The math
The cost of a finding
The expensive part of remediation was never the fix. It's the hours around it — triage, ticketing, chasing, and proving afterwards that it was done.
$263→$7
Doing it by hand$263Semi-automated$128With Kanonika$7
The fix was never the expensive part. The hours around it were.
Manual
$263
per finding remediated
- Triage and prioritize the finding
- Research the fix — CVE, patch, impact
- Write or locate a remediation script
- Test the fix in staging
- Execute in a production change window
- Verify the vulnerability is resolved
- Document evidence for the audit
Semi-automated
$128
per finding remediated
- Patch push is automated — for what's in scope
- You still execute the long tail and exceptions
- You still verify each fix actually resolved
- You still assemble the audit evidence
- Scripts and policies still need building and upkeep
Kanonika
$7
per finding remediated
- Ingested, normalized, and mapped to controls — automatically
- Fix planned and executed — automatically
- Outcome verified by a re-scan — automatically
- Evidence recorded to an immutable ledger — automatically
- A human approves in ~5 minutes — only if you want the gate
At scale
Manual cost grows. Kanonika's stays fixed.
Manual cost modelled at an $85/hr blended rate, 60% new findings ($263) and 40% recurring ($128). Savings and return are conservative — computed against list pricing only.
| Findings / month | Manual cost | Savings | Return |
|---|---|---|---|
| 50 | $158K / yr | ~$98K | 2.6× |
| 200 | $631K / yr | ~$451K | 3.5× |
| 500 | $1.58M / yr | ~$1.13M | 3.5× |
| 1,000 | $3.16M / yr | ~$2.71M | 7× |
Ready to close the loop?
See what the math looks like against your own estate.