Core · plans and pricing
Start free. Pay for the team that runs it.
Core is priced by the number of people in your risk and compliance team. Everyone else who contributes — inside your organisation or outside it, through the portal — is licence-free.
The plans
Six plans. Each one includes everything in the plan before it.
The assistant is built into every Core page, on every plan. Prices are the subscription; support is added on top.
TRY IT
Free Tier
Free
- The risk and compliance workspace, for up to 20 systems
- A trial of every other module
- A demo session and the online support resources
ONE TEAM, ONBOARDED
Starter
From A$199 a month
- Everything in Free, with no limit on systems
- Three weekly 30-minute onboarding sessions
- Twelve monthly 60-minute support calls
- Optional in-person training and mentoring
- Optional three-day cyber risk bootcamp
QUESTIONNAIRES AND FRAMEWORKS
Compliance Lite
From A$399 a month
- Everything in Starter
- The questionnaire and compliance portal, free for respondents
- Your frameworks and questionnaires loaded for you
- Four weekly 90-minute training sessions
- Two support tickets a year
ASSESSMENT AND ASSURANCE
Compliance & Assurance
From A$599 a month
- Everything in Compliance Lite
- The control assessment module
- Unlimited support tickets
- A three-day cyber risk bootcamp for the team
- Optional third-party risk managed service
WORKFLOW AUTOMATION
Cyber Automation
From A$899 a month
- Everything in Compliance & Assurance
- The workflow builder, with built-in workflows
- One custom workflow, built for you
- Further workflows at A$3,990 each
QUANTIFIED, FOR THE BOARD
Risk Quantification
From A$1,199 a month
- Everything in Cyber Automation
- FAIR risk quantification
- Ten two-hour director-level consulting sessions
- A five-day director-level review, including board support
- Optional two-day cyber risk bootcamp
“From” is the subscription for a team of one or two, before support. The table below gives every team size and the support rate.
Add-ons and priced work
Quantification on its own, integration, and work priced by the piece.
FAIR Engine — from A$799 a month
FAIR risk quantification without the full plan: the workspace, the control assessment module and the quantification module, with twelve monthly 60-minute support calls and four weekly 90-minute training sessions.
Continuous Monitoring Kickstart — A$2,499 a month
An add-on to Cyber Automation: five custom integration sources, five days of developer training and ten two-hour director-level sessions. Oracle Integration Services at cost plus 20%; further integrations A$3,990 each.
| Priced work | Price |
|---|---|
| Third-party risk assessment | A$1,750 each |
| Custom workflow development | A$3,990 each |
| Custom integration | A$3,990 each |
Two paid ways to start
For larger teams: test it first, or run it live.
Most teams start on the Free Tier. For a risk, compliance or security team of three or more, with someone who can approve the spend, there are two paid ways in. Moving from another GRC? See switching from your current GRC.
Opportunity Scan — A$5,000
About two weeks. One recurring assurance question mapped into Core on your own material: what you would reuse, the integrations planned, and the business case, ending in a decision.
90-day pilot — your plan for three months, plus support
One real use case live in Core for 90 days, with agreed success criteria and a decision at day 90. The plan's three months count towards your first year if you continue. Support is A$25,000–50,000, depending on the scope of work.
The full price table
Priced by the size of the team that runs it.
Plans are priced by the number of people in your cyber, risk or compliance team. If you do not have one, we count the people with those responsibilities. Every other user, internal or external, is licence-free. Support is charged monthly on top of the subscription: the year-1 rate, then the year-2+ rate.
| Plan or add-on, per month | 1–2 | 3–5 | 6–10 | 11+ | Support, year 1 | Support, year 2+ |
|---|---|---|---|---|---|---|
| Starter | A$199 | A$599 | A$1,199 | A$2,199 | A$199 | A$199 |
| Compliance Lite | A$399 | A$1,299 | A$2,999 | A$4,999 | A$399 | A$199 |
| Compliance & Assurance | A$599 | A$1,999 | A$4,999 | A$11,999 | A$999 | A$399 |
| Cyber Automation | A$899 | A$2,499 | A$6,999 | A$15,999 | A$1,599 | A$399 |
| Risk Quantification | A$1,199 | A$3,499 | A$9,999 | A$21,999 | A$2,899 | A$1,599 |
| FAIR Engine | A$799 | A$2,399 | A$5,999 | A$14,999 | A$799 | A$799 |
| Continuous Monitoring Kickstart | Add-on to Cyber Automation | A$2,499 | — | |||
Human services compliance
Every program standard you answer to, as one annual package.
For human services providers meeting government-funding obligations: Right Fit for Risk (the ISM and ISO 27001) for employment programs, and whichever other standards your programs answer to — such as the NDIS Practice Standards, the Aged Care Quality Standards, state human services standards, the Privacy Act and the Essential Eight — loaded for you. Priced by the number of people in your compliance team; everyone who fills in data is licence-free.
| Package, per year | 1–2 in compliance | 3–5 in compliance | What is included |
|---|---|---|---|
| Bronze | A$19,000 | A$36,000 | The platform, with all ISM updates, and your other specific program standards loaded, as well as monthly 60-minute support calls |
| Silver | A$29,000 | A$46,000 | Bronze, plus a two-day bootcamp and monthly 60-minute management cyber risk advice |
| Gold | A$39,000 | A$56,000 | Bronze, plus fifteen days of expert compliance resource to carry out the assessments |
For your reviewers
How the pricing works
Before you compare numbers
- Australian dollars, excluding GST. Plans are monthly; the compliance packages are annual.
- Support is charged on top of the plan subscription, at the year-1 rate and then the year-2+ rate.
- Team size is the people who run risk and compliance, not everyone who uses the system. Contributors, respondents and reviewers are licence-free.
- Oracle Integration Services, where an integration needs them, are charged at cost plus 20%.
- A plan is not certification, assurance or a compliance opinion. The platform holds the work; the judgement stays with your team and your auditors.
- Every plan and engagement is confirmed in writing before it starts. The Opportunity Scan (A$5,000) and the 90-day pilot (three months of the plan plus A$25,000–50,000 support) are optional ways in; you can subscribe without either. Only subscription is credited towards the first year.
Start free, and move up when you need to.
Subscribe from the Free Tier and change plan as the team grows. If you would rather test one use case first, the fixed-price Opportunity Scan is the other way in.