Deployment service
Monitoring and logging, deployed properly and handed over
Zabbix and Wazuh installed, hardened, tuned to your network, documented, and left in a state your team can actually operate. Fixed scope. Fixed price. Two to three weeks.
I build these stacks on production networks in media and post-production, and I teach CCNA automation part time. Before a contract you get a written scope, a W-9 and the entity details; tell me what your procurement needs on the first call and I will confirm what I can provide.
If any of this sounds familiar
- Zabbix is installed, but the dashboards were built by someone who left and nobody trusts the alerts.
- You have no central log retention — when something happens, the evidence is scattered across devices or already rotated away.
- Your cyber-insurance renewal asked about logging and endpoint visibility, and the honest answer was "partially".
- You were quoted €8,800 by Zabbix's own consulting arm — the figure is on their published price list — for a network your size.
What it costs
Priced by device count, not by hours. One device = one IP address with an SNMP interface or an agent installed. Ports, interfaces and sensors are unlimited, so a 48-port switch is still one device.
| Devices | Visibility (Zabbix) | Visibility + Evidence (Zabbix & Wazuh) |
|---|---|---|
| up to 50 | $3,500 | $5,500 |
| 51 – 150 | $5,500 | $8,500 |
| 151 – 500 | from $8,500 | from $12,000 |
Above 500 devices, multiple sites, or an existing stack that needs rescuing: quoted, after a short call. Every price is fixed before work starts — no hourly billing, no change orders unless you ask for scope I did not quote.
What is in each engagement
Visibility — Zabbix
Entry tier: up to 50 devices, one site, one Zabbix server.
- Zabbix server installed and hardened, database tuned, backups configured
- SNMP and agent onboarding for routers, switches, firewalls and servers
- Dashboards for the things you actually get paged about
- Alert routing to email or Slack, with noise suppression
- Runbook: how to add a host, what each alert means, how to restore
- 30 days of tuning after handover
Visibility + Evidence — Zabbix and Wazuh
Everything above, plus central logging and security telemetry. Entry tier: up to 50 devices.
- Wazuh manager and agents deployed; Windows and Linux log ingestion
- Firewall and authentication logs centralised with a defined retention window
- CIS-aligned configuration checks on the hosts that matter
- Authentication success/failure alerting — the signal, not the noise
- Dashboard for "what happened on this host last Tuesday"
- Handover session and the same 30 days of tuning
Payment terms: 50% on signature, 50% on handover. MSA, W-9 and insurance details available on request — ask before you commit.
What is explicitly out of scope
Saying this up front keeps fixed-price work from becoming unpaid work:
- 24/7 monitoring or on-call response — I hand over a working system, I don't staff a NOC
- Incident response retainers and forensic investigations
- Hardware procurement, licensing, or carrier circuit work
- Anything requiring a SOC, SIEM-as-a-service, or 24-month support contract
How it runs
- 30-minute call. Device count, sites, what hurts, what "done" means. No charge, no deck.
- Fixed quote in writing. Scope, price, dates. If it doesn't fit an engagement above, you get a number.
- Deployment. Two to three weeks, mostly remote, change windows agreed in advance.
- Handover. Runbook, walkthrough, and 30 days where you can ask me anything before support ends.
Start an enquiry
Tell me the device count, the sites, and what's failing. You'll get a reply from a person, usually within one business day.
Prefer email? info@wireandshield.com.