Pricing
One flat price. Everyone included.
The price is on this page. No per-employee tax, no renewal surprises, no demo to see the price. 14-day trial, no card required.
Core
$500/mo
or $5,400/yr - save 10%
- ✓ Full ISO 27001:2022 - 93 Annex A controls + 18 clause requirements
- ✓ NIST CSF 2.0 included, all six Functions
- ✓ Unlimited users
- ✓ Risk register + Statement of Applicability
- ✓ CAPA log (nonconformities + corrective actions)
- ✓ Internal audits + management reviews
- ✓ One-click audit pack
- ✓ Multi-scope + multi-framework
- ✓ Cancel anytime
Practice
For consultants$1,000/mo
Core plus the multi-client console. One flat price however many clients you carry.
- ✓ Everything in Core, plus:
- ✓ Unlimited client organizations
- ✓ Portfolio dashboard - every client's readiness at a glance
- ✓ Provision a client ISMS in one minute
- ✓ Client-visible audit trail of everything you do
- ✓ Your own ISO 27001 ISMS included
Add-ons
Start with Core (ISO 27001) and add whatever standards your customers ask for. Each add-on is a flat monthly price. Annual billing saves 10%.
SOC 2 (AICPA TSC)
Security, Availability, Confidentiality, Processing Integrity. Reuses your ISO 27001 evidence.
+$150/mo
Read moreISO/IEC 27701:2019
Privacy / PIMS - controller & processor, GDPR-aligned. Extends ISO 27001.
+$150/mo
Cyber Essentials
UK NCSC baseline - five technical controls.
+$99/mo
ISO 9001:2015
Quality management - clauses 4-10, including the 2024 climate amendment.
+$150/mo
ISO 22301:2019
Business continuity - BIA, strategies, plans and exercising.
+$150/mo
NIST CSF 2.0
All six Functions, Govern through Recover. Included with Core at no extra charge, so every ISO 27001 workspace can run NIST CSF 2.0 beside it and reuse the same evidence.
Included with Core
14-day trial, no card required
Core: 14 days, full access. Practice: 14 days, 2 clients. No card required. After trial, enter payment details or the account converts to a free read-only state.
Frequently asked questions
What happens after the trial?
After 14 days, enter payment details to continue. If you do not, the account converts to a free read-only state. Your data stays intact, you just cannot edit until you subscribe.
Is there a per-employee charge?
No. Unlimited users. $500/mo for Core, $1,000/mo for Practice, no matter how many people you add.
Can I add SOC 2 later?
Yes. Start with Core (ISO 27001), then add SOC 2 whenever you are ready. +$150/mo, and it reuses your ISO 27001 evidence.
Is there an annual plan?
Yes. Core annual: $5,400/yr (save 10%). Practice annual is not published.
Can I cancel anytime?
Yes. No long-term contract. Cancel anytime from the billing page. Your data stays intact in a read-only state.
Is NIST CSF 2.0 extra?
No. NIST CSF 2.0 is included with Core. Add it to your ISMS scope from the scope's Edit page (or from Billing) and run it beside ISO 27001, reusing the same evidence across both.