Transparent pricing · no hidden sales process
Verify your real security posture — then improve it.
Take the whole platform or just the piece you need — self-serve, priced in the open, month to month.
One control, mapped across every framework you answer to — UK, EU, and GCC. Built on the stack you already run, plus our own posture management, CSPM, and threat intel.
No card. No call. Cancel any time.
All prices ex-VAT. USD/SAR shown are approximate — the £ price is charged and the exact amount is confirmed at checkout.
One platform, five plans. Start where you are. Add automation and scale as you grow — you're never charged per framework, and you never lose the mapping work you've done.
Comply
for teams getting compliant, by hand
Save 20% billed annually Billed annually
Best for: Micro and small organisations starting their compliance journey without a security team.
- Up to 2 active frameworks (Cyber Essentials, ISO 27001, GDPR, SAMA CSF, NCA ECC, PDPL and more)
- Unlimited Security Universe — map one control, see it across every framework
- Guided compliance wizard + AI-assisted policy drafting (up to 10 active policies)
- Evidence vault — upload and organise your own evidence
- 3 users · 10 GB storage · Email support
Essentials
compliance, plus automation
Save 20% billed annually Billed annually
Best for: Small organisations ready to stop doing it all manually.
Everything in Comply, plus:
- 3 active frameworks (2 compliance + 1 threat)
- External posture management — monitor 5 targets for exposure, breaches and lookalike domains
- Internal vulnerability prioritisation — CVE/EPSS/KEV scored queue
- Web application scanning (ZAP) — 5 scans/month · 1 cloud posture check
- Asset directory, network graph + exports, software inventory (SBOM), people & identity posture
- Microsoft 365 / Intune integration
- 5 users · 25 GB storage · Email support
Growth
for a scaling security function
Save 20% billed annually Billed annually
Best for: Growing teams carrying more frameworks and more assets.
Everything in Essentials, plus:
- 5 active frameworks · up to 25 active policies
- External posture on 15 targets, daily refresh
- 20 web scans/month · 3 cloud posture checks
- Choice of data region · Email + chat support
- 15 users · 100 GB storage
Business
for an established programme
Save 20% billed annually Billed annually
Best for: Organisations running a full compliance and security posture.
Everything in Growth, plus:
- 10 active frameworks · full policy library
- External posture on 40 targets
- 60 web scans/month · 10 cloud posture checks
- Priority support + guided onboarding · SSO/SAML available
- 40 users · 350 GB storage
Enterprise
for complex and regulated organisations
Billed annually · quoted to your needs
Best for: Larger and regulated organisations with data-residency and scale requirements.
Everything in Business, plus:
- 20+ active frameworks — up to unlimited, priced to your needs
- Dedicated data residency — UK, EU or Saudi Arabia / Middle East, set up at onboarding
- SSO/SAML included · dedicated success manager · SLA
- Custom users, storage, scan and threat-intel volumes
Not sure which fits? Compare every feature ↓ or book a walkthrough.
Just need one capability?
Not everyone needs the whole platform. Two parts of 786 Cyber are available on their own — and roll straight into a full plan later if you want them to.
Threat Intelligence — know your exposure, inside and out
External Posture Management — see what an attacker sees: internet-facing exposure, breached credentials, lookalike (typosquat) domains and certificate changes. Internal Vulnerability Prioritisation — a scored queue of the vulnerabilities that actually matter (CVE + EPSS + CISA KEV), matched to your assets and explained in plain English.
| Tier | Watch | Monitor | Defend |
|---|---|---|---|
| Price | £99/mo | £249/mo | £599/mo |
| Monitored targets | 5 | 20 | 60 |
| External posture monitoring | ✓ | ✓ | ✓ |
| Internal vulnerability prioritisation | ✓ | ✓ | ✓ |
| Refresh | Weekly | Daily | Continuous |
| Users | 3 | 10 | 25 |
Scanning — find the gaps in your apps and cloud
Automated web application scanning (OWASP ZAP) — live now — and cloud misconfiguration checks (CIS Benchmarks). Web findings map straight into your compliance controls: fix once, satisfy the requirement. Cloud findings surface as prioritised misconfigurations and indicators of exposure.
| Tier | Starter | Pro | Scale |
|---|---|---|---|
| Price | £79/mo | £199/mo | £449/mo |
| Web targets | 3 | 10 | 30 |
| Web scans / month | 25 | 150 | 600 |
| Cloud accounts | 1 | 3 | 10 |
Compare every feature
| Plan | Comply | Essentials | Growth | Business | Enterprise |
|---|---|---|---|---|---|
| Price / month | £149 | £249 | £549 | £1,199 | £2,500 |
| Compliance & trust | |||||
| Active frameworks | 2 | 3 | 5 | 10 | 20 → unlimited |
| Security Universe (mapping, all frameworks) | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Compliance Universe + ATT&CK coverage | ✓ | ✓ | ✓ | ✓ | ✓ |
| GCC PDPL cross-map (6 regimes) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Active policies (AI-assisted) — monthly | 10 | 30 | Full library | Full library | Full library |
| Active policies — annual plans | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Evidence vault + compliance wizard | ✓ | ✓ | ✓ | ✓ | ✓ |
| Asset & network intelligence | |||||
| Asset directory | — | ✓ | ✓ | ✓ | ✓ |
| People & identity posture | — | ✓ | ✓ | ✓ | ✓ |
| Network graph (Assets · People · Network · Map) | — | ✓ | ✓ | ✓ | ✓ |
| Exportable views (CSV · SBOM · PDF · graph PNG) | — | ✓ | ✓ | ✓ | ✓ |
| Software inventory / SBOM | — | ✓ | ✓ | ✓ | ✓ |
| Integrations (M365 etc.) | — | ✓ | ✓ | ✓ | ✓ |
| Threat & vulnerability posture | |||||
| External posture management | — | 5 targets | 15 targets | 40 targets | Custom |
| Internal vulnerability prioritisation (CVE/EPSS/KEV) | — | ✓ | ✓ | ✓ | ✓ |
| Web application scanning (ZAP) | — | 5 scans/mo | 20 scans/mo | 60 scans/mo | Custom |
| Cloud posture / CSPM | — | 1 account | 3 accounts | 10 accounts | Custom |
| Plan | |||||
| Users | 3 | 5 | 15 | 40 | Custom |
| Storage | 10 GB | 25 GB | 100 GB | 350 GB | 1 TB+ |
| Data residency | UK/EU | UK/EU | Region choice | Region choice | Dedicated (UK/EU/KSA) |
| SSO / SAML | — | — | — | Available | Included |
| Support | Email + chat | Priority + onboarding | Dedicated manager + SLA | ||
Add-ons & fair use
Grow a plan without jumping to the next one:
- Extra active framework — £39/mo each
- Extra user — £15/user/mo
- Extra threat-intel targets, web targets, cloud accounts and scans — at your plan's per-unit rate
- Extra storage — £0.50/GB per month beyond your plan
- SSO/SAML — £99/mo add-on on Business (included on Enterprise)
- Annual plans get unlimited AI-assisted policies — one more reason to go annual
Fair use: one-off exports (evidence packs, board reports) are always fine. We'll only ever talk to you about usage if something looks automated or abusive.
Build your security practice on 786 Cyber
Consultancies, vCISOs and managed-security providers get partner pricing, per-client data isolation, and clean per-client billing — so you can run posture management for every client from one place. No lock-in for you or them.
Become a partnerBuilt for the UK and the Gulf
786 Cyber covers the frameworks that matter where you operate — Cyber Essentials, ISO 27001 and UK GDPR, and the region's own — SAMA CSF, NCA ECC, ADHICS and more. Your data stays in the region you choose: UK and EU by default, Saudi Arabia / Middle East for Enterprise. Open standards throughout, so your evidence and mappings are always yours to take with you.
One privacy programme, six Gulf regimes. 786 Cyber cross-maps the PDPL requirements of Saudi Arabia, the UAE, Qatar, Bahrain, Oman and Kuwait — so a single privacy control is traceable across all six. See the GCC PDPL cross-map →
Pricing FAQ
Is there really a free trial?
Yes — 14 days, no card required. You'll see your real posture before you decide to continue.
Do I pay per framework?
No. Every plan includes a set number of active frameworks, and you can map the entire catalogue in your Security Universe on every plan, free. You only move up a plan when you actively track more frameworks — there’s no per-framework charge, ever.
What's the Security Universe?
It’s how 786 Cyber connects everything. Map a control once and see everywhere it applies across your frameworks — then reuse the same evidence across them instead of gathering it again. Cross-mapped equivalents are surfaced for your review, never silently marked as met. It’s unlimited on every plan.
Can I change plans later?
Anytime. Move up when you grow, down if you need to. Standalone Threat Intelligence or Scanning spend is credited if you upgrade to a full plan.
What happens if I remove a framework?
Removing an active framework deletes the records tied to it, so we ask you to talk to support first — we’ll add or swap frameworks for you and make sure nothing important is lost.
How is AI used?
To assist, not to replace judgement. AI helps draft policies and explain findings in plain English; your team stays in control of what’s published.
Which currencies can I pay in?
GBP, USD and SAR. Prices are shown ex-VAT; any applicable tax is added at checkout.
Can I cancel?
Yes, anytime. No exit fees, no lock-in — you can export your data on open standards whenever you like.
See your posture from day one — no deployment project.
Start free for 14 days. No card, no consultant, no lock-in.