← SCP Cost Explorer Read on SCP Wiki ↗
SCP-1584 Euclid ~ medium confidence
SCP-1584
Expected annual
$7.5M
One-time setup
$7.6M
Annual recurring
$7.4M
Personnel
17
Initial containment and tooling are capital-intensive (specialized lab fitout, retrieval equipment, legal/diplomatic setup and a contingency reserve), while ongoing costs are dominated by ISP/covert blocking maintenance, legal/PR/telecom liaison, and staffed cyber/research teams.
🏗️ One-Time Capital Costs Total: $7.6M
Contingency Reserve $3.0M
[#22] Initial contingency reserve for large-scale exploitation / mass-displacement events (recommended initial reserve).
Isp Blocking Setup $1.5M
[#2] Initial legal/liaison/setup costs to arrange ISP-level / backbone filtering across jurisdictions.
Legal Covert Setup $1.0M
[#13] Initial covert legal/diplomatic influence and counsel to persuade/compel ISPs/governments (one-time setup investments).
Retrieval Team Equipment $600K
[#9] Boats, dive gear, towing equipment, vehicles and training equipment for 1–3 regional retrieval teams (one-time procurement).
Initial Research And Lab Setup $500K
[#5] Scientific instrumentation and lab research setup (mass/volume/buoyancy instruments, data-acquisition, high-speed cameras, microbalances).
Facilities $300K
[#4] Lab fitout / hardened, air-gapped testing environment one-time buildout.
Multi Lingual Tooling $175K
[#23] One-time tooling for takedown/handling of Tor/IPFS/P2P and multi-lingual mirror handling.
Telephony Gateway $125K
[#6] One-time telephony gateway hardware/software to intercept and simulate EMS responses.
Pr Campaign $125K
[#14] One-time public cover-story and crisis PR campaign preparation.
Sandbox Virtualization $87K
[#17] One-time development/acquisition of hardened VM/container toolchains and automated load scripts.
Access Control Infra $62K
[#8] Level-3 MFA/hardware token/jump-hosts and logging infrastructure one-time deployment.
Storage Lockers $62K
[#10] Safe-storage/decontamination lockers and humidity-controlled evidence storage benches (one-time).
It Blocking Deployment $45K
[#7] One-time enterprise deployment of URL blocking, browser policies, and content filters.
Dns Registrar Takedown $30K
[#1] Initial registrar/legal takedown actions, domain control and sinkholing setup (one-time).
Device Immunity Testing $15K
[#19] One-time classification/testing of small-device immunity edge-cases.
Forensic Archival $12K
[#16] One-time purchase of air-gapped forensic imaging and immutable archival hardware.
Equipment $0
[]
🔄 Annual Recurring Costs Total: $7.4M/yr
Isp Blocking Maintenance $2.0M/yr
[#2] Ongoing liaison, emergency takedowns, and maintenance of ISP/backbone agreements and filtering across jurisdictions.
Staff Wages $1.8M/yr
[#3, #12, #9] Salaries for SOC/domain analysts (cyber monitoring), contracted specialists (physicists/materials/forensics), and retrieval-team staffing component.
Cover Story And Legal $1.1M/yr
[#13, #14] Ongoing covert legal/diplomatic expenditures and annual PR/communications budget for cover stories and leak response.
Liability And Litigation Reserve $550K/yr
[#20] Annual reserve for litigation, liability and legal exposures from containment actions.
Research And Monitoring $500K/yr
[#3, #5, #21, #24, #19] Ongoing tooling/cloud scanning, red-team testing ops budget, independent test runs and monitoring tooling licensing/calibration.
Logistics And Transport $300K/yr
[#9] Operating & maintenance costs for retrieval boats/vehicles, fuel, transport logistics, and field ops support.
Telecom Monitoring $300K/yr
[#15] Telecom-level monitoring, diversion of calls, and liaison with emergency services to mitigate false-alarm spikes.
Telephony Contracts $200K/yr
[#6] Per-jurisdiction contracts and legal fees to prevent/route false 911/EMS calls.
Red Team $175K/yr
[#21] Annual red-team and adversarial-resilience testing budget.
Multi Lingual Staffing $150K/yr
[#23] Ongoing staffing/tooling to handle multi-lingual mirrors, dark-net and P2P replicas.
Supplies And Consumables $102K/yr
[#5, #10, #11, #25] Calibration consumables, storage consumables, device replacement baseline, small-item consumables (batteries, PPE, water treatment).
Independent Audits $60K/yr
[#24] Annual independent audits of sinkholes, blocks, and emergency-call intercepts.
Facilities Maintenance $35K/yr
[#4] Annual maintenance of the secure testing environment and site infrastructure.
Device Replacement Pool $30K/yr
[#11] Annual pool to replace water-damaged or retired devices used by staff or recovered property.
Sandbox Maintenance $30K/yr
[#17] Maintenance of sandbox/virtualization tooling and forensic logging pipelines.
Training And Compliance $30K/yr
[#18] Annual employee training, policy enforcement and recurring compliance activities.
It Audit And Support $25K/yr
[#7] Annual audits, updates, helpdesk support for enterprise blocking and browser policies.
Access Control Maintenance $20K/yr
[#8] Credential lifecycle, MFA maintenance and access-control system upkeep.
Dns Sinkhole Monitoring $10K/yr
[#1] Ongoing monitoring and renewal costs for sinkhole DNS records and registrar follow-ups.
Device Classification Updates $5K/yr
[#19] Ongoing small-device classification as new hardware appears.
Forensic Storage Maintenance $3K/yr
[#16] Ongoing storage, integrity checks and tape rotation for forensic archives.
⚡ Cost Scenarios
📊 Baseline (baseline) $7.4M/yr
89.3% probability / year
Normal year with standard monitoring, maintenance, and no major incidents.
routine monitoring small recoveries no large-scale mirrors
🚨 Minor Incident $7.7M/yr
8.0% probability / year +$250K vs baseline
Isolated mirror or crawl causes a regional spike in loads requiring modest extra retrievals and PR/legal response.
single-country mirror localized EMS false alarms dozens-to-hundreds devices impacted
🚨 Major Breach $8.9M/yr
1.5% probability / year +$1.5M vs baseline
Coordinated mirrors across multiple regions leading to large retrieval operations, significant legal/diplomatic expenditure and contingency drawdown.
multi-region mirror campaign mass device loading cross-border emergency-call spikes
🚨 Political Exposure $9.4M/yr
1.0% probability / year +$2.0M vs baseline
Public leak or political fallout forcing major legal/diplomatic spending, visible PR campaigns, and potential compensation.
public leak civilian lawsuits media/political scrutiny
🚨 Catastrophic Exploitation $17.4M/yr
0.2% probability / year +$10.0M vs baseline
Large-scale, coordinated exploitation causing thousands of devices to load simultaneously and severe infrastructure/legal consequences.
globally coordinated mirrors mass displacement events widespread emergency-call flooding
👥 Personnel 17 total
Role Count Notes
Cybersecurity Analyst / SOC 6 [#3] Continuous scanning, mirror-hunting and takedown operations (4–8 FTEs assumed).
Research Scientist 5 [#5, #12] Physicists/materials scientists/forensics contracted or on staff to analyze mass-redistribution and run experiments.
Incident Response / Retrieval Operator 3 [#9] Field teams for retrieval, diving and rapid response (regional operators).
Administrative Staff / Logistics 2 [#13, #24] Legal liaison support, contractor management and audit coordination.
Site Security Officer 1 [#8] Level-3 access control oversight and secure handling supervision.
📋 Confidence Notes
Estimates are built from analyst ranges but legal/ISP/diplomatic costs and contingency sizing are highly jurisdiction-dependent; technical equipment and staffing estimates are better grounded, producing medium confidence.
← SCP-1583 ↑ All SCPs SCP-1585 →