A GRC platform that doesn't punish you for growing
Unlimited free seats, pricing that scales with frameworks and integrations instead of headcount, AI woven through the workflow, and mapping at the requirement level. Here's what that means.
Four decisions that change the math
Unlimited free seats
Invite your whole company (auditors, engineers, leadership) at no per-seat cost. Compliance is a team sport; we don't tax you for inviting the team.
Pricing on what you use
You pay along two axes: the frameworks you run and the integrations you connect, not the number of people you add.
AI-native, with MCP
AI assists drafting throughout, and an MCP server lets tools like Claude and Cursor work directly against your tenant's compliance data, scoped to your org.
Requirement-level mapping
Evidence maps to individual requirements, not just broad control families, so a single passing test can satisfy many frameworks at once.
Two axes, not seats
Most GRC tools meter by user, so the more your team collaborates, the more you pay. We price on the things that actually reflect scope: how many frameworks you maintain and how many systems you connect.
- Seats are free and unlimited, forever.
- Add a framework when you need it; pay for that framework.
- Connect an integration when you need it; pay for that connector.
Free
Seats
Scoped
Frameworks
Metered
Integrations
Public dollar amounts appear on the pricing page once they're set. We don't fabricate numbers.
Principles we won't bend
No fabricated metrics
We don't publish customer counts, logos, or metrics we can't stand behind. Capability and direction only.
Continuous, not point-in-time
Tests run on a schedule so drift surfaces immediately, not the week before an audit.
Tenant isolation first
Every query is scoped to your organization. A cross-tenant leak in a compliance product is unacceptable.
Why the axes matter as you grow
Same compliance program, two pricing philosophies. One scales with the people you invite; ours scales with the scope you actually take on.
Per-seat pricing
Hire ten engineers and your bill goes up, even though the platform does no more work to check them than it did before. You start rationing seats, leaving auditors and managers out of the tool that should hold the whole program.
- Cost rises with headcount, not scope
- Collaboration is penalized
Frameworks & integrations
Invite everyone for free. Your bill only moves when you take on a new framework or connect another system, the two things that actually reflect how much compliance you're doing.
- Cost tracks real scope
- Everyone who should be in the tool, is
The differences, answered
It is for compliance. Verifying that 5 users have MFA is the same automated work as verifying 50,000: the system reads a setting either way. Charging by headcount taxes you for the thing that costs us nothing and discourages you from inviting the auditors, engineers, and leaders who should be in the tool. Pricing on frameworks and integrations tracks the actual cost driver.
Most tools map evidence to broad control families. We map at the requirement level, the finest-grain obligation. That means a single passing test can satisfy the specific requirements it touches across SOC 2, ISO 27001, and HIPAA at once, so adding your second and third frameworks reuses work instead of repeating it.
Our AI is grounded in your own evidence graph and runs a propose-then-approve loop, and we expose an MCP server so your own tools (Claude, Cursor) can work against your tenant directly. It's woven through the workflow, scoped to your org, and never applies anything without a human. This is not a generic assistant pasted into a corner.
Because trust copy should be backed by proof. We publish capability and direction, keep placeholders clearly marked, and wait for real customer proof before using it. In a security product, restraint is part of the signal.
On the pricing page, once they're set. We don't publish dollar amounts we haven't committed to. The model (free seats, priced frameworks, metered integrations) is fixed; the numbers go up when they're real.
See the difference for yourself
Get a guided demo, or compare how to evaluate any GRC platform.