Transparent pricing · no hidden sales process
Verify your real security posture — then improve it.
Take the whole platform or just the piece you need — self-serve, priced in the open, one month at a time or on an annual contract.
One control, mapped across every framework you answer to — UK, EU, and GCC. Built on the stack you already run, plus our own posture management, CSPM, and threat intel.
UK & EU data residency by default · Built on open standards · No professional-services lock-in · Export your data anytime
All prices ex-VAT. USD/SAR shown are approximate — the £ price is charged and the exact amount is confirmed at checkout.
A single-month contract, billed in advance — cancel anytime, and it runs to the end of the month you’ve paid for. Annual plans raise the AI-assisted policy cap: Comply 10 → 20, every other tier to the full library. A twelve-month contract, 20% below the monthly price. Annual plans raise the AI-assisted policy cap: Comply 10 → 20, every other tier to the full library.
Three steps, and you choose where you stop
You don't sign anything to find out whether this works. Each step is a decision you make with what you learned on the one before it.
- 1
Start
14 days free, no card. Connect your environment and see what’s actually there.
- 2
Prove
Explore further on a single-month contract — cancel anytime, no long-term commitment.
- 3
Commit
Annual for ongoing and continuous compliance, risk and threat management — 20% saving.
One platform. Three plans that matter, and two footnotes. Start where you are. Add automation and scale as you grow — you're never charged per framework, and you never lose the mapping work you've done.
Every plan maps the whole catalogue. All 31 frameworks are always visible and always mappable in the Security Universe, on every plan, at no extra cost. Plans gate how many you actively run — never which ones.
Essentials
compliance, plus automation
One month at a time · or £199/mo on an annual contract On an annual contract · 20% saving on monthly
Best for: Small organisations ready to stop doing it all manually.
Everything in Comply, plus:
- 3 active frameworks (2 compliance + 1 threat)
- External posture management — monitor 5 targets for exposure, breaches and lookalike domains
- Internal vulnerability prioritisation — CVE/EPSS/KEV scored queue
- Web application scanning (ZAP) — 5 scans/month · 1 cloud posture check
- Asset directory, network graph + exports, software inventory (SBOM), people & identity posture
- Microsoft 365 / Intune integration
- 5 users · 25 GB storage · Email support
Growth
for a scaling security function
One month at a time · or £439/mo on an annual contract On an annual contract · 20% saving on monthly
Best for: Growing teams carrying more frameworks and more assets.
Everything in Essentials, plus:
- 5 active frameworks · up to 25 active policies
- External posture on 15 targets, daily refresh
- 20 web scans/month · 3 cloud posture checks
- Choice of data region · Email + chat support
- 15 users · 100 GB storage
Business
for an established programme
One month at a time · or £959/mo on an annual contract On an annual contract · 20% saving on monthly
Best for: Organisations running a full compliance and security posture.
Everything in Growth, plus:
- 10 active frameworks · full policy library
- External posture on 40 targets
- 60 web scans/month · 10 cloud posture checks
- Priority support + guided onboarding · SSO/SAML available
- 40 users · 350 GB storage
Just need to get compliant? Comply is £149/month for 2 frameworks with manual evidence — no automated scanning. Enterprise starts at £2,500/month for 20+ frameworks, dedicated data residency and an API. Talk to us →
Not sure which fits? Compare every feature ↓ or book a walkthrough.
Just need one capability?
Not everyone needs the whole platform. Two parts of 786 Cyber are available on their own — and roll straight into a full plan later if you want them to.
Threat Intelligence — know your exposure, inside and out
External Posture Management — see what an attacker sees: internet-facing exposure, breached credentials, lookalike (typosquat) domains and certificate changes. Internal Vulnerability Prioritisation — a scored queue of the vulnerabilities that actually matter (CVE + EPSS + CISA KEV), matched to your assets and explained in plain English.
| Tier | Watch | Monitor | Defend |
|---|---|---|---|
| Price | £99/mo | £249/mo | £599/mo |
| Monitored targets | 5 | 20 | 60 |
| External posture monitoring | ✓ | ✓ | ✓ |
| Internal vulnerability prioritisation | ✓ | ✓ | ✓ |
| Refresh | Weekly | Daily | Continuous |
| Users | 3 | 10 | 25 |
Scanning — find the gaps in your apps and cloud
Automated web application scanning (OWASP ZAP) — live now — and cloud misconfiguration checks (CIS Benchmarks). Web findings map straight into your compliance controls: fix once, satisfy the requirement. Cloud findings surface as prioritised misconfigurations and indicators of exposure.
| Tier | Starter | Pro | Scale |
|---|---|---|---|
| Price | £79/mo | £199/mo | £449/mo |
| Web targets | 3 | 10 | 30 |
| Web scans / month | 25 | 150 | 600 |
| Cloud accounts | 1 | 3 | 10 |
Compare every feature
| Plan | Comply | Essentials | Growth | Business | Enterprise |
|---|---|---|---|---|---|
| Price / month | £149 | £249 | £549 | £1,199 | £2,500 |
| Compliance & trust | |||||
| Active frameworks | 2 | 3 | 5 | 10 | 20 → unlimited |
| Security Universe (mapping, all frameworks) | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Compliance Universe + ATT&CK coverage | ✓ | ✓ | ✓ | ✓ | ✓ |
| GCC PDPL cross-map (6 regimes) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Active policies (AI-assisted) — monthly | 10 | 30 | Full library | Full library | Full library |
| Active policies — annual contract | 20 | Full library | Full library | Full library | Full library |
| Evidence vault + compliance wizard | ✓ | ✓ | ✓ | ✓ | ✓ |
| Asset & network intelligence | |||||
| Asset directory | — | ✓ | ✓ | ✓ | ✓ |
| People & identity posture | — | ✓ | ✓ | ✓ | ✓ |
| Network graph (Assets · People · Network · Map) | — | ✓ | ✓ | ✓ | ✓ |
| Exportable views (CSV · SBOM · PDF · graph PNG) | — | ✓ | ✓ | ✓ | ✓ |
| Software inventory / SBOM | — | ✓ | ✓ | ✓ | ✓ |
| Integrations (M365 etc.) | — | ✓ | ✓ | ✓ | ✓ |
| Threat & vulnerability posture | |||||
| External posture management | — | 5 targets | 15 targets | 40 targets | Custom |
| Internal vulnerability prioritisation (CVE/EPSS/KEV) | — | ✓ | ✓ | ✓ | ✓ |
| Web application scanning (ZAP) | — | 5 scans/mo | 20 scans/mo | 60 scans/mo | Custom |
| Cloud posture / CSPM | — | 1 account | 3 accounts | 10 accounts | Custom |
| Plan | |||||
| Users | 3 | 5 | 15 | 40 | Custom |
| Storage | 10 GB | 25 GB | 100 GB | 350 GB | 1 TB+ |
| Data residency | UK/EU | UK/EU | Region choice | Region choice | Dedicated (UK/EU/KSA) |
| SSO / SAML | — | — | — | Available | Included |
| Support | Email + chat | Priority + onboarding | Dedicated manager + SLA | ||
Add-ons & fair use
Grow a plan without jumping to the next one:
- Extra active framework — £39/mo each
- Extra user — £15/user/mo
- Extra threat-intel targets, web targets, cloud accounts and scans — at your plan's per-unit rate
- Extra storage — £0.50/GB per month beyond your plan
- SSO/SAML — £99/mo add-on on Business (included on Enterprise)
- An annual contract raises the AI-assisted policy cap — Comply goes from 10 to 20, every other tier to the full library
Fair use: one-off exports (evidence packs, board reports) are always fine. We'll only ever talk to you about usage if something looks automated or abusive.
Build your security practice on 786 Cyber
Consultancies, vCISOs and managed-security providers get partner pricing, per-client data isolation, and clean per-client billing — so you can run posture management for every client from one place. No lock-in for you or them.
Become a partnerBuilt for the UK and the Gulf
786 Cyber covers the frameworks that matter where you operate — Cyber Essentials, ISO 27001 and UK GDPR, and the region's own — SAMA CSF, NCA ECC, ADHICS and more. Your data stays in the region you choose: UK and EU by default, Saudi Arabia / Middle East for Enterprise. Open standards throughout, so your evidence and mappings are always yours to take with you.
One privacy programme, six Gulf regimes. 786 Cyber cross-maps the PDPL requirements of Saudi Arabia, the UAE, Qatar, Bahrain, Oman and Kuwait — so a single privacy control is traceable across all six. See the GCC PDPL cross-map →
Pricing FAQ
Is there really a free trial?
Yes — 14 days, no card required. You'll see your real posture before you decide to continue.
Do I pay per framework?
No. Every plan includes a set number of active frameworks, and you can map the entire catalogue in your Security Universe on every plan, free. You only move up a plan when you actively track more frameworks — there’s no per-framework charge, ever.
What's the Security Universe?
It’s how 786 Cyber connects everything. Map a control once and see everywhere it applies across your frameworks — then reuse the same evidence across them instead of gathering it again. Cross-mapped equivalents are surfaced for your review, never silently marked as met. It’s unlimited on every plan.
Can I change plans later?
Anytime. Move up when you grow, down if you need to. Standalone Threat Intelligence or Scanning spend is credited if you upgrade to a full plan.
What happens if I remove a framework?
Removing an active framework deletes the records tied to it, so we ask you to talk to support first — we’ll add or swap frameworks for you and make sure nothing important is lost.
How is AI used?
To assist, not to replace judgement. AI helps draft policies and explain findings in plain English; your team stays in control of what’s published.
Which currencies can I pay in?
GBP, USD and SAR. Prices are shown ex-VAT; any applicable tax is added at checkout.
Can I cancel?
Yes. Monthly is a single-month contract, billed in advance — cancel anytime in your account settings and your plan runs to the end of the month you’ve paid for. An annual contract runs its twelve months, and cancelling takes effect at the end of that period. Either way there are no exit fees, and you can export your data on open standards whenever you like.
What’s the difference between monthly and annual?
Term length, and one feature. Monthly is a single-month contract you can leave at the end of any month; annual is a twelve-month contract and costs 20% less for it. An annual contract also raises the AI-assisted policy cap — Comply goes from 10 active policies to 20, and every tier above it to the full library — so it’s worth checking that cap against how you work before you choose.
See your posture from day one — no deployment project.
Start free for 14 days. No card, no consultant, no obligation to continue.