[VoiceOps] STI-CA average pricing

Mon Jun 6 17:13:15 EDT 2022

To my surprise, what I learned over the last few days is that most of the STI-CAs on iconectiv's list will offer you a standalone cert if asked.  I also didn't even think to ask Sansay, since as a SBC vendor I just assumed (which, we all know what assuming does...) that they jumped in as a CA as a benefit to their existing customer base and as a way to make their SBC product line more enticing as a "turn-key" solution to potential new customers.

I very much appreciate Carlos reaching out to me.  To anybody else who might be in a similar position, I highly recommend talking to them.  Their cert pricing is extremely competitive, they are helpful and responsive, and their policies are also quite reasonable.  Quite a 180 in most respects from some of the other vendors I reached out to.

To just fill in a bit more context, my post here was kicked off when we -- whose voice side of the business is still de minimis -- received a quote from one CA for $6,000/yr for a standalone cert.  Highway robbery.

-- Nathan

From: Carlos Perez [mailto:cperez at sansay.com]
Sent: Saturday, June 4, 2022 12:29 PM
To: Mary Lou Carey
Cc: Nathan Anderson; Voiceops.org
Subject: Re: [VoiceOps] STI-CA average pricing

Sansay provides the standalone CA solution as well if that’s what’s needed.

On Sat, Jun 4, 2022 at 11:06 AM Mary Lou Carey <marylou at backuptelecom.com<mailto:marylou at backuptelecom.com>> wrote:
As far as I know, NEUSTAR is the only CA that will allow you to get a
token without using their STIR/SHAKEN services.I know that there are
multiple options for the STIR/SHAKEN products so make sure to ask about
the various products / price ranges.

MARY LOU CAREY
BackUP Telecom Consulting
Office: 615-791-9969
Cell: 615-796-1111

On 2022-06-03 10:22 PM, Nathan Anderson wrote:
> Starting to collect quotes for SHAKEN cert signing from STI-CAs, and
> got our first response back.
>
> I also got whiplash at the same time.
>
> Although I didn't have to sign an NDA or agree to any kind of
> confidentiality in order to get this response, since nobody seemingly
> wants to publish their pricing, I will (at least for the time being)
> keep both the quote itself as well as the vendor name close to my
> chest.  But...dang.
>
> Though I'm hoping to be surprised, I'm guessing that there isn't a
> wide difference in pricing between various STI-CAs.  Can people here
> confirm that I'm likely to mostly hear same-y figures from others?  Or
> if there are options that are significantly cheaper than others, who
> do y'all recommend that I should be talking to?
>
> Note that I'm only talking about the CA component as a standalone
> offering, though I'll observe that with very few exceptions, it also
> doesn't seem like too many vendors are either willing to unbundle the
> CA service from their overall "end-to-end cloud-based SHAKEN"
> products, or if they are, they seemingly don't like to publicize it.
>
> To put my response to this pricing in context, we are a relatively
> small regional broadband provider, and voice is a fraction of a
> fraction of our business.  I'd wager just about everyone else here has
> a larger voice subscriber base than we do, and most of you probably
> didn't blink when you saw the price-tag on what it would take to
> become part of the STIR/SHAKEN ecosystem...just the cost of doing
> business, right?
>
> We do have effective CLID anti-spoof already & have since the
> beginning, and as a small provider, we also were *supposed* to have
> another 12 months to get up to speed on all of this and start signing
> calls...at least, that was the case until the FCC moved that timetable
> up in what I can only describe as a Darth Vader-esque "altering [of]
> the deal".  We didn't get that memo in December but only about 3ish
> months ago, and it's not like I don't have plenty of other things to
> do, so I'm already coming into this project plenty pissed off...
>
> *sigh* Anyway, I can see that the gate-keepery-ness of this industry
> is still alive and well.  Though I can understand wanting to keep out
> the riff-raff, you would think that all of the hurdles that one needs
> to clear in order to get this far -- getting an OCN, on-boarding with
> the STI-PA, etc. -- would be enough without also throwing yet another
> huge mandatory & ongoing expense on top of the pile as well.
>
> Sorry.  Didn't mean for this to turn into a rant, but...ugh.
>
> --
> Nathan Anderson
> First Step Internet, LLC
> nathana at fsr.com<mailto:nathana at fsr.com>
>
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org<mailto:VoiceOps at voiceops.org>
> https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________
VoiceOps mailing list
VoiceOps at voiceops.org<mailto:VoiceOps at voiceops.org>
https://puck.nether.net/mailman/listinfo/voiceops
--

Carlos Perez
Sansay, Inc.
+1 858-754-2216 Direct
+1 858-754-2211 Support
+1-858-754-2200 Main

https://calendly.com/cperez-sansay/30min
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20220606/bbc0601a/attachment.htm>