Pricing

Pricing you can see. Renewals you can predict.

The biggest complaint about compliance platforms is the hidden quote and the renewal hike. We publish our prices and lock yours for 24 months under clear Terms.

Save two months on Platform and Advisor with annual billing
Trial
For teams proving fit before committing.
$0
for 14 days
Start 14-day trial
  • 14 days, no credit card
  • SOC 2 and ISO 27001 cross mapping
  • 100 vCISO chat messages
  • 5 policy or evidence generations
  • 1 questionnaire up to 250 questions
Platform
Most popular
For teams that can run the program with software guidance.
$249
Per month equivalent
Billed $2,988 yearly · Save $600
Start free
  • SOC 2 Type I and Type II
  • ISO 27001:2022 and Statement of Applicability
  • Unlimited users and frameworks
  • All available integrations; no connector-count fees
  • 500 chat messages and 25 generation workflows monthly
  • 10 questionnaires up to 500 questions each
  • 25 GB evidence storage
Advisor
For teams that want expert accountability without a fractional executive.
$833
Per month equivalent
Billed $9,990 yearly · Save $1,998
Start free
  • Everything in Platform
  • Monthly 60-minute practitioner review
  • 2 asynchronous advisory requests monthly
  • 2-business-day response target
  • Quarterly executive-ready program report
Managed vCISO
For teams that need human ownership, not another tool to operate.
From$5,000
Per month
Talk to vCISO.com
  • Everything in Advisor
  • Named human vCISO through vCISO.com
  • Executive and board participation
  • Customer and auditor representation
  • Custom security initiatives and vendor coordination

No seat, framework, integration, onboarding, or surprise renewal fees. Optional usage packs are $99 when a software plan needs a temporary capacity boost.

The no renewal surprises guarantee

Your signup price is your renewal price for 24 months under our Terms. If our list prices go up, yours does not. The hidden quote and the surprise renewal hike are the two things buyers hate most about this category. We removed both.

Software when you can own it. Humans when you need them.

Frameworks and integrations stay open on every tier. Higher tiers add practitioner judgment and accountability, not artificial product gates.

What you get
SOC 2 Type I and Type II
ISO 27001 and Statement of Applicability
Unlimited users and all available integrations
AI gap analysis, policies, and evidence mapping
Security questionnaires
Monthly practitioner review
Async practitioner requests
Quarterly executive report
Named human vCISO
Board, customer, and auditor representation
Trial
✓
✓
✓
✓
✓
✗
✗
✗
✗
✗
Platform
✓
✓
✓
✓
✓
✗
✗
✗
✗
✗
Advisor
✓
✓
✓
✓
✓
✓
✓
✓
✗
✗
Managed
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓

Frequently asked questions

Straight answers about plans, billing, and what an audit really costs.

Plans and billing

Audits and data

Did not find what you were looking for? Talk to us.

See where you stand for free.

Sign up, run your gap analysis, and get your roadmap before you spend a dollar.

Start freeBook a demo