The thing people are paying for is regulatory compliance. The actual product is anti-virus software.