Skip to main content
Cyber Health Score
Get started

Pricing

Choose capacity. Keep the boundaries explicit.

Free, Plus, Pro and Business scale monitored root domains, assessment frequency, Argus intelligence, history, reports and ASPE. Professional services remain separately scoped.

Plan comparison

Scale the programme, not the ambiguity.

Every plan states both what is included and where the boundary sits. Plus is the recommended starting point for continuous external security.
Billing period

Free

£0 / month

Understand your current external posture.

Included

  • 1 monitored root domain
  • 3 assessments per month
  • Current posture and supported security findings
  • Basic attack-surface visibility
  • Bounded Free history
  • Basic supplier register (directory only)
  • 1 lifetime ASPE evaluation up to 100 recipients
  • Self-service support

Boundaries

  • No report download
  • No recurring monthly ASPE campaigns
  • History limited to Free semantics
  • Supplier assurance workflows (reviews, evidence requests, questionnaires) are Pro
  • Evidence Vault, automation, and trust surfaces not included
Start free
Most popular

Plus

£79 / month

Continuously manage your organisation's external security posture.

Included

  • 3 monitored root domains
  • 15 assessments per month
  • Recursive Argus monitoring with provenance
  • Vulnerability intelligence, CISA KEV, and EPSS
  • Exposure Priority and in-app Alerts
  • Remediation workflow
  • 90-day history and change understanding
  • Bounded self-service reports
  • 1 ASPE campaign per month
  • 100 recipients per campaign
  • Evidence Vault
  • Basic supplier register (directory only; no assurance workflows)
  • Tenant Agent (rate limited)
  • Standard support

Boundaries

  • Supplier assurance workflows (reviews, evidence requests, questionnaires) are Pro
  • Automation and decision workspace are Pro
  • Trust federation and developer platform are Pro
  • ASPE does not roll over
  • Professional services sold separately

Paid checkout held pending commercial authorisation.

Pro

£199 / month

Operate external security, assurance, evidence, supplier risk, decision intelligence, and governed workflows as an integrated programme.

Included

  • 15 monitored root domains
  • 60 assessments per month
  • Full available Argus intelligence within Pro limits
  • Vulnerability intelligence, CISA KEV, and EPSS
  • Exposure Priority, Alerts, and full remediation workflow
  • 180-day history and change intelligence
  • Full self-service and configurable reports
  • 5 ASPE campaigns per month
  • 250 recipients per campaign
  • Evidence Vault with external evidence workflows
  • Supplier assurance (reviews, evidence requests, questionnaires)
  • Decision intelligence (risk register, objectives)
  • Governed automation, operational workflows, and trust claims
  • Developer platform, reasoning, and adapters where ready
  • Tenant Agent
  • Priority support positioning where operationally supported

Boundaries

  • External sharing, external benchmarking, cross-tenant patterns, and Bellator live execution require separate authorisation
  • ASPE does not roll over or auto-overage
  • ASPE above Pro allowance requires Business / contact sales
  • No SLA claim beyond available operations
  • Professional services sold separately

Paid checkout held pending commercial authorisation.

Business

Contact sales

Operate CHS at greater organisational, contractual, portfolio, and enterprise scale.

Included

  • Everything in Pro
  • Custom monitored root domain scale
  • Contract-configured assessment volume
  • Larger supplier programmes
  • Multi-organisation and portfolio views where saleable
  • Larger retention and storage
  • Contract-configured ASPE campaigns and recipients
  • Contractual controls and enterprise support
  • Custom usage ceilings
  • Advanced trust and federation capabilities where appropriate

Boundaries

  • Values remain fail-closed until explicitly configured
  • Not unlimited by selecting Business alone
  • Owner-gated capabilities remain separately authorised
  • Professional services sold separately
Contact sales

Detailed comparison

What each plan includes.

The full comparison in plain language. Owner-gated capabilities always say so.

Swipe horizontally to compare Free, Plus, Pro, and Business. All columns remain in this table.

CapabilityFreePlusProBusiness
External postureMonitored root domains1 / 3 / 15 / customLimitedIncludedIncludedCustom
External postureAssessments per month3 / 15 / 60 / contractLimitedIncludedIncludedCustom
External postureCyber Health ScoreIncludedIncludedIncludedIncluded
Attack surfaceInventory and discoveryLimitedIncludedIncludedIncluded
Attack surfaceVulnerability intelligence, KEV, EPSSNot includedIncludedIncludedIncluded
History & change intelligenceHistory and change trackingBounded / 90 days / 180 days / contractLimitedIncludedIncludedIncluded
Findings & remediationSupported findingsIncludedIncludedIncludedIncluded
Findings & remediationRemediation workflowNot includedIncludedIncludedIncluded
Findings & remediationAlertsNot includedIncludedIncludedIncluded
Evidence & assuranceEvidence VaultNot includedIncludedIncludedIncluded
Evidence & assuranceReports and downloadsNo downloads on FreeLimitedIncludedIncludedIncluded
Evidence & assuranceConfigurable reports and evidence packsNot includedLimitedIncludedIncluded
Supplier assuranceSupplier registerDirectory and basic records on all plansIncludedIncludedIncludedIncluded
Supplier assuranceAssurance workflows (reviews, evidence requests, questionnaires)Gated by Pro supplier assurance entitlementNot includedNot includedIncludedIncluded
Human-risk / ASPEASPE campaigns1 lifetime trial / 1 per month / 5 per month / contractLimitedIncludedIncludedCustom
Decision intelligenceRisk register and objectivesNot includedNot includedIncludedIncluded
Decision intelligenceHistory, benchmarks, and explanationsLimitedIncludedIncludedIncluded
Automation & operational workflowsPolicy automation and operational workflowsNot includedNot includedIncludedIncluded
Trust & collaborationTrust claims, verification, and collaborationNot includedNot includedIncludedIncluded
Trust & collaborationTrust agreements, bindings, and federationNot includedNot includedIncludedIncluded
Trust & collaborationExternal sharing and external benchmarkingSeparately authorisedNot includedNot includedAvailable with authorisationAvailable with authorisation
ReportsStandard and organisation reportsLimitedIncludedIncludedIncluded
IntegrationsAlert destinations and exportsNot includedIncludedIncludedIncluded
IntegrationsDeveloper platform, reasoning, and adaptersWhere commercially readyNot includedNot includedIncludedIncluded
AdministrationTeam roles and workspace settingsIncludedIncludedIncludedIncluded
AdministrationMulti-organisation and portfolio viewsWhere saleableNot includedNot includedNot includedCustom
SupportSupportSelf-service / standard / priority positioning / enterpriseIncludedIncludedIncludedCustom