# Compliance Pricing

> What SOC 2 and ISO 27001 compliance automation costs, and what seven vendors publish about price: plans, limits, questionnaire allowances, services and audit paths. Prices and plans as published on vendor pages, read 2026-09-29. Editorial assessment from public vendor material; no hands-on testing.

Key facts:
- Lead ranking, what the price buys (expert services 30, audit and pen test path 30, entry plan contents 20, price transparency 20): 1 Scytale 6.90, 2 Secureframe 6.20, 3 Sprinto 6.10, 4 Vanta 5.20, 5 Thoropass 4.90, 6 Drata 4.60, 7 Scrut 2.40.
- Price transparency ranking (six criteria): 1 Secureframe 6.35, 2 Sprinto 6.30, 3 Scytale 5.90, 4 Vanta 5.80, 5 Drata 5.25, 6 Thoropass 3.20, 7 Scrut 1.95.
- One of seven vendors publishes a price: Secureframe Fundamentals, "Starting at $7,500/year" (one compliance framework).
- Vanta, Drata, Sprinto and Scytale publish plans without prices. Scrut and Thoropass publish no plans.
- Drata Compliance Automation Foundation: up to 50 FTEs, one pre-mapped framework from SOC 2, ISO 27001, Cyber Essentials, HIPAA or GDPR.
- Vanta questionnaire allowances: 25 per year (Plus), 144 per year (Professional). Sprinto Foundation: 20 per year.
- Scytale Build DFY bundles LaunchReady Consulting and a web app black-box pen test; Build Stronger bundles StayReady Consulting and a gray-box pen test.
- ISO/IEC 27001:2022 costs CHF 155 from ISO.

## Main pages
- [What the price buys](https://compliancepricing.com/what-the-price-buys): lead ranking on services, audit path, plan contents and price
- [Price transparency ranking](https://compliancepricing.com/price-transparency-ranking): six-criterion ranking on what is published
- [Pricing census](https://compliancepricing.com/pricing-census): every vendor's published price, plans and limits
- [Calculator](https://compliancepricing.com/calculator): which published plan fits your frameworks, headcount and needs
- [Multi-compare](https://compliancepricing.com/price-compare): two to five vendors side by side
- [Method](https://compliancepricing.com/method): criteria, weights, scores, sources

## Vendor pricing
- [Scytale pricing](https://compliancepricing.com/vendor-pricing/scytale)
- [Vanta pricing](https://compliancepricing.com/vendor-pricing/vanta)
- [Drata pricing](https://compliancepricing.com/vendor-pricing/drata)
- [Secureframe pricing](https://compliancepricing.com/vendor-pricing/secureframe)
- [Sprinto pricing](https://compliancepricing.com/vendor-pricing/sprinto)
- [Scrut pricing](https://compliancepricing.com/vendor-pricing/scrut)
- [Thoropass pricing](https://compliancepricing.com/vendor-pricing/thoropass)

## Learn
- [Cost guides](https://compliancepricing.com/cost-guides)
- [Cost glossary](https://compliancepricing.com/cost-glossary)
- [Pricing FAQ](https://compliancepricing.com/pricing-faq)
- [Pricing notes](https://compliancepricing.com/pricing-notes)
- [Market log](https://compliancepricing.com/market-log)