Approxee
Check availability
Check availability
Home › Fixed Price Services

One job, done properly. One fixed price.

Sometimes you don't need a subscription. You need one job done properly. Approxee offers a short menu of fixed-price services: defined, quantifiable, one-off. Every one is a complete package: investigation, testing, rollback plan, execution, verification, and a closure report. The full valet, not the jet wash.

Explainer Short walkthrough, coming soon
The menu

Packaged services, one fixed price each.

Each is priced as a complete package. Where a job scales, such as an estate-wide upgrade across data centres, it's priced per unit, so one job can cover your whole estate.

F5 health check

A structured review of your BIG-IP estate against F5 best practice: configuration, version currency, security posture and resilience, delivered as a prioritised findings report. The natural first step, and the front door to everything else on this menu.

  • Delivered remotely, no site access or travel lead time
  • Configuration, version and security posture reviewed against F5 best practice
  • Prioritised findings and remediation report
Remote Out-of-hours included Health check
From €2,000Per device
Scope: Read-only review. Findings and recommendations only; remediation work is quoted separately. Each device is reviewed as its own job; an HA pair is two reviews, run separately rather than together, typically around 24 hours apart.
View details

CVE exposure review

Which of your BIG-IP devices are exposed to current F5 security advisories, and the remediation path for each. A fast, repeatable check that feeds straight into a TMOS upgrade.

  • Delivered remotely, no site access paperwork
  • Device-by-device exposure mapped to current F5 advisories (CVEs)
  • Remediation path and closure report
Remote Out-of-hours included Security
From €1,500Per estate
Scope: Assessment only. Patching and version upgrades are quoted separately (see the TMOS upgrade).
View details

TMOS upgrade

A planned, verified BIG-IP software upgrade, with variations for two-step upgrades and HA pairs.

  • Pre-upgrade health check and readiness review
  • Rollback plan and change window execution
  • Post-upgrade verification and closure report
Remote Out-of-hours included Upgrade
From €2,500Priced per HA pair / data centre
Scope: One upgrade path per unit. Hardware RMA, licensing changes and re-platforming are out of scope.
View details

iRule version conversion

Convert and modernise iRules from TMOS 11 to 13 for TMOS 14 and later, so they keep working after an upgrade, tested against real requests before they ship. The natural companion to a TMOS upgrade.

  • Delivered remotely, faster to schedule
  • Conversion and testing against real requests
  • Before-and-after closure report
Remote Out-of-hours included LTM
From €1,500Per iRule set
Scope: Covers conversion and testing of existing iRules. New functionality is a separate build.
View details

ASM policy for a new application

A production-grade Advanced WAF / ASM policy built and tuned for one new application, blocking attacks without breaking the app.

  • Application profiling and policy design
  • False-positive tuning to a signed-off baseline
  • Deployment and closure report
Remote Out-of-hours included ASM / WAF
From €3,500Priced per application
Scope: One policy for one application. Additional applications priced per policy.
View details

NGINX App Protect WAF policy build

A production-grade WAF policy built and tuned on NGINX App Protect, the same engine as BIG-IP Advanced WAF in software form, protecting containerised and cloud-native applications that BIG-IP does not reach.

  • Delivered remotely
  • Application profiling and policy design on NGINX App Protect
  • False-positive tuning to a signed-off baseline, with closure report
Remote Out-of-hours included NGINX App Protect
From €3,000Per application · one policy
Scope: One policy for one application. Requires an existing NGINX Plus / App Protect deployment.
View details

ASM signature update

A controlled attack-signature update across your ASM estate, staged, tested, and verified against false positives.

  • Signature staging and impact review
  • Controlled rollout with rollback path
  • Verification and closure report
Remote Out-of-hours included ASM / WAF
From €1,500Priced per policy set
Scope: Signature update only. Policy redesign and new-application onboarding are separate services.
View details

Single APM policy build

One Access Policy Manager policy designed, built and tested: SSO, MFA or identity-aware access for a single application.

  • Access requirement and policy design
  • Build, test and user-acceptance support
  • Deployment and closure report
Remote Out-of-hours included APM / Access
From €3,000Priced per policy
Scope: One policy, one application, one identity provider. The access policy is limited to sixteen policy items for this price (Visual Policy Editor objects such as logon pages, authentication, endpoint checks, branches and user lookups); larger policies are quoted separately. Additional IdP integrations quoted separately.
View details

Doing the sums?

Two packaged services usually cost more than one month's subscription. A one-month slot is often the better buy, and it comes with a queue you control.

See subscriptions
How booking works

Scope confirmed in writing before anything starts.

Enquire

Tell Approxee the job and the estate it touches.

Scope

The work is scoped and confirmed in writing: what's in, what's out.

Fixed price

A fixed price is confirmed against that scope.

Scheduled

Booked into the next available window. Subscribers keep queue priority.

Delivered

Executed, verified, and handed over with a closure report.

One job, or an ongoing seat

Tell Approxee what needs doing.

One-off jobs are always available, whatever the slot state. If it turns into a habit, the subscription is the better buy.

Enquire about a job Compare with a subscription