One GRC platform. A plan for every stage.
From your first CyFun® baseline to multi-framework governance across the group.
EU-hosted in Antwerp, built for NIS2, CyFun® and ISO/IEC 27001, with support in Dutch, French and English.
Built on CCB CyFun® BASIC
NIS2 Starter
Reach and maintain CyFun® BASIC and handle NIS2 notifications to the CCB.
FreeEarly access – places are limited
- CCB CyFun® BASIC – 34 controls, maturity target 2.5
- NIS2 incident filings to the CCB: 24h · 72h · 1 month
- Risk register with up to 10 risks
- Evidence and policy library (2 GB)
- 1 user, 1 workspace
SMEs / Single BU
Core
Getting started with trust and compliance, on one framework.
Custom quoteUp to 1,500 FTE
- 1 framework included
- Unlimited users
- Assessments (1 per framework) and Audit Hub
- Risk register with unlimited risks
- Policy and procedure templates, versioning
- RBAC, SSO and audit trail
- Trust Network for up to 250 domains
Mid-market / Multi-BU
Pro
Advanced governance, automation and multi-framework control.
Custom quoteUp to 5,000 FTE
- Everything in Core, plus:
- 3 frameworks included, up to 5 per workspace
- Cross-framework mapping and Unified Controls Library
- 3 assessments per framework, issues management
- 5 risk registers
- Policy approval workflow and user policy portal
- Asset management
- Add-ons (coming soon): Advanced Risk, Advanced Incident & Breach, Advanced Third-Party Risk with EASM
Large orgs / MSPs
Enterprise
Scaling security and compliance across your entire organisation.
Custom quoteUp to 50,000 FTE
- Everything in Pro, plus:
- 5 frameworks included, unlimited per workspace
- Advanced Risk Register included (coming soon)
- Advanced Third-Party Risk included, with EASM monitoring (coming soon)
- Unlimited assessments and risk registers
- Up to 250 workspaces, unlimited tenants
- Dedicated support
All plans are hosted in the EU. Onboarding is a one-off programme, quoted separately from the licence.
At a glance
The key differences
The eight things that usually decide the plan. Every feature, side by side, is in the full comparison.
| NIS2 Starter | Core | Pro | Enterprise | |
|---|---|---|---|---|
| Frameworks included | CyFun® BASIC | 1 | 3 (up to 5 per workspace) | 5 (unlimited per workspace) |
| Organisation size | Any size | Up to 1,500 FTE | Up to 5,000 FTE | Up to 50,000 FTE |
| Users | 1 | Unlimited | Unlimited | Unlimited |
| Workspaces | 1 | 1 | 1 included, up to 3 | 1 included, up to 250 |
| Cross-framework mapping | — | — | ✓ | ✓ |
| Assessments per framework | — | 1 | 3 | Unlimited |
| Risk registers | 1 (up to 10 risks) | 1 | 5 | Unlimited |
| Support | Knowledge Base | Priority | Dedicated |
Compare all features → · Compare Secrato with other GRC platforms →
Pricing
How your quote is built
Clear building blocks, so you only pay for the scope you need.
Matched to your organisation size and the governance you need.
Extra frameworks and workspaces on Pro and Enterprise.
Advanced Risk, Advanced Incident & Breach and Advanced Third-Party Risk with EASM – coming soon.
A programme sized to your organisation, with handover to your own team.
In every plan
Included as standard
FAQ
Questions about our plans
Where is my data hosted?
In the EU: Secrato runs in a Tier IV data centre in Antwerp that is ISO/IEC 27001 certified, with TLS and AES-256 encryption and comprehensive audit logging in every plan.
Is onboarding included in the licence?
Onboarding is a one-off programme, quoted separately from the licence and sized to your organisation, with handover to your own team. NIS2 Starter is self-service, guided in the product.
Can I add frameworks later?
Yes. Pro includes 3 frameworks and allows up to 5 per workspace; Enterprise includes 5 and has no limit per workspace. Extra and custom frameworks are purchased per framework.
What is NIS2 Starter?
A free plan, currently in early access, built on CCB CyFun® BASIC: reach and maintain BASIC and handle NIS2 notifications to the CCB, for one user and one workspace. Request a place.
Do you work with partners and managed service providers?
Yes. Multi-tenant management and white label are available through the Partner Programme.
Which languages are supported?
The platform and our support are available in Dutch, French and English.
Not sure which plan fits?
Every organisation is different. Tell us where you are in your compliance journey and we will help you choose the right plan and scope.
