Become audit-ready in 4-5 weeks
Plans and pricing,
managed your way
Pick how you want your compliance run, then pick the plan. Every option runs on the same risk-led CISOGenie platform, for DPDPA, ISO 27001, SOC 2, RBI and 40+ other frameworks.
How would you like it delivered?
Your team runs it on the CISOGenie platform
For companies with an IT or security team that can handle compliance day to day.
Starter
Start your compliance program
Scaler
Stay compliant
Enterprise
Scale strategically
Starter
For growing teams starting their compliance journey.
What's included
- 1 Tenant License
- 2 Compliance Frameworks
- 10 Users
- API Evidence Collection
- System Generated Policies (OSCAL)
- Awareness Training
- VAPT (for 1 Network and 1 Application)
- Implementation Guidance
- Trust Center Basic
- AI-Powered Risk Register
- Bring Your Own LLM
- Dynamic Dashboards
Scaler
Comprehensive features for established organizations.
What's included
- 1 Tenant License
- 3 Compliance Frameworks
- 25 Users
- API + MCP Evidence Collection
- Agentic Audits (up to 2)
- Awareness Training
- VAPT (for 2 Networks and 2 Applications)
- Implementation Guidance
- EASM & Darkweb Monitoring
- AI Powered Reports (5/month)
- Bring Your Own LLM
- Dynamic Dashboards
- Custom MCP Connector
- Seamless External LLM Connectivity
Enterprise
Advanced capabilities with white-labelling for maximum impact.
What's included
- 1 Tenant License
- 5 Compliance Frameworks
- 50 Users
- API + MCP + Browser Evidence
- Agentic Audits (up to 3)
- Customized Awareness Training
- Customized VAPT Services
- Implementation Guidance
- White-labelling Included
- AI Powered Reports (10/month)
- Bring Your Own LLM
- Dynamic Dashboards
- Custom MCP Connector
- Seamless External LLM Connectivity
Our experts run your program on the CISOGenie platform
No security team, or no time to run compliance yourself? Pick one of these two packages and our team takes it from there.
Get Certified
For when a customer, a tender or a regulator needs proof. Covers DPDPA, ISO 27001, SOC 2 or any of our 40+ frameworks.
Fixed price per framework. Talk to us for a quote.
- Audit-ready in 4-5 weeks
- Gap assessment against your framework
- A full, audit-ready set of policies and documents
- An hour a week with your consultant
- Risk and supplier registers set up for you
- Internal audit and sign-off before your certification audit
- Access to the CISOGenie platform
Get Certified & Protect
For when you need to stay certified, year after year.
One-time setup, then a monthly subscription. Talk to us for a quote.
- Everything in Get Certified
- An ongoing vCISO, with quarterly reviews
- Quarterly penetration testing
- Code scanning in your build pipeline
- Staff training and phishing drills
- Access reviews and privacy readiness
- Trust Center and dark web monitoring
The certification body's audit fee is separate. 250+ staff or a regulated sector? Talk to us about a custom program. Need help with a specific task, such as a vulnerability assessment, pentest or security awareness training? See our services →
Who does what
We take care of
- Gap assessment, scope and project plan
- Policies, procedures, risk and supplier registers
- Control setup and automated evidence collection
- Internal audit and readiness sign-off
- Year-round upkeep and vCISO support (Get Certified & Protect)
You'll need
- Someone on your side to own the project
- An hour a week with your consultant
- System access so evidence can be collected
- Your IT team or provider to make technical fixes
- The certification body's audit fee
Want us to do more of the hands-on work? Add extra consultant hours.
Are you an MSSP, MSP or VAR? See our partner program
Extend Your Plan
Add these powerful capabilities to any base plan
Consent Manager
Streamline consent collection and data subject rights management in compliance with privacy regulations.
- Cookie consent & preference center
- DSAR workflow automation
- Consent audit trail & logging
- Multi-regulation support (GDPR, DPDP, CCPA)
- Onboarding support + monthly actuals
Data Classification / Labelling
Automatically discover, classify, and label sensitive data across your organization's systems.
- Auto-discovery across cloud & on-prem
- Sensitivity labelling (PII, PHI, financial)
- Data flow mapping & lineage
- Policy-based classification rules
- Compliance-ready data inventory reports
Additional VAPT Credits
Need more assessments? Add web, network, API, or cloud VAPT engagements to any plan a-la-carte.
- Web app, network, API & cloud VAPT
- OWASP Top 10 & SANS 25 coverage
- Executive summary + remediation roadmap
- Re-test after remediation included
- Findings auto-mapped to risk register
Custom Training Modules
Industry-specific or regulation-specific training content tailored to your organization's unique risk profile.
- Role-based tracks (Dev, Finance, Exec)
- Industry-specific content (Healthcare, BFSI)
- Custom branding & messaging
- Completion certificates for audit evidence
- Multi-language support
vCISO Services
On-demand security leadership without the full-time hire. Strategic guidance tailored to your compliance stage.
- Security strategy & roadmap
- Board & executive reporting
- Incident response planning
- Vendor risk oversight
- Audit prep & liaison
Phishing Drills
Run realistic phishing simulation campaigns to measure awareness, reduce human risk, and strengthen secure behavior across teams.
- Role-based phishing simulation campaigns
- Risk-based user segmentation
- Landing page and credential capture telemetry
- Automated remedial awareness training
- Executive reporting with trend analytics
Compare Features
Everything you need to know about what's included.
Features for Scaler
Questions about plans and pricing
SOC 2 and ISO 27001 certified ourselves · Your data never leaves your environment
