Pricing

Plans for a written program you can prove

Each plan is a dedicated dashboard for a Google Workspace, Microsoft 365, Amazon Web Services (AWS), or Dropbox team: a named-owner program, ongoing checks, and a report you can share — tied to the checklist they named. Retention is 6 months on Essentials and Monitor (or 3 years with the add-on), and 3 years on Assure.

Essentials Plan

Stand up a written program you can share.

$149 / month base

+ $5 per team member

Included

  • Dedicated security dashboard with your customized plan
  • Live identity checks (two-step sign-in, admins, audit, sharing)
  • App-consent review and dormant-account checks
  • Core laptop security (encrypt, updates, screen lock, enroll)
  • Email authentication (so others can't fake your mail)
  • Basic checks of what's visible on the internet (HTTPS, exposed admin pages)
  • Monthly and renewal reports (PDF) with share links
  • 6-month records retention (3-year add-on available)
Subscribe

Most teams choose this

Monitor Plan

Stay passing between questionnaires.

$249 / month base

+ $9 per team member

Included

  • Everything in Essentials Plan
  • Ongoing monitoring between third-party asks
  • Deeper laptop security and backup assurance
  • Known vulnerable or no-longer-supported software on company devices
  • Broader internet checks, including remote desktop left open
  • Three core policy templates included
  • Additional policy templates available as optional
  • 6-month records retention (3-year add-on available)
Subscribe

Assure Plan

A long audit trail when someone asks for proof.

$399 / month base

+ $13 per team member

Included

  • Everything in Monitor Plan
  • 3-year records retention included
  • Compliance evidence archive (monthly packs)
  • All policy templates included
  • Installed-apps inventory on company devices
  • Renewal reports tied to the checklist they asked you to use
  • Ready-to-share status when required controls are green
  • Multi-year audit trail for what changed and when
Subscribe

Optional add-ons that pay for themselves when someone asks

Enable either add-on on Essentials Plan or Monitor Plan—or get both included on Assure Plan. Each one answers a specific third-party ask without buying another security product.

+$49.00/mo on Essentials & Monitor plans · included on Assure Plan

Compliance evidence archive

Monthly evidence packs on the disk that holds your dashboard.

  • Month-stamped packs stay on disk after a dashboard rebuild
  • Hand over last month's pack without a scramble
Add it when you subscribe →

+$10.00/mo on Essentials & Monitor plans · included on Assure Plan

3-year records retention

Keep the audit trail far past one questionnaire.

  • Supports multi-year evidence requests and dated check history
  • Month-to-month picture of what got better or worse
Add it when you subscribe →

Who benefits

One subscription. A program you can run — and proof others can accept.

Clients

  • A written program you can deploy
  • Work sized for a part-time owner or office manager
  • Settings are checked from the inside, not assumed
  • Drift is caught between questionnaires
  • Proof you can hand over without giving a third party a login
  • One certification, shareable with many third parties at no extra cost
  • Cost effective and recurring

Third parties

  • Less time and work to engage a CyberSafe-covered vendor
  • Lower risk: stack-verified proof the program is in force
  • Cuts as many as 50 items off a third-party questionnaire
  • Diligence on exceptions, not screenshot collection
  • Evidence factory for a program practice; drift to the advisor
  • Continuous evidence for shops too small for SOC 2, ISO, etc.
  • Forms answered from a regenerable pack
  • Same pack next quarter — less time reviewing again

Insurers

  • No annual screenshot chase
  • Living control matrix and renewal report, no tenant login
  • Period compliance and deltas since last submission
  • Cleaner underwriting file: multi-factor authentication (MFA), backup, and business email compromise (BEC) dual control on
  • Insurer-agnostic; faster bind

Controls by plan

Every control we support for Google Workspace, Microsoft 365, Amazon Web Services (AWS), or Dropbox teams, by plan — including downloadable policy templates (Evidence & policies rows marked policy template ). Identity names are the Google Workspace suite; Microsoft 365, AWS, and Dropbox swap the equivalent checks. Rows marked if appropriate appear only when your environment answers say they apply. Numbered footnotes mark identity controls that are not available or not relevant on AWS and/or Dropbox.

Control Essentials Plan Monitor Plan Assure Plan
Identity & cloud apps
Multi-factor authentication (MFA) enforced for all users Included Included Included
Super admin count within policy Included Included Included
Audit logging enabled for tenant Included Included Included
Google Workspace Open Authorization (OAuth)/app consent review Included Included Included
Drive external sharing posture Included Included Included
Security alert routing configured Included Included Included
Shared Drives in use for team data 2 Included Included Included
Legacy app access restricted (Open Authorization (OAuth) enforced) Included Included Included
No shared user logins detected Included Included Included
Dormant accounts reviewed or disabled Included Included Included
Joiner/leaver process documented and followed Included Included Included
Advanced spam and phishing protection configured 1 Included Included Included
Laptops
Full-disk encryption on endpoints Included Included Included
Operating system (OS) patch posture within policy Included Included Included
Screen lock policy on endpoints Included Included Included
All endpoints enrolled in device management Included Included Included
No risky local admin states on endpoints Not included Available Available
Secure Wi-Fi on endpoints Not included Available Available
No risky services listening on endpoints Not included Available Available
No known-vulnerable software on endpoints Not included Available Available
Email
SPF, DKIM, and DMARC configured Included Included Included
Public exposure
Transport Layer Security (TLS) hygiene for public hostname Included Included Included
No exposed admin services on public hostname Included Included Included
Web application firewall (WAF) or content delivery network (CDN) in front of public application if appropriate Not included Available Available
Public web surface documented if appropriate Not included Available Available
Remote Desktop Protocol (RDP) not exposed on internet or endpoint listeners if appropriate Not included Available Available
HTTP Strict Transport Security (HSTS) enabled on public Hypertext Transfer Protocol Secure (HTTPS) site if appropriate Not included Available Available
No known-vulnerable public software versions if appropriate Not included Available Available
File transfer
Legacy File Transfer Protocol (FTP) decommissioned or replaced if appropriate Available Available Available
Evidence & policies Policy templates download from the dashboard.
Data backup policy documented policy template Included Included Included
Incident response playbook documented Included Included Included
Remote work security acknowledged if appropriate Included Included Included
Dual control for payment changes policy template if appropriate Not included Available Included
Acceptable use policy documented policy template Not included Available Included
Data handling and classification policy documented policy template Available Included Included
Password and access control policy documented policy template Not included Available Included
Information security program policy documented policy template Available Included Included
Incident response policy documented policy template Available Included Included
Remote work security policy documented policy template if appropriate Not included Available Included
Third-party and vendor risk policy documented policy template Not included Available Included
Backup and business continuity policy documented policy template Not included Available Included
Security awareness training policy documented policy template Not included Available Included
Renewal evidence pack available Not included Not included Included
Integrations
Endpoint detection and response (EDR) integration connected if appropriate Not included Available Available

1 Not available on AWS or Dropbox

2 Not available on AWS

Example: an 8-person Monitor Plan team is $321.00 /month . With both add-ons: $380.00 /month .

Ready for a security dashboard built around a program you can prove?

Subscribe now