Platform
Modules
Services
Solutions
By role
Resources
Library
Pricing
Modules are contracted separately, and the tiers climb with the maturity of the programme, not with the number of users. If all you need is audit, all you pay for is audit.
See pricing for
In-house security, audit and compliance teams.Delivery to multiple clients, with multi-tenant and white-label.
On request
per organisation
Put the audit cycle in order and stop chasing the report.
Standardise delivery and win back the margin reporting eats.
Who it is for
On request
per organisation
Move from the annual snapshot to continuous evidence, with compliance mapped.
Multi-tenant, a portal per client, and compliance work on top of the pentest.
Who it is for
Tailored
by scope
All five disciplines on one case file, with deployment built to fit.
Portfolio at scale, full white-label and contract terms of your own.
Who it is for
What each tier includes
Swipe the table to see every tier
| Capability | Essential | Core | Premium |
|---|---|---|---|
| Modules | |||
| Audit Lifecycle The full audit cycle, in eight phases. | Included | Included | Included |
| GRC Controls, risks, policies and attestations. | Not included | Included | Included |
| CSPM Cloud configuration checked continuously. | Not included | Add-on | Included |
| Incident Response Incident management, fully on the record. | Not included | Add-on | Included |
| Third-Party Risk Supplier assessment with external verification. | Not included | Add-on | Included |
| Shared foundation | |||
| Asset inventory One inventory for every active module. | Included | Included | Included |
| Evidence repository Versioned documents with a date and an owner. | Included | Included | Included |
| Activity log A full audit trail of every status change. | Included | Included | Included |
| Scanners and import More than a hundred parsers with deduplication. | Included | Included | Included |
| Compliance | |||
| Frameworks out of the box NIS2, DORA, ENS, ISO 27001 and nine more. | 4 | 13 | 13 + your own |
| Control-to-control mapping Correspondence between frameworks proposed by AI. | Not included | Included | Included |
| Attestation campaigns The owner signs the control off. | Not included | Included | Included |
| Statement of applicability Publishable SoA with justified exclusions. | Not included | Included | Included |
| Client and delivery | |||
| DOCX and PDF reports Generated from the data, with templates. | Included | Included | Included |
| Client portal Progress, document upload and disputes. | Not included | Included | Included |
| Electronic signature The client signs the report off from their portal. | Not included | Included | Included |
| White-label Your brand, your palette and your domain, per client. | Not included | Included | Included |
| Multi-tenant Strict isolation in the data layer. | Not included | Included | Included |
| Violet AI | |||
| Finding write-ups A draft finding built from the evidence. | Included | Included | Included |
| Remediation guidance Proposed fix steps, per finding. | Included | Included | Included |
| Mapping between frameworks Control correspondence across regulations. | Not included | Included | Included |
| Document review Verification of supplier certificates. | Not included | Add-on | Included |
| Deployment and support | |||
| Data residency by contract The DPA states the processing provider and region. | Included | Included | Included |
| SSO / SAML Federation with your identity provider. | Not included | Included | Included |
| On-premise or private cloud Deployment on your own infrastructure. | Not included | Not included | Included |
| Support Committed channel and response times. | Priority with SLA | Dedicated manager | |
| DPA and tailored contracts Terms adapted to your legal team. | Not included | Not included | Included |
Before you pay anything
We stand up a dedicated environment with your real scope, import your history and run a full cycle with you. No cost, no card, no commitment to continue.
