Pricing

Try our Free plan or add modules to build your own complete tool

Free

See where you stand against NIS2.

€0
no card required
  • 1 User allowed
  • NIS2 self-assessment overview
  • 1 tech stack check (limited view)
  • 1 document analysis
Get Started

Best Practice Monitoring

One technology, watched all year.

€250/mo
billed yearly
  • Best-practice monitoring 1 technology
  • Continuous monitoring
  • History view of your technology
  • Drift notifications
Start Trial

Single Module

One full module — pick your discipline.

€600/mo
billed yearly
  • Best practice monitoring
  • Up to 5 devices
  • GRC
  • Multiple frameworks, risk, 3rd party
  • AI Policy Agent
Choose Plan
Recommended

Full Platform

Every module, across your stack.

€1,500/mo
billed yearly
  • All three modules included
  • Best Practice Monitoring
  • GRC
  • AI Policy Agent
  • 24/7/365 audit-ready posture
  • Single sign-on (SSO)
Start Free Trial

Enterprise

Full Platform, unlimited devices

CISO-as-a-Service Tabletop exercises Pentesting & red team Security awareness Multi-tenancy White-label
Call sales

All prices annual contracts, ex VAT

Who is this for?

CIO/CISO

CISO-as-a-Service, red team and executive risk reporting in the language your board already speaks.

GRC team

GRC Services: policy work, control mapping, and audit prep against NIS2 (CyFun 2025) and ISO 27001.

Engineering team

Pentesting, tabletop exercises and technical hardening engagements that fit alongside your delivery cadence.

Your Questions, Answered

  • Definitely. You can switch plans, upgrade, or make changes to your membership anytime.

    • Upload and assess one policy document

    • Activate best-practice checks

    • Get continuous monitoring of your framework

    • Track your progress with full history view
      All under one user account, no credit card required. Most teams have their first result within minutes of signing up.

  • Cyfora supports multiple frameworks. CyberFundamentals (CCB) is the flagship and most widely used framework on the platform, so it's the best place to start if you're not sure.

  • No. You can start immediately with zero payment details, so there's nothing stopping you from trying it right now.

  • Cyfora is built for IT and security professionals who want fast visibility into their compliance status, and for SMBs without a dedicated security team who want to know where they stand before bringing in a consultant.