All plans include multi-factor authentication, encrypted data, unlimited framework support (NIST, CMMC, FedRAMP, ISO 27001, SOC 2, HIPAA, and custom), monthly billing, and cancellation from your account at any time. Card details are handled by Stripe — never stored on our servers.
For a single organization standing up its first cybersecurity governance program.
For consultancies, MSSPs, and multi-entity organizations managing several assessments in parallel.
For federal agencies, primes, and enterprises requiring dedicated support, custom SLAs, and API-level integration.
| Capability | Starter | Professional | Enterprise |
|---|---|---|---|
| Cybersecurity risk assessments | ✓ | ✓ | ✓ |
| GRC workflows | ✓ | ✓ | ✓ |
| Risk registers + risk modeling | ✓ | ✓ | ✓ |
| Security controls + framework mapping | ✓ | ✓ | ✓ |
| Policy and procedure management | ✓ | ✓ | ✓ |
| Evidence and document management | ✓ | ✓ | ✓ |
| Compliance tracking | ✓ | ✓ | ✓ |
| POA&M and remediation management | ✓ | ✓ | ✓ |
| Pre-assessment readiness checklists | — | ✓ | ✓ |
| Reporting + executive dashboards | ✓ | ✓ | ✓ |
| Multi-client dashboards | — | ✓ | ✓ |
| Custom control frameworks | — | ✓ | ✓ |
| API access | — | — | ✓ |
| Priority support | — | ✓ | ✓ |
Not seeing what you need? Talk to us about a custom Enterprise scope.