Pricing notes: compliance automation pricing analysis
Short answer
Eight notes from The Cost Desk on what compliance vendors publish about price and what it means for a budget. Each shows the date it was first published; all were updated on 2026-09-29, the day we read the pricing pages.
2026-09-29
Market log recap: compliance announcements from December 2025 to September 2026
A recap of the dated announcements and auditor guidance in our market log, grouped by theme, covering December 2025 to September 2026.
MARKET LOG · 3 MIN READ
2026-09-01
One published price in seven: what our 2026 compliance pricing census found
Five findings from reading seven compliance automation pricing pages on 2026-09-29, from the one published price to how audits are sold.
CENSUS · 3 MIN READ
2026-08-04
What "Starting at $7,500/year" buys at Secureframe, line by line
The one published price in our census, itemized: what Secureframe Fundamentals lists, what it does not, and what to ask before relying on the figure.
VENDOR PRICING · PLANS AND LIMITS · 3 MIN READ
2026-07-07
Drata's 50 FTE cap and the one-framework rule: reading the most specific plan card
Drata publishes no price but the clearest limits in our census. What the Foundation card says, and how to use it before a sales call.
VENDOR PRICING · PLANS AND LIMITS · 3 MIN READ
2026-06-09
Consulting in the box or through a partner: how services are sold in 2026 compliance plans
Which compliance plans include human help, which route it through partners, and why the difference changes what a quote covers.
SERVICES · PLANS AND LIMITS · 3 MIN READ
2026-05-12
Vanta, Drata and Secureframe pricing compared in one table
The three most searched compliance pricing questions answered side by side: what Vanta, Drata and Secureframe publish, their limits and their plan tiers.
VENDOR PRICING · BUYING · 3 MIN READ
2026-03-17
The CHF 155 document: what ISO 27001 costs before any software
The ISO/IEC 27001:2022 standard has a published price. What it buys, what it does not, and where the real ISO 27001 costs sit.
STANDARDS · 3 MIN READ
2026-01-20
When a vendor publishes no plans: a buyer's playbook, with Scrut and Thoropass as examples
How to evaluate a compliance vendor that publishes no pricing page or plans, using what Scrut and Thoropass do publish.
BUYING · VENDOR PRICING · 3 MIN READ