
Claude Mythos: what an AI model that finds software flaws means for your security
What Claude Mythos is, who can use it, what the June suspension of access taught us and what a mid-sized company should change in its security.
Guide
This guide is for management boards and managers who need to plan a budget for their first AI implementation or assess a vendor’s proposal. We show what the cost is made of, what licences cost according to vendor price lists, and what usually gets missed in the first calculation. You also get a formula for calculating the return on investment using your own company’s data.

A proposal for an AI implementation is rarely a single figure. It is made up of several items that are billed differently: some you pay once, some every month, and some depend on how heavily your staff use the tool.
It is worth separating them from the very first conversation with a vendor. That way you compare proposals fairly, not just by the figure in the first line.
Items 4 and 5 in the table below often do not appear in the proposal at all, because they fall to your own team. But they are not free. A department manager who spends several weeks describing exceptions and checking AI answers is not doing their usual job during that time.
| Component | What it covers | How it is paid | What it depends on |
|---|---|---|---|
| 1. Licences and usage fees | Access to the tool, e.g. Microsoft 365 Copilot, ChatGPT or an AI model called from another program | Monthly or annually; sometimes based on actual usage | Number of users and how intensively they use it |
| 2. Implementation work | Process analysis, solution design, configuration, testing, go-live | One-off: a fixed price for the scope or hourly billing | Complexity of the process and number of exceptions |
| 3. Integration with systems | Connection to ERP, CRM, the accounting system, email, SharePoint | One-off, then fixes when the systems change | Number of systems and whether they have ready-made connectors |
| 4. Data preparation | Tidying up documents, permissions, price lists and test examples | Mainly your employees’ time | The state of the company’s data and documentation |
| 5. Training and changes to ways of working | Training, instructions, a trial period with a group of users | One-off, then short training sessions for new people | Number of people and departments |
| 6. Maintenance and development | Checking answer quality, fixes, moving to newer AI models, support | Monthly or as a block of hours | Number of solutions in use and how fast the company changes |
Licences are the only component you can check in a price list. The amounts below are Microsoft list prices in US dollars with annual payment, as of October 2026. The price on a partner’s invoice may differ, because it depends on the exchange rate and the contract terms.
A worked example: a company gives Copilot to the 40 people who work most with documents and email. On the Copilot Business plan that is 40 × USD 21 × 12 months = USD 10,080 a year. At USD 30 per user, the same group costs USD 14,400 a year.
You do not have to buy licences for everyone. It is more sensible to start with the people who handle the most text and, after a few months, check who actually uses the tool.
Other vendors also have business plans, e.g. OpenAI (ChatGPT Business and Enterprise) and Anthropic (Claude). Their prices and minimum seat numbers change often, so check the current price list just before you decide.
When a solution uses an AI model through an API – a connection through which one program requests a service from another – you pay for usage. The unit is tokens: pieces of text, roughly fragments of words. So the cost grows with the number of documents and questions handled.
| Tool | List price | Who it is for |
|---|---|---|
| Microsoft Copilot Chat (web-grounded version) | No additional charge | Companies with an eligible Microsoft 365 subscription |
| Microsoft 365 Copilot Business | USD 21 per user per month | Organisations with up to 300 users; works with the Business Basic, Standard and Premium plans, not with E3 and E5 |
| Microsoft 365 Copilot | USD 30 per user per month | Larger organisations, including those on E3 and E5 plans |
| Copilot Studio | Credit packs for the whole organisation or pay-as-you-go | Companies that build their own AI agents |

Two projects with the same name, e.g. “AI for handling emails”, can cost very different amounts. It comes down to a few factors worth knowing before you talk to a vendor.
Costs go down when the process is documented and measured, the data sits in one system, and someone on the company side has time for the project and the authority to make decisions. It also helps to use a ready-made tool instead of building from scratch, and to keep the first stage narrow: one process, one team, one system connection. Costs go up with the factors listed below.
The items below are rarely a separate line in a proposal, yet they can push back the payback date by many months. It is best to add them to the budget straight away, even as an estimate.
Each of these items is worth discussing with the vendor before you sign the contract. You will find questions that help with this later in the article.

The question “how much does AI cost?” only makes sense next to a second one: how much does the process you want to change cost you today?
You calculate the return on investment (ROI) in the same way as when buying a machine. You need three figures. You estimate the benefit yourself, and the vendor provides the costs in a proposal broken down into components.
The benefit most often calculated is time. The formula: number of cases per year × minutes saved per case ÷ 60 × hourly labour cost × the share of time the team will actually use for other work.
Calculate the hourly cost as the full employer cost divided by the hours actually worked in a month, not the contracted hours. The last factor matters too. Ten minutes saved in a few scattered pieces over the day do not always turn into extra work.
The second benefit is fewer errors. Count how many mistakes your team corrects each month today (wrong amount, wrong counterparty, an error in a quote) and how much it costs to correct one.
The third benefit is a faster response, e.g. to a request for quotation (RFQ). Calculate this benefit cautiously and separately, because it is hard to attribute solely to AI.
Take a hypothetical distribution company whose customer service department receives 100 emails a day. Handling one takes 6 minutes on average: reading it, checking the order, writing a reply.
That is 100 × 6 = 600 minutes, or 10 hours a day. With 250 working days a year, this comes to 2,500 hours.
Suppose the AI identifies the topic of the email and prepares a draft reply, which an employee checks and sends. Handling time is cut by half, so the team saves 1,250 hours. Let us cautiously assume that only 60% of that time goes into other work: that leaves 750 hours.
Hourly labour cost: suppose the full employer cost is PLN 8,400 a month and there are 120 hours of productive work. That gives PLN 70 an hour. The annual benefit is therefore B = 750 × 70 = PLN 52,500.
This amount sets the break-even point in the first year. If one-off and annual costs together exceed PLN 52,500, the investment will only pay back in the second year or later.
The payback period is easy to check using proportions. If one-off costs equal 60% of the net annual benefit, payback comes after 0.6 × 12 = 7.2 months. If they equal 150%, it comes after 1.5 × 12 = 18 months.
The difference between the cautious and the optimistic scenario in the table below is more than threefold. That is why you should measure the current state before you start: the number of emails, handling time and the number of errors. After three months, measure the same things again and replace assumptions with facts.
| Scenario | Reduction in handling time | Time used for other work | Hours saved | Annual benefit |
|---|---|---|---|---|
| Cautious | 30% | 50% | 375 h | PLN 26,250 |
| Base | 50% | 60% | 750 h | PLN 52,500 |
| Optimistic | 60% | 80% | 1,200 h | PLN 84,000 |
It is safer to split the spending into stages, with a decision after each one. First, process analysis and measurement of the current state. Then a pilot on a narrow scope, e.g. one type of email in one team. Only at the end, extension to further departments.
Before the pilot, write down the success measure and the stop threshold, e.g. “the draft reply needs corrections in fewer than half of cases”. If the pilot does not reach the threshold, you lose the cost of one stage, not of the whole programme.
The way implementation work is billed also affects the budget. No model is better in every situation – what matters is how well it fits how clearly you know the scope of work.
| Model | Advantage | Risk | When it fits |
|---|---|---|---|
| Fixed price for an agreed scope | You know the amount up front | Every change of scope requires a contract amendment, and the vendor adds a buffer for unknowns | A narrow, well-documented process |
| Hourly billing with a cap | You pay for the actual work and can easily change the scope | When the scope grows, spending quickly reaches the cap | Projects where the scope becomes clear as the work progresses |
| Fixed monthly fee for support | Predictable cost after go-live | You also pay in months when little changes | Several solutions in use that need further development |
A good proposal answers the questions below in writing. If a vendor cannot break the costs down into components, it will be hard to keep the budget under control later.
It is worth collecting the answers in one table for all proposals. Then you can see at once which one only looks cheaper because it leaves some items out.
An honest calculation sometimes ends with the conclusion that AI is not the best use of money right now. This most often happens in five situations.
If you recognise one of them in your company, you do not have to give up on AI for good. Start by removing the obstacle and come back to the calculation in a few months.
Related topics in the knowledge base
FAQ
Answers to the questions management boards ask most often after their first budget calculation.
About this page
Sources
About the author
Kacper Włodarczyk
CEO of ALGORCOMP
Kacper specializes in implementing Microsoft 365 Copilot, Copilot Studio, Power Platform (Power Automate, Power Apps, SharePoint) and AI agents for mid-sized B2B companies in Poland. He leads dozens of projects covering AI strategy, Power Platform governance, document workflow automation and sales processes. In his writing he focuses on the practical side of AI adoption in organizations — from the first proof of concept to company-wide rollout — with particular attention to data security, compliance (GDPR, NIS2, the AI Act) and return on investment.
Meet the teamIn a free consultation we will go through your process, estimate its current cost and show you which components an implementation would consist of. We will prepare a detailed quote after that conversation.
Featured

What Claude Mythos is, who can use it, what the June suspension of access taught us and what a mid-sized company should change in its security.

What a vCISO does, what Poland’s new National Cybersecurity System Act requires of companies, when this model pays off, and when a full-time hire or a good IT provider is the better choice.

A comparison of an external and an in-house head of information security: what the Polish KSC Act says, how to calculate the cost of each model and when each one makes sense.