Find your plan
Designed for Teams of Any Size
Built around your needs, from startup to enterprise scale.
Flexible plans, clear value, and everything you need to stay audit-ready.
Plans
Free · Early access
Built on CCB CyFun® BASIC
NIS2 Starter
Reach and maintain CyFun® BASIC and handle NIS2 notifications to the CCB. One user, one workspace. In early access: request a place.
SMEs / Single BU
Core
Getting started with trust & compliance. Multi-framework support.
★ Most popular
Mid-Market / Multi-BU
Pro
Advanced governance, automation and multi-framework control.
Large Orgs / MSPs
Enterprise
Scaling security & compliance across your entire organisation.
Frameworks
Frameworks
✓ CCB CyFun® BASIC34 controls, maturity target 2.5
✓ 1 included
✓ 3 includedup to 5 per workspace
✓ 5 includedunlimited per workspace
CyFun® Selection wizard
✓ Included
✓ Included
✓ Included
✓ Included
CyFun® import and export
✓ Included
✓ Included
✓ Included
✓ Included
Custom frameworks
—
—
✓ Purchased as a frameworkSeveral per workspace
✓ Purchased as a frameworkSeveral per workspace
Cross-framework mapping and Unified Controls Library
—
—
✓ Included
✓ Included
Organisation size
✓ Any size1 user
✓ Up to 1,500 FTE
✓ Up to 5,000 FTE
✓ Up to 50,000 FTE
Compliance Engine
Maturity scoring
✓ Documentation + technicalTarget 2.5 (BASIC)
✓ Included
✓ Included
✓ Included
Statement of Applicability
✓ Applicable or excluded, with reason
✓ Included
✓ + export, snapshots, approval
✓ + export, snapshots, approval
Requirements and controlsTwo views, mapped to each other
✓ ControlsCyFun® is published as controls
✓ As the framework publishes it
✓ Both viewsSwitch each one on or off
✓ Both viewsSwitch each one on or off
Evaluation methodMaturity based, compliance based or both
✓ CyFun® defaultMaturity based
✓ Catalogue defaultPer framework, as published
✓ ConfigurableChange it per framework
✓ ConfigurableChange it per framework
Continuous monitoring
✓ Live controls
✓ Included
✓ Included
✓ Included
Kickstart frameworksCarry existing data across through cross-framework mapping
—
—
✓ Included
✓ Included
Control labelsGroup controls across frameworks
—
—
✓ Included
✓ Included
Control import
—
—
✓ Included
✓ Included
Continuous sync
—
—
—
✓ IncludedEarly access
Global Governance
—
—
—
✓ IncludedEarly access
Assessments
Assessment types
—
✓ Live framework only
✓ All types
✓ All types
Assessments per framework
—
✓ 1
✓ 3
✓ Unlimited
Scoring modelHow an assessment is scored
—
✓ Compliance based and maturityImplemented · In progress · Not implemented · Not in scope, and 0 to 5
✓ Plus your own scaleDefine the range and what each step means, for example 0 to 3 or 0 to 15
✓ Plus your own scaleDefine the range and what each step means, for example 0 to 3 or 0 to 15
Issues management
—
—
✓ Included
✓ Included
Audit Hub
Audit plan
—
✓ Included
✓ Included
✓ Included
Findings
—
✓ Included
✓ Included
✓ Included
Risk Register
Basic Risk RegisterRegister, controls, one treatment per risk, review · simple mode
✓ 1 registerUp to 10 risks
✓ 1 registerUnlimited risks
✓ 5 registersUnlimited risks
✓ Unlimited registers
Risk method and matrixHow likelihood and impact are measured
✓ Fixed 3×3
✓ Secrato Standard 5×5The register default
✓ Secrato Standard 5×5Other sizes and methods with Advanced
✓ 3×3, 4×4, 5×5 or 6×6With ISO/IEC 27005, ISO 31000, NIST SP 800-30, COSO ERM, operational, third-party, DPIA or OT/ICS as the method, or your ownEarly access
Risk register import and export
—
—
✓ Included
✓ Included
Advanced Risk RegisterMultiple treatments per risk, exceptions, Enterprise Register · escalation, financial quantification, 3×3 to 6×6 matrices, own methodology
—
—
✓ Add-on
✓ Included
Incident and Breach
Basic Incident & Breach ManagementSeven stages, CCB significance test, NIS2 filings 24h · 72h · 1 month
✓ Included
✓ Included
✓ Included
✓ Included
Advanced Incident & Breach ManagementGDPR, CRA and DORA notifications, playbooks, corrective actions
—
—
✓ Add-on
✓ Included
Third-Party Risk
Vendor registerProfile, services, history, comments
✓ Unlimited
✓ Unlimited
✓ Unlimited
✓ Unlimited
Advanced Third-Party Risk ManagementQuestionnaire engine, campaigns, tiering, contract follow-up
—
—
✓ Add-onA fixed price per band, from 20 vendors questioned a year
✓ IncludedUp to 50 vendors questioned a year, bands above that
EASM continuous monitoringComes with Advanced Third-Party Risk Management
—
—
✓ Comes with TPRM Advanced20 scans, the same bands above that
✓ Comes with TPRM Advanced50 scans, the same bands above that
Task Management
Tasks & actions across all modulesFrom controls, evidence, policies, procedures, assessments, issues & risks
✓ IncludedExcluding assessments
✓ Included
✓ Included
✓ Included
Evidence & Policies
Evidence, policy and procedure libraries
✓ Included (2GB)No approval step
✓ Included
✓ Included
✓ Included
Versioning
—
✓ Included
✓ Included
✓ Included
Policy and procedure templates
—
✓ Included
✓ Included
✓ Included
LabelsPolicies, procedures and evidence, mapped across frameworks
—
—
✓ Included
✓ Included
Approval workflowReview, approve, publish to the policy portal
—
—
✓ Included
✓ Included
Devices & Personnel
Personnel tracking
—
✓ Included
✓ Included
✓ Included
Asset management
—
—
✓ Included
✓ Included
User policy portal
—
—
✓ Included
✓ Included
Dashboards & Reporting
Dashboards
✓ Tasks overview & schedule
✓ Standard per module
✓ Cockpit, custom widgets, spider/heatmap
✓ Role-based + workspace views
Reports
—
✓ Limited
✓ Included
✓ Included
Trust Center
Approved domains
—
✓ 250
✓ Unlimited
✓ Unlimited
NDA gating and access expiry
—
✓ NDA gating
✓ + configurable expiry
✓ + configurable expiry
Access & Workspaces
Users
✓ 1
✓ Unlimited
✓ Unlimited
✓ Unlimited
WorkspacesOwn scope, own frameworks, own reporting
✓ 1
✓ 1Core stays at one
✓ 1 includedUp to 3, on a descending ladder
✓ 1 includedAny number purchasable, on a descending ladder
TenantsA parent organisation with workspaces underneath
✓ 1
✓ 1
✓ 1
✓ Unlimited
RBAC, SSO, multi-IDP and audit trail
—
✓ Included
✓ Included
✓ Included
Own branding per workspace
—
—
✓ Included
✓ Included
Multi-tenant and white labelManaged service partners
✓ Partner programme
✓ Partner programme
✓ Partner programme
✓ Partner programme
Onboarding and implementation
Onboarding programmeOne-off, quoted separately from the licence
✓ Self-serviceGuided in the product
✓ Sized to your organisationSmall or Medium, up to 1,500 FTE
✓ Sized to your organisationSmall to Large, up to 5,000 FTE
✓ Sized to your organisationSmall to Extra large, up to 50,000 FTE
Onboarding per additional workspace
—
—
✓ Per workspace
✓ Per workspace
Handover to your own team
—
✓ Included in the programme
✓ Included in the programme
✓ Included in the programme
Integrations and Support
Integrations, apps and API
—
✓ Included
✓ Included
✓ Included
LanguagesPlatform and support
✓ NL · FR · EN
✓ NL · FR · EN
✓ NL · FR · EN
✓ NL · FR · EN
Support level
✓ Knowledge Base + best effort
✓ Email
✓ Priority
✓ Dedicated
Security & Hosting Inclusions
EU Sovereign Hosting
SOC 2–Ready Infrastructure
TLS & AES-256 Encryption
Comprehensive Audit Logging
Ready to Start?
Let’s explore your goals and find your best fit.
Every organization is unique. Tell us where you are in your compliance journey, and we’ll guide you to the plan that suits your needs.
