Frequently asked questions

Straight answers for lean IT teams evaluating or already running on Harp.

Getting Started

Essential ($14.99/endpoint) includes EDR and ITDR. Advanced ($23.99/endpoint) adds managed SIEM. Elite ($35.99/endpoint) adds 24/7 live SOC monitoring.

Service starts once your agreement is signed, payment clears, and onboarding is complete. Harp can hold off on activation until all required information and payment are confirmed.

Yes. Reach out to your Harp rep to move between Essential, Advanced, and Elite as your needs change.

No. EDR and ITDR come bundled at every tier, with managed SIEM and live SOC layered in as you move up. There's no per-module upsell to unlock core functionality.

It's included, not sold separately. Live SOC monitoring is built into the Elite plan rather than priced as a standalone MDR add-on the way it often is elsewhere.

Licensing Requirements

Harp requires Microsoft 365 Business Premium plus the Defender Suite add-on (Defender for Endpoint P2). Business Premium runs roughly $22 per user per month and the P2 endpoint add-on adds about $6, so budget around $28 per user per month. Pricing is set by Microsoft and varies by region and agreement, so your actual cost may differ. This Microsoft licensing is separate from your Harp plan cost — it's purchased from and billed by Microsoft, and is not included in Harp's per-endpoint pricing.

It's the minimum that covers both halves of what Harp monitors. Business Premium with the Defender for Endpoint P2 add-on gives you EDR on every laptop and PC — advanced detection and response at the device level — and ITDR for your people, protecting against stolen passwords, risky sign-ins, and identity attacks. Without both, Harp can't deliver the coverage its plans are built around.

You do, and you keep ownership. The licenses live in your own Microsoft tenant and are billed by Microsoft directly — Harp manages the protection layered on top. If you ever leave, the licensing stays with you.

Business Premium is designed for businesses up to 300 employees, which covers most SMBs. If you're above that threshold, talk to your Harp rep about enterprise licensing options before onboarding.

Pricing & Billing

All billing runs through Harp's online portal only. Harp doesn't accept cash, checks, wires, or purchase orders. Your card is charged automatically each billing cycle until you cancel.

Harp can adjust pricing with notice posted to the portal or sent by email. Any change takes effect at the start of your next renewal term, never mid-cycle.

Harp will make a reasonable effort to notify you by email within 24 hours. You then have 2 business days to update your payment info. Access can be suspended immediately and service terminated after 3 calendar days of continued non-payment. A $50 returned payment fee applies to each declined transaction.

Transactions are final and non-refundable, except where Harp determines it failed to deliver a contracted service for reasons within its own control. Approved refunds are capped at the fees paid during the current billing cycle.

Published. Harp publishes per-endpoint pricing for each managed-security plan — Essential is $14.99, Advanced is $23.99, and Elite is $35.99, all per endpoint per month — so you know the cost upfront, rather than needing a sales call to find out what you'd pay.

No. Plans are month-to-month by default. Annual contracts are available at a discount if you want to commit, and you can switch to annual billing at any time.

Contracts & Cancellation

Cancellation must be submitted through the online portal at least 30 days before your renewal date. Email or chat cancellation requests are not valid.

Ending service before your current term is up triggers an early termination charge equal to 100% of the remaining fees owed for that term. This is treated as Harp's sole monetary remedy, not a penalty, under the agreement.

Security & Guarantees

No cybersecurity provider can promise that, and Harp doesn't either. Its services are designed to reduce risk, not eliminate it. Your business stays responsible for its own baseline security hygiene: patching, MFA, backups, and staff training.

Accurate, current information about your systems and environment, a designated point of contact, reasonable security controls on your own infrastructure, and timely access or credentials Harp needs to do the work.

Support & SLAs

Plans are month-to-month by default, with terms auto-renewing unless either side gives 30 days' notice of non-renewal. Annual contracts are also available and come with a substantial discount over month-to-month pricing. A customer can switch to annual billing at any time during their month-to-month selection.

24/7 live SOC monitoring is included on the Elite plan. Essential and Advanced are built around EDR, ITDR, and managed SIEM, without dedicated live SOC coverage. If round-the-clock human eyes on alerts matters most to you, Elite is the tier to look at.

Any confirmed or suspected unauthorized access, breach, or compromise of your systems or data qualifies as an Incident under your agreement. Your SLA defines the specific response time commitments tied to your plan.

Referral Program

Refer a business that isn't currently a Harp customer. If they sign up for any plan and their account qualifies, you receive 15% off your bill for 3 months.

The referred account needs to generate at least $150/month in recurring revenue, regardless of tier or endpoint count. It also needs to stay active for 90 days before your reward is issued.

Yes. If the referred business signs an annual contract, the 90-day wait is waived and the reward is issued right away.

Yes, there's no cap. Each qualifying referral earns its own reward.

No. Rewards are applied as a credit to your Harp account rather than paid out in cash.

Compliance

Yes. Compliance consulting is available across PCI DSS, HIPAA, SOC 2, NIST, and ISO 27001.