Free
Your initial readiness roadmap
- Readiness assessment
- Initial readiness starting point
- Likely blockers and first actions
- Initial 30, 60, and 90-day roadmap
Pricing
Start with an AI vCISO. Add human help when you need it.
Prepare for SOC 2 or ISO 27001 from $2,490 per year. Every software plan includes unlimited users, released frameworks, and all available integrations.
Start with the free roadmap
See the starting plan before you activate the program.
The readiness assessment and initial roadmap are free. Choose a paid plan when you are ready to connect systems and run the program.
Paid activation
Put the roadmap into operation
- Connect available integrations
- Draft policies and review evidence
- Monitor controls and coordinate remediation
- Run ongoing AI vCISO workflows with your team
The free roadmap remains available if you are not ready to activate.
Save two months with annual billing.
AI vCISO
Recommended for lean teamsFor lean teams preparing for SOC 2 or ISO 27001 without a compliance hire.
Per year
$207.50 per month equivalent · Save $498
- SOC 2 Type I and Type II
- ISO 27001:2022 and Statement of Applicability
- Unlimited users and included frameworks
- All available integrations; no connector-count fees
- Controls, policies, evidence, findings, and roadmap
- Monitoring, assets, workforce, vendors, and access reviews
Usage and capacity
- Questionnaires, trust center, audits, and reports
- 500 chat messages and 25 generation workflows monthly
- 10 questionnaires up to 500 questions each
- 25 GB evidence storage
AI vCISO + Advisor
For teams that want recurring expert judgment without a full managed engagement.
Per year
$832.50 per month equivalent · Save $1,998
- Everything in AI vCISO
- Monthly 60-minute practitioner review
- 2 asynchronous advisory requests monthly
- 2-business-day response target
- Quarterly executive-ready program report
Managed vCISO
For teams that need an experienced security leader to own the program.
Custom
Scoped to your needs
- Everything in AI vCISO + Advisor
- Named human vCISO through vCISO.com
- Executive and board participation
- Customer and auditor representation
- Custom security initiatives and vendor coordination
No seat, framework, integration, or onboarding fees. Optional usage packs are $99 when a software plan needs a temporary capacity boost.
Monthly billing is available. Your signup price is locked for 24 months under the Terms. Independent auditor and certification-body fees are not included.
Software when you can own it. Humans when you need them.
Included frameworks and available integrations stay open on every tier. Higher tiers add practitioner judgment and accountability, not artificial product gates.
| What you get | AI vCISO | AI vCISO + Advisor | Managed vCISO |
|---|---|---|---|
| SOC 2 Type I, Type II, and ISO 27001 | Included | Included | Included |
| Controls, policies, evidence, and roadmap | Included | Included | Included |
| Monitoring, integrations, assets, and workforce | Included | Included | Included |
| Findings, vendors, access reviews, and training | Included | Included | Included |
| Questionnaires, trust center, audits, and reports | Included | Included | Included |
| Monthly practitioner review | Not included | Included | Included |
| Asynchronous practitioner requests | Not included | Included | Included |
| Quarterly executive program review | Not included | Included | Included |
| Named human security leader | Not included | Not included | Included |
| Board, customer, and auditor representation | Not included | Not included | Included |
Frequently asked questions
Straight answers about plans, billing, and what an audit really costs.
Plans and billing
How do I start before choosing a paid plan?
The readiness assessment and initial roadmap are free. You can review your starting point, likely blockers, first actions, and initial 30, 60, and 90-day roadmap before paying. Activate a plan when you are ready to connect systems and operate the ongoing program.
Can I pay monthly or annually?
Yes. AI vCISO is $249 monthly or $2,490 yearly. AI vCISO + Advisor is $999 monthly or $9,990 yearly. Both annual plans include two months free compared with monthly billing, and your signup price is locked for 24 months under the Terms. Managed vCISO engagements are scoped separately.
What is the difference between AI vCISO and AI vCISO + Advisor?
AI vCISO includes the released software, self-service onboarding, in-product guidance, and the published AI and storage allowances. AI vCISO + Advisor adds one 60-minute practitioner review each month, two asynchronous advisory requests each month, a two-business-day response target excluding holidays and scoped emergencies, and a quarterly executive-ready review. Human-led penetration testing is available separately unless an included scope is shown before purchase.
What does onboarding cost and include?
There is no onboarding fee. Guided setup collects company, system, customer, and audit context, then builds the selected framework scope, controls, a 30, 60, and 90-day roadmap, and a recommended first control. No connector or AI request is required to build that initial program.
Do you charge for frameworks, integrations, or seats?
No. AI vCISO includes unlimited users, SOC 2 and ISO 27001, and every available integration. AI workflows and storage have published monthly allowances. A $99 usage pack provides a temporary capacity boost when needed.
What happens when I reach a usage limit?
Included chat, generation, and questionnaire allowances reset each month and unused included capacity does not roll over. Storage is measured across the organization. A $99 usage pack adds 250 chat messages, 15 generation workflows, 5 questionnaires, and 25 GB for up to one year. A paid workflow stays unavailable after its relevant allowance is exhausted until capacity resets or a pack is added.
Is Managed vCISO available through self-service checkout?
No. Managed vCISO is custom scoped through vCISO.com because the named-leader role, meeting cadence, representation, and security initiatives depend on the organization. AI vCISO and AI vCISO + Advisor support self-service monthly or annual checkout when billing is available.
Audits and data
Does the price include the audit itself?
No. SOC 2 reports come from independent CPA firms, and ISO 27001 certificates come from accredited certification bodies. Their scope and fees vary and are separate from vCISO.ai pricing.
What happens to my data if I cancel?
The work product is yours. You can download questionnaires and stored artifacts directly, and request an export of the rest of your program content during the wind down period. We then delete your data on request, subject to legal retention requirements.
Do you offer discounts for startups or nonprofits?
If the published price is genuinely out of reach, talk to us. We would rather meet you where you are than lose you to a spreadsheet.
Did not find what you were looking for? Talk to us.
Start with the roadmap
Get your readiness roadmap before you choose a plan.
Tell vCISO.ai about your company, systems, and target audit. Start with the work that matters most.