Service Tiers
Three tiers. One contract.
Start with CVE patches. Add architectural assurance when you need auditors satisfied. Add managed operations when you need us holding the pager.
OSSeva Patch
CVE remediation only.
Drop-in patched binaries for your EOL runtime, delivered quarterly or out-of-cycle for CVSS 9+ issues. Signed artifacts, repo manager integration, vulnerability disclosures.
- Quarterly CVE patches for all covered versions
- Signed artifacts (GPG + Sigstore)
- Helm / Maven / OCI registry delivery
- Vulnerability disclosure notifications
- Version compatibility matrix
- Architecture review
- Compliance attestations
- 24/7 managed operations
- Incident response SLA
OSSeva Assure
Patch + architecture + compliance.
Everything in Patch, plus an annual configuration and architecture review, version-upgrade planning, and the compliance documentation your auditors require.
- Everything in Patch
- Annual configuration & architecture audit
- Version upgrade planning & roadmap
- SOC 2 / HIPAA / PCI / ISO 27001 attestation package
- Pen-test validation summary
- Reference architecture for your deployment
- Named architecture consultant
- 24/7 managed operations
- Incident response SLA
OSSeva Operate
Full MSP. We hold the pager.
24/7 monitored operations, proactive incident management, and named senior engineers who know your system — with a 15-minute P1 SLA and quarterly business reviews.
- Everything in Assure
- 24/7 proactive monitoring & alerting
- 15-minute P1 incident response SLA
- Named senior engineer on your account
- Runbook authoring and maintenance
- Quarterly business reviews
- On-call escalation path to core contributors
- Capacity planning & scaling support
- Incident post-mortems & prevention
Need a one-off engagement?
Architecture audits, migration design, training, and hardening engagements are available as fixed-scope, fixed-fee professional services — without a recurring subscription.
See Professional Services →Not sure which tier fits your team?
The discovery call is free and takes 45 minutes. We scope your coverage needs and recommend the right tier — no pressure to sign anything that day.