Board-ready risk intelligence.
Without the enterprise price tag.
Plans from $299/month. No contracts, no per-seat pricing, cancel anytime.
See your security posture and understand gaps. For early-stage companies getting their first enterprise deals.
- Up to 5 users
- 1 active compliance assessment
- Connect up to 5 integrations for automated scanning
- Unlimited Policies w/ full lifecycle management
- Manage up to 5 vendors per year
- Answer up to 5 security questionnaires per year
- Email support
Generate policies, track evidence, prove compliance. For Series A/B companies scaling enterprise sales.
- Up to 10 users
- Everything in Starter
- Connect up to 10 integrations with continuous scanning
- Manage up to 15 vendors per year
- Answer up to 10 security questionnaires per year
- Up to 3 active compliance assessments
- Priority support
Run a real security program with board reporting and advanced analytics. For pre-IPO companies with serious compliance needs.
- Up to 25 users
- Everything in Growth
- Connect up to 20 integrations with continuous scanning
- Manage up to 50 vendors
- Answer up to 25 security questionnaires
- Unlimited compliance assessments
- Quantified risk analysis
- Auto-derived risk register
- Board-level reports
- 1 Red Claw Offensive Security Test/year (API only, includes retest)
- SSO (SAML & SCIM)
- API access
- Dedicated support
Security as competitive advantage. QCD, M&A support, and CISO consulting for IPO-track and regulated companies.
- Unlimited users
- Everything in Business
- Unlimited integrations with continuous scanning
- Unlimited vendor assessments
- Quarterly Cyber Maturity Assessment
- Quarterly Red Claw Offensive Security Testing (web, API, network + retest)
- Quantitative Cyber Diligence (QCD) with secure data rooms
- Investor Portals with secure data rooms
- SLA guarantee (4hr)
- CISO consulting (4h/mo)
- Security Training Modules for Board + Executives
- Single-tenant option
Full-spectrum security intelligence with vendor monitoring, tabletop readiness, MCP access, and dedicated support for regulated enterprises.
- Everything in Ultra
- Vendor incident monitoring & response
- Operational resilience planning
- Key risk indicator tracking
- Education + Tabletop Exercise Modules
- AI-Powered Risk Intelligence (APRI)
- Exclusive access to vCISO Lite MCP
- Dedicated vCISO Advisor
- Other20 Quarterly vCISO Review
- Single-tenant deployment
Need something custom?
We build tailored packages for organizations with unique requirements.
Prefer expert-led engagements? Explore Other20 Advisory
Compare plans
Feature breakdown
See exactly what you get with each plan.
| Feature | Starter | Growth | Business | Ultra | Enterprise |
|---|---|---|---|---|---|
| Users | 5 | 10 | 25 | Unlimited | Unlimited |
| Compliance Dashboard | |||||
| Active Compliance Assessments | 1 | 3 | Unlimited | Unlimited | Unlimited |
| Policy Lifecycle Management | |||||
| Vendor Assessments | 5/yr | 15/yr | 50/yr | Unlimited | Unlimited |
| Security Questionnaires | 5/yr | 10/yr | 25/yr | Unlimited | Unlimited |
| Integrations & Continuous Scanning | 5 | 10 | 20 | Unlimited | Unlimited |
| Quantified Risk Analysis | |||||
| Auto-Derived Risk Register | |||||
| Board-Level Reports | |||||
| Offensive Security Testing (Red Claw) | 1/yr (API only + retest) | Quarterly (web, API, network + retest) | Quarterly (web, API, network + retest) | ||
| SSO (SAML/SCIM) | |||||
| API Access | |||||
| QCD / Secure Data Rooms | |||||
| Investor Portals | |||||
| Single-Tenant Option | |||||
| CISO Consulting | 4hrs/mo | Dedicated | |||
| Quarterly Cyber Maturity Assessment | |||||
| Executive & Board Security Training | |||||
| Vendor Incident Monitoring | |||||
| Operational Resilience | |||||
| Key Risk Indicators | |||||
| Exclusive vCISO Lite MCP Access | |||||
| AI-Powered Risk Intelligence (APRI) | |||||
| Support | Priority | Dedicated | SLA (4hr) | Custom SLA |
Wondering how these prices compare to buying Vanta, RiskLens, and a Pivot Point Security vCISO retainer separately?
See why vCISO Lite is 21× less than the equivalent enterprise stack →
COMMON QUESTIONS
Pricing questions
How much does a vCISO cost?
vCISO pricing in 2026 spans three honest tiers. Platform-augmented vCISO subscriptions like vCISO Lite start at $299/mo and run to $1,499/mo at the top tier. Traditional consultancy retainers run $3,000-$20,000/mo (Pivot Point Security publishes $4,500-$12,500/mo covering 90% of clients). Hourly independent consultants charge $200-$400/hr at the senior tier. The full-time alternative — an in-house CISO at a small or mid-market company — averages $415,000 in total compensation per year (IANS Research / Artico Search, 2025). Full teardown of the three tiers plus the $415K in-house comparison: /blog/vciso-pricing-2026.
How does vCISO Lite compare to Vanta or Drata pricing?
Vanta, Drata, and Secureframe do not sell first-party vCISO services — they all push customers to partner consultancies through their Service Provider / Concierge / Partner programs. That means the buyer pays for the platform ($10,000-$80,000+/yr) plus a separate consultancy retainer ($3,000-$20,000/mo). vCISO Lite is a platform-augmented vCISO at one price — the platform plus dedicated vCISO hours that scale with the tier — starting at $299/mo. Total cost difference is typically 3-10x.
Can I see a demo before buying?
Yes. Book a personalized walkthrough at /contact and we will show you how vCISO Lite handles your specific compliance frameworks, vendor count, and reporting needs. Demos are typically 30 minutes and we walk through real customer data structures (anonymized) so you can see exactly what evidence collection, policy generation, and board reporting look like inside the platform.
Can I change plans later?
Yes. You can upgrade or downgrade your plan at any time. Changes take effect immediately, and we will prorate your billing.
Are there any hidden fees?
No. The price you see is the price you pay. No per-seat fees, no setup costs, no surprise charges.
What's the difference between Ultra's diligence capabilities and Other20's diligence services?
Ultra is a software subscription which provides you with the tools you need to run cyber diligence and investment planning on your own — with secure data rooms you run in your own tenant, for your own organization. Other20's diligence services are engagement-based — we run the assessment for you on an acquisition target and deliver a board-ready report. If you are evaluating a target you do not yet operate, start with Other20 services. If you want ongoing risk quantification for your own business, Ultra includes those tools.
What payment methods do you accept?
We accept all major credit cards (Visa, Mastercard, Amex) and can invoice for annual Business, Ultra, and Enterprise plans.
Is there a discount for nonprofits?
Yes. We offer 50% off for registered nonprofits. Contact us with proof of status to get your discount code.
Can I get custom pricing?
Absolutely. Need more CISO hours, single-tenant hosting, or bring-your-own-keys? Contact our sales team to build a custom package.