Pricing

Start small. Build readiness as you grow.

Two plans you can subscribe to today, managed services with a published rate, and a per-user price if you outgrow the included seats. Every standard plan carries its price; only a Custom arrangement is quoted, against an agreed scope.

Platform from
$99/mo
Essentials, USD
Free trial
14 days
No card required
Advisory from
$999/mo
Named advisor included
Currency
USD
Adaptive Pricing not applied

Signing up today

Start with a 14-day free trial on Essentials or Full Platform. No credit card required, and no automatic charge when the trial ends.

Start your 14-day free trialNo credit card required

Plans

Two plans. The difference is scope, not a paywall.

Both open the same workspace and the same readiness score. Essentials keeps one framework in scope; Full Platform runs several at once and adds the audit workspace and board reporting. The step between them is $150 a month.

Essentials

One framework, evidence and readiness for a small team getting its first programme in order.

$99/month USD

Or $1,069.20 a year — $118.80 (10%) less than twelve monthly payments.

Included users
2
Free trial
14 days

Best for
Preparing for a first cyber-insurance renewal or a first customer security questionnaire.

  • One compliance framework in scope
  • Control register with named owners
  • Evidence library with status and expiry
  • Risk register and action tracking
  • Cyber-insurance readiness workspace
  • Sentinel Score and executive summary
  • AI assistance for drafting and review, within a monthly allowance
  • 2 included users

14-day free trial. No credit card required. No automatic charge.

Full Platform

Recommended

The whole readiness programme — multiple frameworks, audit workspace and board reporting.

$249/month USD

Or $2,689.20 a year — $298.80 (10%) less than twelve monthly payments.

Included users
5
Free trial
14 days

Best for
Running governance and insurance readiness together, with executive and board reporting.

  • Everything in Essentials
  • Multiple frameworks in scope
  • Audit engagement workspace and control testing
  • Executive and board reporting
  • Broker and underwriter evidence packages
  • Assessment programme and maturity tracking
  • 5 included users

14-day free trial. No credit card required. No automatic charge.

All prices are USD. Annual totals are the published figure you are charged for the year — $118.80 less than twelve monthly payments on Essentials, $298.80 on Full Platform, $599.40 on Managed vCISO Lite. The percentages are not identical, which is why the sum is shown rather than a badge.

What you are paying for

This is the workspace the price opens.

The same readiness score, the same nine weighted categories, the same evidence and gap tracking on both plans. Captured from a Sentinel workspace, so you can read the interface before you decide to pay for it.

Sentinel ScoreReal Sentinel screen
Sentinel Score ring showing 76 out of 100, rated Good, in the Expected band.

Screens captured from a Sentinel workspace on 10 September 2026. Northstar Manufacturing Ltd. is a fictional example — a 180-person manufacturer in Ontario, Canada — not a customer, and its scores are computed by the product from its records rather than typed in for the picture.

Your data sits in Canada
Stored in Supabase, ca-central-1, on every plan. Application compute and AI calls run in the United States.
AI assistance from the first plan
Drafting and review assistance is in Essentials, the lowest plan, scoped to your own tenant and used within a monthly allowance.
Evidence carries an expiry
Every plan tracks evidence status and expiry dates, because stale evidence is the failure this product exists to prevent.
An honest starting number
A new workspace does not open on a flattering score. It reads as not assessed until there is something behind it.

Managed services

Software when you can operate it. A person when you cannot.

Some companies need the platform and nothing else. Others need someone accountable for the programme, or one submission assembled properly before a renewal. Both are priced and published.

  • Advisory subscription

    Managed vCISO Lite

    $999/mo

    Or $11,388.60 a year — $599.40 (5%) less than twelve monthly payments.

    Full Platform plus a named CyberWave advisor on a scheduled advisory cadence.

    • Everything in Full Platform
    • Named CyberWave advisor
    • Scheduled advisory sessions
    • Risk and roadmap review
    • Executive reporting support
    • 5 included users — the CyberWave advisor does not consume a seat
    Talk to usNo trial on this plan — the advisory cadence is arranged with you.
  • Scoped engagement

    Managed vCISO

    From $2,499/mo

    Hours, cadence and billing period are agreed in a statement of work before anything starts.

    A deeper engagement, scoped to your programme, governance calendar and stakeholders.

    • Everything in Managed vCISO Lite
    • Scope and included users agreed in a statement of work
    • Deeper advisory hours
    • Programme and governance calendar ownership support
    • Stakeholder and board engagement
    Talk to an advisorStarts with a scoping conversation, not a checkout.
  • One-time service

    Cyber Insurance Submission Pack

    $499

    One-time USD. Not a subscription, and not a feature flag on a plan.

    A reviewed, broker-ready evidence and questionnaire package assembled from your workspace.

    • The questionnaire answers, drawn from your control register rather than from memory
    • The supporting evidence, checked for status and expiry before it goes out
    • The gaps you have not closed yet, written down honestly, with what is planned
    • A review pass by a person before anything reaches your broker or underwriter
    Ask about the Cyber Insurance Submission PackScoped against your workspace and your renewal date first.
  • Beyond the published plans

    Custom

    Scoped with you

    Quoted against the agreed scope, monthly or annual, in a bespoke agreement.

    Multiple entities, unusual frameworks, or requirements the published plans do not cover.

    • Group structures, specialised frameworks, or procurement that needs a bespoke agreement.
    • Scoped with you
    • Bespoke agreement
    Talk to salesFor group structures, unusual frameworks, or procurement that needs its own paper.

Compare

What $150 a month more actually buys.

Scope and reporting, not a longer feature list. If nobody is asking you for board reporting or an audit workspace yet, Essentials is the honest answer and you can move up inside the same workspace later.

Full Platform
Price
$249/month, or $2,689.20 a year
Included users
5 named users
Free trial
14 days, no card
Frameworks in scope
Multiple frameworks at once
Control register and evidence library
Included
Risk register and actions
Included
Cyber-insurance readiness
Included
Broker and underwriter packages
Included
Audit workspace and control testing
Included
Executive and board reporting
Full executive and board reporting
Assessment programme and maturity tracking
Included
AI drafting and review assistance
Included, with a larger monthly allowance
Essentials
Price
$99/month, or $1,069.20 a year
Included users
2 named users
Free trial
14 days, no card
Frameworks in scope
One framework at a time
Control register and evidence library
Included — owners, status, expiry
Risk register and actions
Included
Cyber-insurance readiness
Included — the underwriter controls, tracked
Broker and underwriter packages
Not included
Audit workspace and control testing
Not included
Executive and board reporting
Sentinel Score and executive summary
Assessment programme and maturity tracking
Not included
AI drafting and review assistance
Included, within a monthly allowance

The row worth seeing

“Board reporting” is a real artefact, not a checkbox.

On Full Platform the executive page is generated from the register you already maintain — where readiness stands, what changed since the last snapshot, and what needs a decision.

See executive reporting

The trial, in full

14 days. No card. No charge at the end.

Free trials in this category are usually a card capture with a countdown attached. This one is not, and the difference matters enough to state it four ways.

Length
14 days
Free on Essentials or Full Platform
Credit card
Not required
Nothing to enter, nothing stored
At the end
No automatic charge
We do not have a card to charge
Conversion
No automatic conversion
A paid plan is a decision you make
  1. 01

    You start it

    Create the workspace on Essentials or Full Platform. No card, no sales call in the way.

  2. 02

    You use it properly

    14 days is enough to bring one framework or one renewal questionnaire in, load the evidence you already have, and see what is actually missing.

  3. 03

    It ends

    When the trial ends, carrying on means choosing a paid subscription; nothing converts or is charged on its own. Your data is not deleted because a trial ended.

Users and seats

Seats are per person, and the price is published too.

A control owner needs their own login — shared accounts are the first thing an auditor or an underwriter picks apart. So seats are priced openly, in packs, and adding one does not require a conversation.

Additional user add-ons with monthly and annual prices in USD
Add-onUsers addedMonthly (USD)Annual (USD)Annual difference
Additional user1 user$19$205.20$22.80 (10%)
5-user pack5 users$79$853.20$94.80 (10%)
10-user pack10 users$149$1,609.20$178.80 (10%)

Essentials includes 2 · Full Platform includes 5 · Managed vCISO Lite includes 5. Add-ons follow the billing period you are on. On Managed vCISO Lite, the CyberWave advisor does not consume one of your included seats; on Managed vCISO, users are agreed in the statement of work.

Questions

The billing questions people actually ask.

Answered here, so you do not have to email anyone to find out what happens at the end of a trial.

Do I need a credit card to start the trial?
No. The 14-day trial on Essentials or Full Platform starts without a card, which also means there is nothing on file waiting to be charged if you forget about it.
Will I be charged automatically when the trial ends?
No. There is no automatic charge and no automatic conversion. We cannot charge you at the end of a trial because we never took a payment method to start it.
How do seats work?
Essentials, Full Platform and Managed vCISO Lite each include a number of named users; on Managed vCISO, users are agreed in the statement of work. Beyond the included users, add them individually or in a pack at the prices below; add-ons follow the billing period you are already on. On Managed vCISO Lite, the CyberWave advisor does not consume one of your included seats.
Can I change plans later?
Yes, in both directions. Moving between plans changes what is switched on in the same workspace — your controls, evidence, assessments, risks and history stay exactly where they are. Adding an advisory tier starts with a conversation.
Is AI assistance unlimited?
No. AI assistance on every plan runs within a monthly usage allowance, and Full Platform and the advisory plans have a larger one than Essentials. Different AI actions use different amounts of it, and larger ones, such as generating a report, use considerably more. When the allowance is used up, further AI requests are declined until it resets at the start of the next month; the rest of the workspace keeps working, and there is no automatic overage charge. Where extra AI usage is offered, it is a separate purchase that an owner or admin chooses to make.
Can I cancel?
A monthly subscription is billed for the month; an annual subscription for the year you bought. Tell us before the next renewal date and it stops — support@cyberwave.ca reaches a person, and the Terms of Service are the governing text.
Does “Managed vCISO” mean you run security for us?
No. Managed vCISO is an advisory service. It does not include 24/7 security operations monitoring, emergency incident response, legal representation, insurance brokerage, or audit or certification services unless a signed statement of work expressly provides them. Your management retains decision authority. CyberWave does not operate a security operations centre, provide managed detection and response, perform penetration testing, or hold an incident response retainer. The advisory tiers add a named person to the programme, not a monitoring service.

Don’t wait for the next questionnaire to discover the gaps.

Most programmes start with one framework or one renewal, not with a platform rollout. Start there, and add scope when there is a reason to.

Start your 14-day free trial

No credit card required

  • Published pricing on every standard plan
  • No credit card required for the trial
  • No automatic charge when a trial ends
  • Tenant-isolated architecture, data stored in Canada
  • Clear data-processing terms
  • No compliance guarantee — human judgement still required