Pricing
One flat price. Everyone included.
The price is on this page. No per-employee tax, no renewal surprises, no demo to see the price. 7-day trial: card required, cancel before day 7 and you won't be charged.
Core
$500/mo
or $5,400/yr - save 10%
- ✓ Full ISO 27001:2022 - 93 Annex A controls + 18 clause requirements
- ✓ NIST CSF 2.0 included, all six Functions
- ✓ Unlimited users
- ✓ Risk register + Statement of Applicability
- ✓ CAPA log (nonconformities + corrective actions)
- ✓ Internal audits + management reviews
- ✓ One-click audit pack
- ✓ Multi-scope + multi-framework
- ✓ Cancel anytime
Practice
For consultants$1,500/mo
Core plus the multi-client console. One flat price however many clients you carry.
- ✓ Everything in Core, plus:
- ✓ Unlimited client organizations
- ✓ Portfolio dashboard - every client's readiness at a glance
- ✓ Provision a client ISMS in one minute
- ✓ Client-visible audit trail of everything you do
- ✓ Your own ISO 27001 ISMS included
Already on Core? Ask us to add Practice
Included with Core
NIST CSF 2.0 is included with Core at no extra charge. Run it beside ISO 27001 and reuse the same evidence across both frameworks.
NIST CSF 2.0
All six Functions, Govern through Recover. Included with Core at no extra charge, so every ISO 27001 workspace can run NIST CSF 2.0 beside it and reuse the same evidence. How NIST CSF 2.0 works here.
Included with Core
Add-ons
Start with Core (ISO 27001) and add whatever standards your customers ask for. Each add-on is a flat monthly price. Annual billing saves 10%.
SOC 2 (AICPA TSC)
Security, Availability, Confidentiality, Processing Integrity. Reuses your ISO 27001 evidence.
+$150/mo
ISO/IEC 27701:2019
Privacy / PIMS - controller & processor, GDPR-aligned. Extends ISO 27001.
+$150/mo
Add to your workspaceCyber Essentials
For UK supply chains: the UK NCSC baseline - five technical controls. Useful when a UK customer or contract requires it.
+$99/mo
Add to your workspaceISO 9001:2015
Quality management - clauses 4-10, including the 2024 climate amendment.
+$150/mo
Add to your workspaceISO 22301:2019
Business continuity - BIA, strategies, plans and exercising.
+$150/mo
Add to your workspace7-day trial, cancel anytime
Core: 7 days, full access. Practice: 7 days, 2 clients. A card is required to start; cancel before day 7 and you won't be charged. If you cancel, your workspace stays read-only with export for 30 days after cancellation.
Not sure what the first audit involves? See how it works, step by step.
Frequently asked questions
What happens after the trial?
You enter a card when you start the trial. On day 7 your subscription starts and the card is charged, unless you cancel before then, in which case you won't be charged. If you cancel, your workspace is read-only with export for 30 days after cancellation: you can view and export everything, including the audit pack, but you cannot edit. After that the workspace is archived; resubscribing restores full access.
Is there a per-employee charge?
No. Unlimited users. $500/mo for Core, $1,500/mo for Practice, no matter how many people you add.
Can I add SOC 2 later?
Yes. Start with Core (ISO 27001), then add SOC 2 whenever you are ready. +$150/mo, and it reuses your ISO 27001 evidence.
Is there an annual plan?
Yes. Core annual: $5,400/yr (save 10%). Practice annual is not published.
Can I cancel anytime?
Yes. No long-term contract. Cancel anytime from the billing page. Your workspace is then read-only with export for 30 days after cancellation, so you can take your data and audit pack with you.
Is NIST CSF 2.0 extra?
No. NIST CSF 2.0 is included with Core. Add it to your ISMS scope from the scope's Edit page (or from Billing) and run it beside ISO 27001, reusing the same evidence across both.