Free
Free
For individual owners who start with ISO 27001 and want to test the platform on real work.
- 1 framework (ISO 27001)
- Up to 50 controls
- Basic risk management
- 1 user
Pricing
The plan follows your scope.
You start small with a clear scope and expand when more teams, standards or management systems use the same data.
What each plan includes
Standard
from€240/month
billed yearly · €290 billed monthly
For small teams managing assets, policies and risks together across several standards.
- 3 frameworks
- Unlimited controls
- Asset and policy management
- 10 users, 50 guests
- Email support
Professional
Recommendedfrom€575/month
billed yearly · €690 billed monthly
For organisations running ISMS, BCMS, DSMS and AIMS together, with responsibility spread across teams and locations.
- All four systems: ISMS, BCMS, DSMS, AIMS
- KaitoSec AI across all systems
- Threat intelligence and vendor management
- Trust Center and SSO / SAML
- 40 users, priority support
Enterprise
On request
For organisations with specific operating, identity and deployment requirements. Adoption and support are defined together.
- Unlimited users and guests
- On-premise option
- Custom integrations
- Dedicated account manager
During early access we clarify scope, number of users and operating model together. You receive a proposal in which every assumption is stated.
Built and hosted in Germany · GDPR-compliant
| Feature | Free | Standard | Professional | Enterprise |
|---|---|---|---|---|
| Frameworks & scale | ||||
| Frameworks | 1 | 3 | All | All |
| Controls | 50 | ∞ | ∞ | ∞ |
| Users | 1 | 10 | 40 | ∞ |
| Organisations | 1 | 1 | 3 | ∞ |
| Guest users | Not included | 50 | 250 | ∞ |
| Additional user | Not included | €29/mo | €29/mo | Included |
| Management systems | ||||
| Risk management | Basic | Advanced | Advanced | Advanced |
| Asset management | Not included | Included | Included | Included |
| Measure tracking | Not included | Included | Included | Included |
| Policy management | Not included | Included | Included | Included |
| AI & automation | ||||
| Multi-framework mapping | Not included | Not included | Included | Included |
| KaitoSec AI | Not included | Not included | Included | Included |
| Audit preparation | Not included | Not included | Included | Included |
| Threat intelligence | Not included | Not included | Included | Included |
| Vendors, Trust Center & reporting | ||||
| Vendor management | Not included | Not included | Included | Included |
| Trust Center | Not included | Not included | Included | Included |
| Reporting | Not included | Not included | Included | Included |
| Security & deployment | ||||
| SSO / SAML | Not included | Not included | Included | Included |
| On-premise | Not included | Not included | Not included | Included |
| Custom integrations | Not included | Not included | Not included | Included |
| Dedicated account manager | Not included | Not included | Not included | Included |
| Support & SLA | ||||
| AI calls / month | Not included | 100 | 500 | 2,000 |
| Support | Community | Priority | Dedicated | |
| P1 response time | Not included | 8h | 4h | 1h |
| Onboarding | Not included | Not included | Included | Included |
Frequently asked questions
How is my final price determined?
The plan, number of users, operating model and optional adoption scope determine the price. During early access, we review these points and state every assumption in the proposal.
What does KaitoSec AI cost?
Each plan includes a monthly allowance of AI calls: Standard 100, Professional 500, Enterprise 2,000. Usage beyond that is billed pay-as-you-go; additional call packs start at €50.
Can I switch plans anytime?
Yes, upgrades and downgrades are available at any time. Upgrades are prorated for the remaining billing period.
What does an additional user cost?
€29/user/month on Standard and Professional. Enterprise includes unlimited users.
Is there a free trial?
The Free tier is permanently free, so you don't need a separate trial. You can move to a larger plan at any time.
What happens to my data on downgrade?
Your data is fully preserved. Certain features become restricted, but nothing is lost.
Do I need consulting?
No. KaitoSec is built so you can run it without consulting. Consulting is optional: remote day rate from €1,150, fixed-price packages (gap analysis, NIS2 check, certification support) and vCISO retainers from €576/month can be booked separately.
What does training cost?
Inhouse training from €1,200/day, up to 20 participants. Single modules from €600, bundles with 15 to 20 % discount. The KaitoSec admin training is included in Professional and Enterprise.
Are there discounts for non-profits?
Yes, non-profit organisations receive a 20 % discount. Contact us for details.
Are there partner conditions?
Referral partners earn 15 % commission on referred annual revenue. Service partners buy with a 20 % volume discount and keep 100 % of their consulting revenue.
Where is my data hosted?
All data is hosted on ISO 27001-certified servers by Hetzner Online GmbH in Germany. Your data does not leave the EU.