SCP-3867 — SCP-3867 | Cost Breakdown

Read on SCP Wiki ↗

SCP-3867 Euclid ~ medium confidence

SCP-3867

Expected annual

$3.6M

One-time setup

$2.1M

Annual recurring

$3.4M

Personnel

First-year one-time setup and investigative reserves are the main drivers (~$2.08M one-time), while continuous 24/7 cyber-ops, AI maintenance, takedown/legal retainers and hosting dominate annual costs (~$3.35M/yr).

🏗️ One-Time Capital Costs Total: $2.1M

Ai Development And Hardware $300K

[#2] Initial TSAT development, model training hardware and on-prem GPU procurement.

Privacy Compliance Contingency Fund $300K

[#13] Initial contingency for privacy/regulatory exposure, settlements and escalated legal defense.

Equipment $250K

[#3] Hardened servers, private network appliances, load balancers, HSMs and sinkhole infrastructure (secure containment server cluster).

Initial Research And Lab Setup $250K

[#18] R&D lab setup to reproduce mapping, sandboxes and experimental hardware.

Field Operation Standard $200K

[#14] Budgeted cost for a significant field operation to locate creators (per-operation reserve used as one-time planning budget).

Dark Web Crawler Development $175K

[#6] Custom Tor/I2P/Ignition crawler development and parser engineering.

Digital Forensics Reverse Engineering $163K

[#7] Forensic capture tooling, specialist contractor time and reverse-engineering of backend logic.

Legal Seizure Retainer And Actions $150K

[#4] One-time legal work for initial domain seizure, international registrar negotiations and emergency filings.

Emergency Incident Fund $150K

[#17] Quick-access one-time fund for expedited subpoenas, emergency hosting or rapid forensics.

Containment Redundancy And Disaster Recovery $125K

[#24] Cold-site failover build and cross-jurisdictional backups to prevent seizure disabling containment.

Domain Variant Acquisitions $15K

[#10] Purchase of domain variants, typosquats, punycode/IDN registrations to block copycats.

Facilities $0

[]

🔄 Annual Recurring Costs Total: $3.4M/yr

Staff Wages $1.1M/yr

[#1] 24/7 SOC/cyber-ops team: 8L2/L3 analysts, 2 threat intel, 1 digital-forensics lead, 1 ops manager (salaries + benefits + overhead).

Ai Maintenance And Cloud $350K/yr

[#2] Ongoing TSAT engineering, model retraining, security hardening and cloud/GPU costs.

Osint Tooling Licenses $200K/yr

[#5] Subscriptions and licensing for OSINT platforms, dark-web feeds and takedown APIs.

Research And Monitoring $190K/yr

[#18] Staffing, consumables and experimental monitoring for technical research into the anomaly mechanism.

Cover Story And Legal $185K/yr

[#4, #11] Ongoing legal engagement and public-relations/cover-story retainer and rapid-response campaign budget.

Red Team Testing $163K/yr

[#19] Offensive security contractors for countermeasure testing and re-hosting resilience assessments.

Secure Cluster Operations $150K/yr

[#3] Ops, hosting and bandwidth for containment server cluster / sinkhole infrastructure.

Content Moderation Takedown Ops $138K/yr

[#9] Human moderation teams and automation to file takedowns and manage mirrors/appeals.

Social Media Data Acquisitions $125K/yr

[#8] Paid access/cooperation with social media platforms and third-party datasets.

Search Engine Suppression $125K/yr

[#20] Retainers and engineering liaison to de-index mirrors with search engines/platforms.

Bandwidth And Hosting $102K/yr

[#16] High-bandwidth hosting to absorb redirected traffic and support global sinkholing.

Dark Web Crawler Maintenance $100K/yr

[#6] Ongoing maintenance of custom Tor/I2P crawlers, parsers and integration with TSAT.

Privacy And Litigation Reserve $100K/yr

[#13] Annual reserve for privacy/compliance work, regulatory engagement and potential settlements.

Shelter Partnerships $95K/yr

[#12] Monitoring agreements, training and small grants to local animal shelters.

Misc Overhead $88K/yr

[#25] Procurement, admin, travel, shipping seized hardware and miscellaneous admin costs.

Visitor Support Call Center $80K/yr

[#21] Hotline and support team for affected visitors (privacy/mental-health support and report intake).

Facilities Maintenance $48K/yr

[#22, #24] Utilities, cooling/power for hardware and yearly upkeep of redundancy/disaster-recovery arrangements.

Evidence Storage $30K/yr

[#15] Secure hot/cold storage, encryption and audit for forensic evidence and logs.

Training And Opsec $30K/yr

[#23] Ongoing OPSEC and safe-handling training for staff to prevent accidental spread.

Domain Variant Renewals $6K/yr

[#10] Annual renewal costs for defensive domain registrations.

Supplies And Consumables $0/yr

[]

Logistics And Transport $0/yr

[]

⚡ Cost Scenarios

📊 Baseline (baseline) $3.4M/yr

70.0% probability / year

Normal uneventful year: steady-state containment, monitoring, takedowns and routine R&D.

no major takedown campaigns no cross-border kinetic ops operations within expected load

🚨 Minor Incident $3.9M/yr

25.0% probability / year +$500K vs baseline

Targeted re-hosting outbreak or moderate escalation requiring a field op and elevated legal action.

single cross-jurisdiction rehost targeted creator identification and raid temporary spike in mirror volume

🚨 Major Breach $4.9M/yr

5.0% probability / year +$1.5M vs baseline

Large-scale replication, international creator network identified, cross-border operations and significant litigation/settlements.

widespread mirror propagation creator network requiring multi-country operations regulatory action or class litigation

👥 Personnel 12 total

Role	Count	Notes
L2/L3 Analyst	8	[#1] Senior monitoring/response analysts for 24/7 SOC duties.
Threat Intelligence Analyst	2	[#1] Dark-web and threat research specialists.
Digital Forensics Lead	1	[#1] Lead for forensic capture and analysis operations.
Operations Manager	1	[#1] SOC/ops manager coordinating takedowns, liaison and escalation.

📋 Confidence Notes

Analyst notes provide detailed line-item ranges, but several costs (field ops, litigation, contingency usage) are scenario-dependent and can vary widely; mid-range estimates used.

← SCP-3866 ↑ All SCPs SCP-3868 →