Credits, for every job.
Pre-purchase a single balance and spend it across 65+ cybersecurity services — no procurement marathon every time something changes.
Use credits for 24/7 expert support on any task or project, big or small, that unburdens your team’s to-do list.
How it Works
Pick a package
Three sizes, so your budget matches your roadmap. Need more later? Top up. Need less? Pause.
Spend on what matters
Architecture review, firewall change, training, IR coaching, Zero Trust readiness, whatever the week throws at you. Draw from the same pool.
Get our top 10%
Our certified engineers and architects are the same people behind our MDR Detect™ and gSOC™. Not a tiered help desk.
Choose your plan
Get started with ON2IT credits on a focused project or two.
Our most-picked package for teams running credits across multiple projects.
Maximum flexibility and the deepest bonus for organisations spending across the full catalogue.
Need a custom volume or a multi-year plan? Email creditquestions@on2it.net and we’ll put together a quote.
All credit services
65 services across design, build, capacity, training, validate and Zero Trust. Every service is priced in credits and delivered by our senior team.
65 services
MS Defender endpoint design
Configure your Microsoft Defender environment according to best practices and company requirements.
Cortex XDR endpoint design
Configure your Palo Alto XDR environment according to best practices and company requirements.
Prisma Cloud Enterprise design
Cloud security from your repositories to runtime, securing code, pipeline and containers.
IPv6 design
Together we design and plan your migration to IPv6, based on your environment wishes and our experience.
GlobalProtect design
A secure and robust VPN architecture based on your architecture and wishes, with full ZTNA.
SD-WAN design
SASE or On-Prem: a ZTNA scalable and robust design based on your environment and future plans.
Secure network design
We align Zero Trust from the firewall and endpoint into the network with you.
Prisma Access (SASE) design
SASE environment design tailored to your perfect mix of cloud, SaaS and On-Prem infrastructure.
IoT security network design
A secure IoT network design: flexible, practical, future-proof.
XSOAR design
A secure XSOAR setup: flexible, practical, future-proof.
XSIAM design
A secure XSIAM setup: flexible, practical, future-proof.
Implement Cortex XDR
Our experience aids you in design and implementation for your endpoint security solution.
Implement MS Defender for Endpoint
Our experience aids you in design and implementation for your MS Defender endpoint security solution.
Implement SD-WAN
We implement SD-WAN with and for you.
Greenfield Palo Alto Firewall
A greenfield implementation of a PAN firewall based on best practices, suited to your environment.
Greenfield Fortinet Firewall
A greenfield implementation of a Fortinet firewall based on best practices, suited to your environment.
Implement User-ID
Transform to a Kipling rule base, enabling you to move to Zero Trust by linking traffic and flows.
Firewall upgrade
A firewall upgrade and replacement, completely planned and prepared.
Implement Panorama
We implement Panorama and onboard your pre-existing firewalls for you.
Implement GlobalProtect
VPN architecture based on your architecture and wishes, fully ZTNA.
Implement network changes
Certified multi-disciplinary consultants aid you in network architecture changes.
Implement SSL Decryption
SSL Decryption, enabling full use of all your security measures and insights of your traffic.
Greenfield Azure Palo Alto Firewall
Certified help to design and implement a redundant, scalable Palo Alto Networks firewall environment in Azure.
Implement Prisma Access SASE
Implement SASE environment with mix of cloud, SaaS and On-Prem infrastructure.
Implement IoT security
Implement a secure IoT network design: flexible, practical, future-proof.
Implement Medical OT security
Implement secure IoT network design, focused on Medical OT.
Implement Industrial OT security
Design secure IoT network, focused on Industrial OT.
Implement XSOAR
We help you implement XSOAR.
Implement XSIAM
We help you implement XSIAM.
Virtual CISO
On demand CISO expertise to align security risk and compliance with business priorities.
Consultant-led changes & improvements
Our senior consultants implement changes to improve your security stance, closely aligned with your internal stakeholders.
Implement change
We roll out design changes or new rulesets into production, including validation and a rollback plan.
Remediate
We eradicate scan- and pen-test findings; wiping out vulnerabilities and compliance gaps.
Endpoint security architect
Together, we design your endpoint security, based on your requirements and needs.
Network security architect
Together, we design your network security, based on your requirements and needs.
Cloud security architect
Design and implementation of your cloud transformation.
Support with Kubernetes
We support and aid you in all topics and security with your Kubernetes setup.
Support with Palo Alto Networks
We support and aid you in all topics and security with your Palo Alto Networks setup.
Support with Microsoft Security Suite
We support and aid you in all topics with your Microsoft Security Suite setup.
Incident Response
Crisis coordination and hands-on support by our experienced CSIRT during major security incidents.
Palo Alto EDU-210 — Firewall Essentials
Configuration and management of Palo Alto Networks Firewalls.
Palo Alto EDU-220 — Panorama at Scale
Panorama - Managing Firewalls at Scale.
Palo Alto EDU-260 — Cortex XDR Prevention
Cortex XDR: Prevention and Deployment.
Palo Alto EDU-262 — Cortex XDR Investigation
Cortex XDR: Investigation and Response.
Palo Alto EDU-270 — Cortex XSIAM
Cortex XSIAM training.
Palo Alto EDU-318 — Prisma Access SASE
Prisma Access SASE Security: Design and Operation.
Palo Alto EDU-330 — Firewall Troubleshooting
Firewall Troubleshooting course.
Palo Alto EDU-238 — Prisma SD-WAN
Prisma SD-WAN: Design and Operation.
Palo Alto EDU-380 — Cortex XSOAR
Cortex XSOAR: Automation and Orchestration.
SASE & SLR Scan
Validate your SASE and security setup and gain insights into the effectiveness of your current setup.
Health check Fortinet firewalls
ON2IT Best Practice Assessment and health check for Fortinet Firewalls.
Health check Palo Alto firewalls
ON2IT Best Practice Assessment and health check for Palo Alto Networks Firewalls.
Cloud Security Report
Gain insights into the security state of your public cloud environments.
Best Practice — MS Defender for Endpoint
Validate your Microsoft Defender for Endpoint configuration against industry best practices.
Best Practice — MS Defender for O365
Validate your Microsoft Defender for Office 365 configuration against industry best practices.
Best Practice — MS Defender for Identity
Validate your Microsoft Defender for Identity configuration against industry best practices.
Best Practice — MS Defender for Cloud Apps
Validate your Microsoft Defender for Cloud Apps configuration against industry best practices.
IoT Reach & Risk Scan
Validate the effectiveness of your IoT security.
Adaptive Cyber Resilience Tabletop
Tailored incident tabletop that adapts live based on your decisions. Revealing true bottlenecks and clear improvement paths.
Zero Trust Readiness
Enable true Zero Trust adoption by aligning leadership vision, management choices and operational execution.
AI Readiness
Reveal true AI usage and build control without slowing down to embrace AI with confidence.
Zero Trust Rule Base Conversion
Convert your firewall rule base to a Zero Trust rule base.
Zero Trust Training
Accelerate the implementation of your Zero Trust strategy on strategic, managerial and operational level.
Zero Trust Coaching
We guide you along your Zero Trust journey and safeguard your progress.
Zero Trust Fast Track
Guided kick-start into your first protect surfaces or extra protect surfaces.
Not finding the service you need?
Tell us what you’re looking for. We regularly build custom scopes for clients and can almost certainly arrange it. Priced in credits, drawn from your existing balance.
Credits & how they work
Everything to know before requesting a credit package or spending your balance.
What are ON2IT Credits?
ON2IT Credits are a flexible service model where you pre-purchase a balance and spend it on 65+ cybersecurity services from ON2IT’s catalog, from architecture design and firewall implementation to Palo Alto Networks training, tabletop exercises and Zero Trust coaching. One balance, no separate procurement per project.
What services can I spend credits on?
Six categories: Design (architecture reviews for endpoint, cloud, network, IoT and SOC), Build (implementation for Palo Alto, Microsoft, Fortinet, SASE and OT), Capacity (Virtual CISO, consultant-led changes, remediation, support), Training (Palo Alto EDU courses and Zero Trust training), Validate (health checks and best-practice assessments) and Zero Trust (Fast Track, Coaching, Rule Base Conversion, Readiness).
What if the service I need isn’t listed in the catalog?
Ask us. The catalog covers the most-requested services but we regularly build custom scopes for clients. New vendors, non-standard environments, bespoke assessments. Contact ON2IT with a description of what you need and we’ll price it in credits so you can draw from your existing balance.
How fast can we start using credits?
Days, not quarters. Once a credit package is contracted, you can request any service from the catalog and our senior team schedules the work. Typically within one business week for smaller changes, longer for full architecture or implementation projects.
Can we mix services across categories?
Yes. One credit balance covers everything. A single quarter can include an architecture design, two implementation projects, a tabletop exercise and Zero Trust coaching, all drawn from the same pool.
One balance. Zero procurement.
Pick a credit package, spend it on whatever the week throws at you, and get expert help within days, not quarters.