Skip to content
DrillProof

Two dials. No surprise bills.

You pay for the assurance work per workload, and for how much you retain. The only question that changes your storage rate is whose account the backups sit in.

Dial 1Same in both tiers

Platform fee

$8/ workload / mo

Scheduled DR drills, recoverability evidence and reports, alerting. A workload is one logical protected thing — an EKS namespace or app, a volume set, or a database.

This does not change between BYOC and Hosted, because the drill-verify-prove work happens either way.

Dial 2Differs by tier

Storage fee

BYOCmanagement fee
$5 / TB / mo
Hostedstorage included
$18 / TB / mo

Per TB retained after lifecycle tiering. This is the only figure the deployment tier moves — and it moves for one reason: whose account holds the backups.

Indicative·Every figure on this page is a placeholder while we work with design partners. Book an audit and we will quote against your actual footprint.

Whose account holds the backups?

That is the entire difference between the two deployment tiers. Everything in the assurance layer is identical.

  • Bring your own cloud

    Recommended

    Runs in your account. Your data never leaves your region.

    Backups live in
    Your cloud account
    Storage paid by
    You, billed directly by AWS

    Platform $8/workload

    Storage $5/TB

    • Restore points stay in your account and region
    • You own the S3 bucket, the Object Lock policy, and the KMS keys
    • DrillProof charges a smaller per-TB fee to manage storage it does not own
    • Losing DrillProof does not strand your backups

    Best for: Teams with sovereignty, residency, or security-review requirements — and anyone who wants the storage line on their own bill.

    Get a tailored quote

  • Hosted

    We carry the storage. You carry nothing.

    Backups live in
    DrillProof's storage
    Storage paid by
    DrillProof, included in the per-TB fee

    Platform $8/workload

    Storage $18/TB

    • No bucket, lifecycle policy, or retention config to run
    • Immutability and encryption are managed for you
    • One predictable invoice instead of a storage line on your cloud bill
    • Higher per-TB, because the fee includes the storage itself

    Best for: Teams who would rather not run backup storage at all, and are comfortable with backups living outside their account.

    Get a tailored quote

Recovery tiers

Orthogonal to the choice above: pick this on how fast you need to be back. It multiplies the platform fee and leaves your storage dial alone.

  • Backup & Restore

    Restore when you need it

    1×platform fee

    RTO
    Hours
    RPO
    Hours

    Immutable backups of EKS, EBS and RDS with scheduled drills proving each restore point is recoverable.

    • Immutable backups (S3 Object Lock)
    • Scheduled restore drills + evidence
    • Cost-tiered storage lifecycle
    • Recoverability Score

  • Pilot Light

    Most chosen

    Core services stay warm

    2×platform fee

    RTO
    Tens of minutes
    RPO
    Minutes

    Critical data continuously replicated and a minimal footprint kept ready, so recovery is a scale-up rather than a rebuild.

    • Everything in Backup & Restore
    • Continuous replication of critical data
    • Pre-provisioned minimal footprint
    • Drill reports per recovery path

  • Warm Standby

    Scaled-down copy, always running

    3×platform fee

    RTO
    Minutes
    RPO
    Seconds to minutes

    A running, scaled-down copy of the workload in a second region, drilled on a schedule with documented failover.

    • Everything in Pilot Light
    • Always-running standby in a second region
    • Scheduled failover drills
    • Evidence pack for auditors

Available on both BYOC and Hosted. See how drills work

What it looks like on a real footprint

Same 12 workloads and 20 TB, both tiers, Backup & Restore. The platform side does not move.

On BYOC you also pay AWS directly for the underlying storage, which is not shown here because it lands on your cloud bill and you can audit it yourself.

Indicative monthly cost comparison for 12 workloads and 20 TB retained.
12 workloads · 20 TBBYOCHosted
Platform · 12 × $8$96$96
Storage · 20 TB$100$360
DrillProof total / mo$196$456
+ your AWS storage billyesnone

Arithmetic on indicative placeholder rates — not a quote.

Questions a skeptic asks

If the answer here is not enough detail, the security page goes further.

What is the actual difference between BYOC and Hosted?

Only one thing: whose account holds the backups. On BYOC they live in your cloud account, you pay AWS for that storage directly, and DrillProof charges a smaller per-TB fee for managing storage it does not own. On Hosted they live on DrillProof's storage, so our per-TB fee is higher because it includes the storage itself. The platform fee, the drills, the evidence, and the alerting are identical either way.

Does my data leave my cloud?

On BYOC, no — backups, snapshots, and restores all stay in your own AWS account, in the region you pin them to, and the control plane holds only metadata. On Hosted, backup data is deliberately stored by DrillProof; that is the trade you are making for not running storage yourself. If data residency matters to you, choose BYOC.

What counts as one workload?

One logical protected thing: an EKS namespace or application, a volume set, or a database. A cluster running eight applications is eight workloads if you protect all eight, not one. We would rather you counted it the same way we do, so a quote does not move after the audit.

How does the recovery tier affect the price?

It multiplies the platform fee, and nothing else. Pilot Light and Warm Standby keep more infrastructure ready and drill more recovery paths, which is more assurance work per workload. Your storage dial is unaffected — that still depends only on how much you retain and which deployment tier you are on.

How do you access my account?

Through a cross-account IAM role that you create, scoped to backup and restore operations and gated behind an external ID unique to you. There is no console user and no long-lived access key. Delete the role and our access ends immediately.

What exactly is a drill?

A real restore. DrillProof recovers your latest restore point into an isolated, throwaway environment, asserts that volumes mount and databases accept connections, records how long it took, then destroys the environment. Production is never touched.

Is this AWS-only?

Yes, at launch. We cover Amazon EKS, EBS, and RDS today, with EFS, DynamoDB, S3, and SaaS sources on the roadmap. We would rather support one cloud properly than claim several.

What happens to my backups if I stop paying?

On BYOC they are already in your account under your own Object Lock retention policy — DrillProof stops orchestrating and your restore points stay exactly where they are, restorable with standard AWS tooling. On Hosted, we will export them to a bucket you nominate before the account closes.

Get a quote against your real footprint

The free audit tells us your workload count and retention, so the number we give you is the number you would pay.

Book a free audit