How Dottor Box is activated
From registration to the first report, with the terms set out clearly before you sign: how you get to the contract, how the price is calculated, what support covers and how to cancel.
From registration to contract
Registering does not activate any subscription: it is the first step of a negotiation. Your operational environment is created after you have accepted the proposal.
Registration
You register on the portal with your company details: this is what we need to prepare a tailored proposal.
Preliminary analysis
If needed, we analyse the company network to define the attack surface to be monitored.
Proposal
We email you the Special and General Terms and the document for the specific approval of the clauses.
Acceptance
The contract is concluded when we receive your acceptance, which can also be given by digital signature.
Activation
Within 10 days you receive your credentials at your company's certified email address (PEC, the Italian registered email system) and we install what is needed.
You pay for the assets you monitor, not for the people you employ
The price does not depend on the number of employees or on a company size band, but on how many technology assets are actually monitored. The exact price list is in the Special Terms of your proposal.
- A one-off initial fee to define and validate the attack surface, that is, the exact make-up of your infrastructure
- A monthly fee per asset, with a cumulative, tiered price list: the more assets you monitor, the lower the unit cost, up to 500 assets
- Each month's fee is calculated on the average number of assets monitored over the previous 30 days: it follows the company as it grows or shrinks, with no renegotiation
- Remote consulting hours are bought separately, in packages
- All amounts are exclusive of VAT
The contract rules, with no surprises
This is information you are entitled to know before signing. You will find it, word for word, in the General Terms of Sale.
Contract length
Stated in the Special Terms, starting from the conclusion of the contract.
Automatic renewal
At each expiry the contract is tacitly renewed for a period of the same length.
Cancellation with 60 days' notice
Notice must be sent at least 60 days before the expiry date, by recorded delivery letter with acknowledgement of receipt or by PEC certified email.
When the contract ends use of the platform stops, including downloading reports: if you want to keep them, download them before the expiry date. Data remains available for the duration of the contract, for a maximum of 2 years.
What it covers and what it does not
Support covers the software, not your hardware. It includes repairing faults in Dottor Box® and in the additional software, and tests confirming that service has been restored.
Installing the software on your devices is included in the supply, provided the devices meet the minimum requirements. It may cause brief interruptions in the use of the connected resources.
Not included, and quoted separately if needed
- Maintenance of the devices on which the software is installed
- Faults caused by improper use, neglect or unauthorised work
- Problems caused by the power grid or by the connectivity provider
At the MDR + SOC levels support is via 8/5 tickets; at the MDR + SOC 24/7 level you have a dedicated phone number, available day and night.
Before you start: what your network needs
We check them with you during activation. The starting point is simple: the on-site probe must be able to reach the whole network you ask us to check.
The Cyber Drill installed on site
We install the Cyber Drill in your network, as a virtual machine on VMware/vSphere, Proxmox or Hyper-V (4 vCPUs, 8 GB of RAM, 80 GB of disk) or as a ready-made appliance. It is the probe that runs all internal scans.
Every segment reachable
The Cyber Drill must be able to reach all the network segments defined in the Attack Surface: networks, VLANs and subnets. If an internal firewall or the routing blocks a segment, that segment cannot be analysed.
Everything from the dashboard
Segments to analyse, the scan calendar, exclusions and the probe's status are all managed from the Dottor Box dashboard. The connection always starts from the probe towards the portal: no inbound ports to open on the firewall.
Connectivity and cabling
| Requirement | Minimum threshold |
|---|---|
| Upload bandwidth per workstation | at least 500 Kbps |
| Contracted bandwidth | at least 10 Mbps download and 2 Mbps upload |
| Minimum committed bandwidth | 1 Mbps download and 1 Mbps upload |
| LAN cabling | structured, at least certified Category 5e at 100 MHz, to every workstation to be analysed |
Answers to the most common questions
Does registering on the portal commit me to anything?
No. Registration is used to create your environment and collect the information needed to put together a proposal. The service is activated only after you have accepted the proposal and its terms.
Can I run the Cyber Screening without registering?
No. The Cyber Screening is the first snapshot of your Dottor Box and you get it by creating your own environment: that way the results stay yours and become the benchmark for the months that follow.
How much does Dottor Box cost?
The price is made up of a one-off initial fee to define the attack surface and a monthly fee per monitored asset, calculated on the average over the last 30 days. The price list is tiered: the more assets you monitor, the lower the unit cost. You receive the exact amounts in the proposal.
How long does it take to activate the service?
No more than 10 days from the conclusion of the contract. You receive a username and temporary password at your company's PEC certified email address; the password you choose when you first log in is encrypted and not accessible even to Dottor Marc.
Do I need to install anything?
It depends on the services. External network, web applications and dark web monitoring need no installation. The internal network needs the Cyber Drill probe (a virtual machine or a mini PC), and endpoints need the Cyber Agent. The probe does not require any inbound ports to be opened on the firewall.
Can the scans slow down or block my network?
The scans are designed to be non-invasive and you can exclude addresses, ports or sensitive devices. Since they are simulated attacks, authorised in the contract, effects on particularly fragile systems cannot be ruled out entirely: this is why the configuration is agreed during activation.
Does Dottor Box make me compliant with NIS2 or the GDPR?
Dottor Box measures the gap from the requirements, guides you in closing it and produces the documentary and technical evidence to show the authority or the auditor. Compliance remains the organisation's responsibility: the platform gives you the tools to manage it and demonstrate it.
Where is my data stored, and for how long?
On Google cloud infrastructure and Dottor Marc's own data centres, in a database schema dedicated to your company. Data is available for the duration of the contract, for a maximum period of 2 years.
How do I cancel the contract?
The contract renews automatically at each expiry. To stop it renewing, simply send notice of cancellation at least 60 days before the expiry date, by recorded delivery letter with acknowledgement of receipt or by PEC certified email.
What happens to the reports when the contract ends?
When the contract ends, access to the platform stops, including downloading reports. We recommend downloading the documents you want to keep before the expiry date.
Can Dottor Box promise that I will never be attacked?
No, and be wary of anyone who promises that. Dottor Box finds vulnerabilities, measures them, alerts you and documents how risk is managed; at the MDR levels our SOC also responds to alerts. Reducing risk is possible; removing it completely is not.
Can I resell Dottor Box to my clients?
Yes, through the partner programme: a panel to manage your clients and reports branded with the partner's name. The terms are governed by a dedicated reseller contract. You will find the details on the partners page.
Do you know what someone looking for a target can see of your company?
In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.