Less operational effort
Inventory, prioritization and investigation in one place: fewer hours cross-referencing spreadsheets and logs.
EDR · VULNERABILITY MANAGEMENT · ZTNA
dome — EDRby 33TSConnected security.
You stay in control.
See where vulnerabilities are, investigate threats and control who accesses your systems. EDR, vulnerability management and zero trust in one agent.
AI investigates. You choose: human approval or autopilot.
FOR IT AND SECURITY TEAMS · FROM 25 ENDPOINTS
dome / SECURITY OPERATIONS
EXPOSURE
15critical patches
THREATS
1awaiting approval
ACCESS
42ZTNA sessions
REAL PRODUCT SCREENSHOT · ILLUSTRATIVE METRICS33TS / LONDON
01 / VISIBILITY
Prioritize the flaws that matter.
02 / RESPONSE
Evidence before action.
03 / ACCESS
Only the authorized resource.
Fewer disconnected tools. More context.
A flaw in the scanner. An alert in EDR. A connection through the VPN. When signals are separate, your team has to reconstruct the story. dome brings that context together to support decisions.
EDR
Vulnerability scanner
Patch / RMM
VPN / ZTNA
Inventory
Compliance spreadsheet
BUSINESS OUTCOMES
Less risk, less effort, more predictability.
At the end of the day, a company does not want to buy an EDR or a ZTNA. It wants to reduce risk, keep the operation running and justify the investment. dome connects the technology to that outcome.
Faster response
AI correlates signals and presents evidence; decisions take minutes, not days.
A justifiable investment
One agent and one console instead of several tools, with a clear per-endpoint cost.
Presentable results
Gaps, evidence and audit reports ready to show results to the board.
01 / THE PLATFORM
Visibility. Response. Access.
One shared operational view.
EDR, vulnerability management and zero trust connected in one agent. Less context lost between tools.
Exposure & Vulnerability Management
EXPOSE
- Asset and software inventory; pending patches, EOL and deny lists.
- Shadow IT and Shadow AI: apps and AI outside the team’s view.
- Real risk: exploitability + exposure + asset criticality.
Simply put
See which machines have flaws and what to fix first. EOL means end of vendor support; a patch is an update that closes the flaw.
EDR + AI investigation
DETECT & RESPOND
- C2 beacons, DGA, credential theft and lateral movement.
- AI correlates signals and presents evidence for decisions.
- Kill a process, quarantine or isolate: with your approval or on autopilot, your choice.
Simply put
Spot signs of intrusion, gather evidence and recommend a response. You choose whether each action waits for approval or runs immediately.
Native ZTNA
CONTROL ACCESS
- Internal resources without a VPN or opening the whole network.
- Posture on every connection: a missing critical patch blocks access.
- Temporary third-party access with automatic expiration.
Simply put
Grant only the approved system to a verified person on a secure machine. If the machine becomes unsafe, access is blocked.
Compliance & Strategy
Audit evidence, immutable trail and financial risk with FAIR / ROSI. The technical view, translated for decisions.
The closed loop.
From a flaw to restored access, with context and the level of autonomy you set.
- 01
Vulnerability found
- 02
Attack attempts exploitation
- 03
dome detects; AI explains
- 04
You approve (or autopilot)
- 05
Machine isolated; ZTNA revoked
- 06
Patch applied
- 07
Access restored
- 08
Audit report
03 / ONE AGENT VS. SEPARATE TOOLS
What you gain with dome
instead of stitching several tools together.
Protection, vulnerabilities, patching and access are usually bought separately. See the difference in your team’s routine.
FunctiondomeSeparate toolsWhat you gain
Agents on devices
dome · One agent for protection, vulnerabilities, patching and access.
Separate · One agent per tool, each with its own install, updates and conflicts.
Gain · Simpler rollout and less load on devices.
Dashboards and consoles
dome · One screen with inventory, alerts, flaws and access.
Separate · One console per vendor; the team cross-references data by hand.
Gain · Less time switching screens and rebuilding context.
From alert to fix
dome · Detection, AI investigation and remediation in one flow.
Separate · The alert starts in one tool, the patch in another, access in a third.
Gain · Faster response, without handing the case between systems.
Who decides the response
dome · Human approval or autopilot, configured by the customer.
Separate · Different automation rules in each tool.
Gain · One policy, with every decision logged.
Contracts and licenses
dome · One contract, priced per endpoint.
Separate · Several contracts, renewals and billing models.
Gain · Predictable spend that is easier to justify.
Reports and audit
dome · Evidence of protection, fixes and access in one place.
Separate · Reports exported from each system and merged by hand.
Gain · Accountability ready for leadership and auditors.
A comparison of functions, not performance. Gains depend on your environment and plan; zero-trust access is in the Complete plan.
AI GOVERNANCE
Autonomy with control.
In a corporate environment, a misfired automation can be as serious as an incident. That is why dome makes explicit who decides what — and logs every step.
What AI does
It investigates, correlates signals, prioritizes vulnerabilities and recommends responses — always with evidence.
What you decide
Each response action waits for your approval — or runs on autopilot, if you configure it that way. By policy, by severity, by environment.
Traceability
Every decision, human or automatic, is logged with the evidence behind it — ready for auditing.
Reversibility
Isolating a machine is not a one-way street: once the issue is fixed, access is restored and the history is preserved.
INTEGRATIONS
Build on what you already have.
A company that has already invested in technology will not replace everything at once. dome is designed to work alongside your environment — and native integrations are expanding. Bring us your scenario.
SIEM
dome events and verdicts sent to your SIEM for central correlation.
ITSM
Tickets opened with context: evidence, affected machine and recommended action.
Identity directory
Identity as the basis for access: groups and accounts from the directory you already use.
Hybrid environments
Endpoints, servers and cloud under the same inventory and the same policies.
How it works
AI investigates. You approve — or switch on autopilot. The agent executes.
- 01
Agent detects suspicious behavior.
- 02
AI correlates signals: C2 communicates with the attacker; DGA generates domains to conceal that communication.
- 03
You review the evidence and approve — or, on autopilot, dome acts right away.
- 04
Process stopped, file quarantined or machine isolated.
- 01
Identity verified with a certificate and MFA — more than one proof of identity.
- 02
Agent checks updates and machine security.
- 03
Encrypted connection only to the approved resource.
- 04
Each connection is recorded for auditing.
- 01
ERP access for 14 days, limited to an authorized machine.
- 02
Posture checked on every connection.
- 03
Access expires on schedule or when the machine becomes unsafe.
- 01
A CVE — a publicly identified security flaw — is published.
- 02
dome checks the alert against inventory in minutes.
- 03
Affected machines listed; patch proposed.
- 04
You approve remediation.
- 05
Unpatched machines lose access to sensitive systems until fixed.
Investigation example: unsigned process + C2 connection + credential access.
Verdict: MALICIOUS · 95% confidence · awaiting approval
SOLUTIONS BY CHALLENGE
Before and after dome.
Illustrative use scenarios; results depend on the environment.
Ransomware response
BEFORE
A malicious file goes unnoticed; hours later, the ransom demand appears.
AFTER
AI flags the process and connection; the team approves stopping it before encryption. After hours, autopilot can act without waiting for anyone.
Audit
BEFORE
Weeks collecting tickets and spreadsheets.
AFTER
Reports gather gaps and evidence to support auditing.
Credential theft
BEFORE
Hours correlating logs after a strange password request.
AFTER
AI finds the program, browser-data access and connection; you approve isolation.
Internal database without VPN
BEFORE
Broad network access and slow-VPN tickets.
AFTER
Identity and posture verified. Only the authorized database is accessible.
dome by 33TS / Pricing
One agent. Clear pricing.
From 25 endpoints. Choose your level of protection.
Annual contract. Prices per endpoint/month.
Essentials
from
US$3.00
per endpoint/month
- Inventory, patches and EOL
- Vulnerability prioritization
- Shadow IT and Shadow AI
- Compliance and reports
EDR + AI investigation
Protect
from
US$7.00
per endpoint/month
- Everything in Essentials
- EDR and AI investigation
- Human-approved response
- 30-day retention
Complete
from
US$10.00
per endpoint/month
- Everything in Protect
- ZTNA — access without VPN
- Continuous posture and FAIR/ROSI
- Immutable trail · 90-day retention
Enterprise
Custom quote
- Above 2,000 endpoints
- SSO/SCIM · 1-year retention
- Dedicated SLA
- Optional dedicated/sovereign cloud
Add-ons
dome MDR operated by 33TS (24×7) · Extended retention · 33TS incident response retainer
Minimum 25 endpoints. Servers count as 2 endpoints in Protect and Complete. Prices exclude taxes.
Your environment, in numbers.
MONTHLY ESTIMATE
dome Complete · 100 billable endpoints
US$1,000.00
Investment in separate solutions
Estimate for separately contracting EDR, vulnerability management, patching and zero-trust access for the same number of machines.
US$2,300.00
Estimate assumptions
USD base values supplied for this simulation: EDR US$ 15 + vulnerabilities US$3 + patch US$ 3 + ZTNA US$10 per remote user. EDR, vulnerabilities and patching are per machine/month. This is not a vendor quote or a verified market average; feature equivalence depends on the purchased products.
In dome Complete, ZTNA is already included per endpoint — without adding a remote-user charge.
Total cost: what is included
No surprises after signing. Anything not in the per-endpoint price is listed here.
Essentials
- Per-endpoint license
- Included
- 30-day free trial
- Included
- Data retention
- —
- Zero-trust access (ZTNA)
- —
- Support with SLA
- In the proposal
- Deployment
- In the proposal
- MDR 24×7 operated by 33TS
- Separate
- Taxes
- Separate
Protect
- Per-endpoint license
- Included
- 30-day free trial
- —
- Data retention
- 30 days
- Zero-trust access (ZTNA)
- —
- Support with SLA
- In the proposal
- Deployment
- In the proposal
- MDR 24×7 operated by 33TS
- Separate
- Taxes
- Separate
Complete
- Per-endpoint license
- Included
- 30-day free trial
- —
- Data retention
- 90 days
- Zero-trust access (ZTNA)
- Included
- Support with SLA
- In the proposal
- Deployment
- In the proposal
- MDR 24×7 operated by 33TS
- Separate
- Taxes
- Separate
Enterprise
- Per-endpoint license
- Included
- 30-day free trial
- —
- Data retention
- 1 year
- Zero-trust access (ZTNA)
- Included
- Support with SLA
- In the proposal
- Deployment
- In the proposal
- MDR 24×7 operated by 33TS
- Separate
- Taxes
- Separate
Pricing questions
What counts as an endpoint?
Each computer running the agent. Servers count twice in Protect and Complete, once in Essentials. Minimum 25.
Is there a free trial?
Essentials offers a 30-day trial. Request activation; 33TS will confirm activation terms.
How do volume discounts work?
Ask 33TS or a partner for a volume quote. Above 2,000 endpoints, request Enterprise.
Can I buy through a partner?
Yes. Request a partner contact or explore the channel program.
Is MDR included?
No. 24×7 dome MDR operated by 33TS is a separately contracted add-on.
How is ZTNA billed?
ZTNA is included in Complete per endpoint. US$10 per remote user is only an assumption for the separate-solutions simulation.
dome by 33TS / Partners
Sell, operate and grow with dome.
MSSP / MSP
Multi-tenant, monthly usage billing and white-label reports.
Operate multiple customer environments with a shared view.
Reseller / VAR
Deal registration and protected margins.
Bring detection, remediation and access into one proposal.
Referral & Alliances
Insurers, brokers, auditors and law firms.
Connect customers with a 33TS security operation.
Increasing benefits at each level
AuthorizedGoldPlatinumINDUSTRIES
Every industry, a different scenario.
A retail chain’s needs differ from those of a financial institution or a manufacturer. In the 30-minute conversation, we assess your specific scenario.
Retail
Distributed environments, hundreds of devices and remote branches: visibility and fast response for lean teams.
Financial services
Endpoint protection, traceability, access control and evidence for compliance.
Healthcare
Availability, data protection and service continuity — without stopping the operation.
Logistics and industry
Many third parties accessing the environment: temporary, verified access with automatic expiration.
MANAGEMENT AND OPERATIONS
From the technical screen to the board meeting.
People who manage risk need to justify spend and show results. dome provides the numbers and reports for that — and scales for those serving many companies.
Executive risk dashboard
Risks, vulnerabilities, incidents and compliance in a view ready for leadership.
NIST, ISO 27001 and CIS reports
Compliance indicators against the main frameworks, for audits and risk management.
Multi-tenant for MSPs and MSSPs
Each customer kept separate, central management and a white-label option.
Support with SLA
Response times set in the contract, not generic promises.
dome · a 33TS product
Explore dome. Bring your use case.
In a 30-minute conversation, see the platform and assess which capabilities fit your team.