Fabric, The standard kit and its spare set are purchased by you as a separate one-time transaction, on your paper; deployment and monthly rates do not include equipment. Ownership and exit terms are set out in the written proposal and agreement.
Vendor licensing and renewals
Microsoft 365 at Microsoft list, through Surya CSP, a licensing channel only, or kept with your current source, the same price either way. US numbers and calling at the carrier rate. Equipment, circuits and sensors on your paper.
AI, cloud and backup consumption
Azure consumption at cost plus 20%, limited to session hosts and their networking.
Freight and logistics
Shipping, field response and site logistics are confirmed for the declared sites during qualification.
Not every order contains every line. A licensing-only order is the license and its agreed subscription support; a component deployment adds equipment and setup; an operated product adds ongoing Surya operation. Software licensing, and AI, cloud and backup consumption apply only to the purchased products that require them. Surya Standby on its own does not carry a Microsoft, Intune, Autopilot or Claroty license requirement; those licenses apply where Surya Endpoint or Surya Fabric is in scope.
Figures are confirmed in a written quote against a declared scope. Nothing here is a final term; commercial terms come from the approved agreement.
/ What is being priced
Component purchases and operated products.
Surya Standby
Standby
Protect revenue and customer commitments by keeping your sites working when critical equipment fails.
See the productSurya Endpoint
Workstation service: Endpoint, Standby and Control. Conference rooms: room scope only
Keep your people productive with ready devices, secure access and meeting rooms that work, and keep control of company access and data through every hire, role change, and departure.
See the productSurya Fabric
Fabric, Standby and Control, with OT and CPS security where applicable
Keep every location operating securely and at full speed, with network capacity and resilience that support your growth.
See the product/ The stack
One stack.
Each one can be bought directly and works with what you already run.
Standby, Endpoint and Fabric together are Surya Foundation →/ How a quote is produced
A declared scope comes before a number.
/ 01
Qualify
Your environment is compared against the released profiles, and any prerequisite is named and owned.
/ 02
Declare the scope
The products, sites, users, endpoints and site options that are in scope are written down.
/ 03
Quote
One written quote for that scope, listing only the items that apply: licensing, equipment, setup or deployment, renewals and any Surya operation.
/ 04
See what you carry
The same quote lists the hardware, licensing, consumption and freight you purchase directly.
Every quote states these plainly.
- Which elements and quantities are in the declared scope
- What Surya charges, split into one-time and any recurring items
- Which third-party purchases and usage charges you carry directly
- Who owns the equipment, the spares, the locker and the operations appliance
- Shipping territory and response windows for the declared sites
- Billing units, growth rules and support coverage
/ Clean ownership
Clear ownership. Clear responsibility.
You own
- Microsoft and other software licensing on your agreements, whether quoted through Surya or sourced elsewhere
- Everything physical, on your paper: smart lockers, Neat devices, network kit, sensors, servers, dedicated compute, and endpoints and spares for Surya Standby or Surya Endpoint
- AI, cloud and backup consumption accounts
- Internet circuits and carrier relationships
- Your data, your tenant and every access decision
Surya owns
- The product software, standards and released profiles
- The automation and operating logic behind them
- Deployment artifacts, releases and orchestration
- The methodology that keeps every customer on one standard
Your data, tenant, licensing and customer-owned equipment remain yours. For Surya Fabric, The standard kit and its spare set are purchased by you as a separate one-time transaction, on your paper; deployment and monthly rates do not include equipment.
Your proposal identifies the Vanta licensing, reporting setup and any independent assessment fees required for your scope.
Know the whole commitment before you sign.
Contract terms, remedies and exit treatment come from the approved agreement. Nothing on this page is a final term.
/ Straight answers