Help Center← Back to Dashboard
Getting Started
What is Aithroyz?Quickstart: First EnvironmentCloud CredentialsPlans & Approvals
Environments
OverviewLifecycle PhasesTTL Auto-DestroyExtending TTLDestroying an Environment
Tools Reference
OverviewElastic Stack (SIEM)Wazuh (XDR)MITRE CalderaTheHive & DFIR-IRISVelociraptorOpenCTIGrafana + PrometheusShuffle SOARn8nUptime KumaLLM GatewayOpen WebUIFlowiseOpenClawOllamaQdrantLangfusePortainerGiteaSonarQubeCode ServerMattermostMinIOMetabaseHashiCorp VaultKeycloak SSONetBoxLocalStack
Access & Security
Google SSOTenant IsolationPasskeys & MFATeam Members
API & Integrations
API KeysMCP Tools (Clevername)Terraform ExportWebhooks & Callbacks
Stack Presets
SOC PlatformIR / DFIR LabThreat HuntingQuick Sandbox
Settings
Cloud KeysAPI KeysBillingAudit Log
Troubleshooting
Common IssuesDeployment FailuresDNS & ConnectivityTool Health Checks
Aithroyz Help
Help CenterSettingsBilling

Billing

Aithroyz is currently in private beta. Billing details will be available when the platform launches publicly.

During the private beta, Aithroyz is free to use. You are responsible for GCP compute costs incurred by deployed environments — these are billed directly to your GCP project, not through Aithroyz.

GCP cost estimates

Estimated hourly costs for common presets on GCP us-east1 (e2 instance family):

Quick Sandbox (Elastic only)$0.40–$0.60/hr
Threat Hunting (Elastic + Caldera + Grafana)$0.80–$1.20/hr
IR / DFIR Lab$1.00–$1.60/hr
SOC Platform (full stack)$1.50–$2.50/hr

Controlling costs

Use TTL auto-destroy
Set a TTL (4–72 hours) when creating a plan. Environments are automatically destroyed when the TTL expires.
Destroy when done
Use the Destroy button on the environment detail page to immediately tear down all GCP resources.
Use smaller presets
The Quick Sandbox preset costs 4–6x less than the full SOC Platform. Start small and scale up.
Set GCP budget alerts
In GCP Console → Billing → Budgets, set an alert threshold to get notified before costs exceed a limit.
ℹ
The cost estimate shown in the plan form is calculated before deployment and reflects the expected hourly GCP spend based on the selected tools and instance types.
Related Articles
TTL Auto-DestroyRead article →Cloud KeysRead article →