How pricing works

CIS 7.1 | CIS 8.0 | NIST

Charge your clients for the assessments, we charge  a fee per client assessment.

Create your client accounts.

We train you to provide Cyber Security Assessments according to globally recognised cyber security frameworks.

Provide your clients with a full assessment review report.

Provide your clients with a remediation quotation or budget based on the assessments risks prioritised according to Impact and Probability.

Sell your remediation products to the clients and build your recurring revenue base.

We provide you with recommendations and guides on what services to sell.

We can provide you with 2nd level Cyber support via our Cyber Security expert network.

Only members of your own team can access the service, no client access, unless you upgrade your clients to the Company Subscription.

Upgrade your clients to Company Subscription and earn recurring revenue.

For both Assessment only and Company Subscription clients, we invoice you, you invoice your clients.

Your clients require access to the system.

Your clients' auditors require a set comprehensive Cyber Security reports and dashboards.

Clients would like to do their own/combined assessments, manage and interact with the system in teams rather than just receive reports from the service provider.

They have a complex structure, multiple subsidiaries and require consolidated views.

Your clients wish to do 3rd party risk assessments.

They wish to do assessments monthly or quarterly.

They wish to do CIS IG2 and IG3 or higher level NIST Implementation Tiers.

Grow your annual recurring revenue.

CIS 8.0 | NIST CSF 1.1

One unit (Subsidiary, department, location as required)

Full Assessments.

Comprehensive dashboard per assessment.

Risk Matrix.

Risk Action Plan / Risk Register.

Unlimited Evidence of Activity.

Management Dashboard for CISO.

Build and review your Cyber Security budget based on impact and probability of the risk identified.

Unlimited assessments.

All of Company Subscription.

An additional business unit which can be a subsidiary, department, location as required.

Consolidated Management Dashboard showing multiple units.

Send a 3rd party risk assessment to 3rd party.

3rd party completes the assessment including evidence of activity.

Produce detailed assessment report and determine if 3rd party adequate or requires remediation.