Sitecore Pricing
SAFEnms
- Priced per seat in volume bands
- Manages all SAFE devices
- Centralised global network management
- Role-based access
- Advanced monitoring
- Auditing
- Built-in PKI
- REST API integration
Low Latency. Unbreakable Encryption. Remarkable TCO.
The Sitehop SAFE Series delivers hardware-accelerated encryption for data-in-motion with sub-microsecond latency, crypto-agile FPGA architecture, and quantum-ready protection. Choose your speed, encryption model, and deployment strategy all managed seamlessly from one global console, Sitehop SAFEnms.
How it works
Deployment & Licensing Models
Sitehop solutions are available via OPEX first subscription or CAPEX purchase,
giving you flexibility to align investment with operational goals.
1. Base Hardware
Each appliance includes FPGA-based, reprogrammable encryption hardware. Minimum investment varies by throughput tier (1G, 10/20G, 100/200G).
2. Encryption License
Choose your cryptographic capability: 1. SAFEencrypt (Classic) – AES-256-GCM with RSA/ECDSA certificates
2. SAFEpqc (Quantum-Safe) – Hybrid IKE-V2 (ML-KEM) per RFC 9370 Licenses are modular and upgradeable as needs evolve.
3. Software & Maintenance
Ongoing support, firmware upgrades, and PQC migration readiness are delivered as a percentage of the base investment, ensuring predictable lifetime cost and continuous innovation.
4. SAFEnms Seats
Network management is licensed per seat in volume bands, supporting unlimited devices and multi-tenant control for MSPs and enterprises.
Why Sitehop
Sub-microsecond latency – verified by Spirent, up to 10 000× lower latency than software encryption
FPGA reprogrammable architecture – crypto-agile and future-proof
Energy efficiency – 10× lower power consumption
Scalable from edge to core – consistent architecture across all tiers
Quantum-ready security – PQC hybrid protocols with RFC 9370 compliance
Sitehop solutions are tailored to each deployment.
To receive a detailed quotation including hardware, encryption license, software & maintenance options, and NMS seats:
Contact us at info@sitehop.com or call +44 (0) 114 478 2366.
FAQs
What’s the difference between Edge, Enterprise, and Ultra?
Each product is optimised for a different scale of deployment:
- The Edge secures 1G connections at the branch or remote site level.
- The Enterprise delivers 10G or 20G throughput for regional aggregation or private cloud environments.
- The Ultra scales to 100G or 200G for data centre, telecom, and high-performance backbones.
All models share the same FPGA-based encryption architecture and crypto-agile firmware, so upgrading performance or security level doesn’t mean replacing hardware.
2. How does Sitehop’s Post-Quantum Cryptography (PQC) work?
Sitehop’s SAFEpqc licenses use Hybrid IKE-V2 with ML-KEM (as defined in RFC 9370) to protect key exchange processes against quantum-era threats. This hybrid approach ensures compatibility with existing classical encryption while preparing your infrastructure for post-quantum standards, all through a seamless software upgrade, without hardware replacement.
3. What’s included in the OPEX model vs CAPEX?
- OPEX model.
A subscription-based option that spreads costs over time, covering hardware, software, maintenance, & updates. Ideal for agile scaling & predictable budgets.
- CAPEX model.
A one-time hardware investment with optional ongoing software and maintenance as a percentage of the initial cost.
Both models include access to SAFEnms, enabling centralised management and continuous firmware updates.
4. Can I manage multiple global sites with one dashboard?
Yes. SAFEnms provides a centralised, role-based management platform that allows administrators to configure, monitor, and update all SAFE Series devices from a single console. It includes built-in PKI, REST API integration for OSS/BSS systems, and multi-tenant role control, so you can manage multiple sites, customers, or divisions securely from one location.
5. How does Sitehop’s performance compare to software-based encryption?
Sitehop’s hardware-accelerated encryption delivers up to 10,000× faster performance than traditional software-based VPNs, with sub-microsecond latency verified by Spirent. FPGA architecture removes encryption bottlenecks, improves throughput for SD-WAN and SASE environments, and consumes up to 10× less power, delivering both speed and sustainability
