On this page

Published SOC 2 software packages here start at $7,500 a year. Reported annual contract medians are $20,000 for Vanta, $20,000 for Secureframe, and $25,000 for Drata. The CPA audit usually costs extra. Check the included framework, employee limits, implementation help, and renewal terms before budgeting for a package.

Published packages: $7,500–$32,500 a year

8 public packages with required framework fees included. “From” means a starting price.

  • CarbideFrom $7,500
    Carbide published annual software package Foundation: from $7,500 USD per year on a zero to $32,500 scale. One framework; core platform and auditor collaboration tools. Dedicated security advisor is not included. CPA audit: Get a separate CPA quote.

    Foundation · One framework · Vendor plan · CPA fee separate

  • SecureframeFrom $7,500
    Secureframe published annual software package Fundamentals: from $7,500 USD per year on a zero to $32,500 scale. One compliance framework; includes evidence collection, policy management, personnel management, risk management and a trust center. The public starting price does not establish a buyer-specific headcount band or total. CPA audit: Get a separate CPA quote.

    Fundamentals · One compliance framework · Vendor plan · CPA fee separate

  • IruFrom $9,000
    Iru published annual software package Iru Core for startups: from $9,000 USD per year on a zero to $32,500 scale. Iru's startup offer includes Endpoint Management, Endpoint Detection & Response, Vulnerability Management, Compliance Automation with Trust Center, and Workforce Identity for up to 25 endpoint devices, 25 mobile devices, and 25 identity users. Annual commitment, billed annually; additional seats are offered in blocks of ten at an unpublished price. CPA audit: CPA examination fee separate.

    Iru Core for startups · up to 25 endpoint devices, 25 mobile devices, and 25 identity users · Vendor plan · CPA fee separate

  • SprintoFrom $9,500
    Sprinto published annual software package Starter + first framework: from $9,500 USD per year on a zero to $32,500 scale. AWS Marketplace 12-month platform dimension for up to 100 employees; the first compliance framework is a separate add-on. AWS Marketplace add-on for one core framework, including SOC 2, ISO 27001, HIPAA, CPRA, or GDPR. CPA audit: Get a separate CPA quote.

    Starter + first framework · up to 100 employees · AWS Marketplace · CPA fee separate

  • ComplyJetFrom $9,999
    ComplyJet published annual software package Core (1-year plan): from $9,999 USD per year on a zero to $32,500 scale. One framework, up to 50 employees, with one external audit advertised as included; one-year plan. CPA audit: Advertises one included external audit; confirm report type and scope.

    Core (1-year plan) · up to 50 employees · Vendor plan · Advertises one included audit

  • VantaFrom $14,000
    Vanta published annual software package Essentials: from $14,000 USD per year on a zero to $32,500 scale. One compliance framework, Vanta AI Agent, evidence collection, Auditor API and Trust Center; Questionnaire Automation (144 per year) is an optional add-on. AWS Marketplace price applies to a 12-month contract for 1-20 employees. CPA audit: Get a separate CPA quote.

    Essentials · 1-20 employees · AWS Marketplace · CPA fee separate

  • Trustero$20,000
    Trustero published annual software package SMB platform + SOC 2 Type 2: $20,000 USD per year on a zero to $32,500 scale. Required platform dimension for fewer than 100 employees; SOC 2 Type 2 framework is sold separately. SOC 2 Type 2 framework and controls, added to a required platform dimension; does not establish an included independent CPA examination. CPA audit: Get a separate CPA quote.

    SMB platform + SOC 2 Type 2 · fewer than 100 employees · AWS Marketplace · CPA fee separate

  • Drata$32,500
    Drata published annual software package Platform + SOC 2 framework: $32,500 USD per year on a zero to $32,500 scale. Drata Security & Compliance Automation Platform (D) seller-listed SaaS base, capacity for an organization of up to 100 FTE; frameworks are separate dimensions. SOC 2 2017 control set; separate from the base platform fee. CPA audit: Get a separate CPA quote.

    Platform + SOC 2 framework · up to 100 FTE · AWS Marketplace · CPA fee separate

$0$32,500 / year

Vendor and AWS Marketplace sources checked 2026-09-30, 2026-10-20. Packages differ in team limits and audit terms. Confirm the scope of ComplyJet’s advertised included audit. Drata also lists a $15,000 Foundation Package for 1 to 50 FTE on a separate AWS Marketplace listing; it is not shown because that listing does not itemize frameworks. Other vendors require a quote; see more prices and sources.

How much does SOC 2 software cost?

Vendr reports what buyers paid for annual software contracts. Use these ranges to check a quote, keeping in mind that company size, packages, and terms vary. The lowest recorded price may not be available to your company. To see which platform fits your team before you compare prices, read SOC 2 compliance software by buyer fit.

Vantamedian $20,000, sample size 374
Secureframemedian $20,000, sample size not recorded
Dratamedian $25,000, sample size 235
Hyperproofmedian $41,400, sample size 44
Whisticmedian not reported, sample size not recorded
These platforms' contract ranges all overlap from $22.2K to $32.6K; reported medians run from $20K to $41.4K.Each line runs from the lowest to the highest contract Vendr reports, with a dot at each end; the tick marks the median. Rows run from the lowest reported median to the highest, and platforms without one come last. Buyer size, package and term differ between pools, so these are not matched quotes. Source: Vanta, Secureframe, Drata, Hyperproof and Whistic on Vendr. Checked 2026-07-24, 2026-09-29, 2026-09-30 and 2026-10-15.

Reported software contracts (USD/year)
SoftwareReported annual rangeMedianSource
Vanta $7,500–$57,207 $20,000 Vendr
374 purchases
Drata $9,415–$68,250 $25,000 Vendr
235 purchases
Secureframe $7,733–$32,575 $20,000 Vendr

Vendr sources checked 2026-09-30, 2026-10-15. Buyer sizes, packages, and contract terms vary.

Vanta and Secureframe have the same reported median; Drata’s is higher. These purchases differ in headcount, frameworks, services, and contract length, so the medians cannot tell you which vendor would quote less for your company. The dates shown are when we checked the sources, not when buyers signed the contracts.

Budget separately for software, the CPA audit, and the work needed to fix your controls. The SOC 2 cost guide covers the full program budget.

Which SOC 2 platforms publish prices?

Some vendors publish plan prices on their websites. Others list packages for specific company sizes on AWS Marketplace, where prices can differ from direct-sales quotes. Several listings charge separately for the platform and SOC 2 framework.

Published software packages (USD/year)
Software / packageAnnual USD pricePackage / CPA audit
Carbide
Foundation		 From $7,500
Vendor site		 One framework; core platform and auditor collaboration tools. Dedicated security advisor is not included.
CPA audit: Get a separate CPA quote.
Secureframe
Fundamentals		 From $7,500
Vendor site		 One compliance framework; includes evidence collection, policy management, personnel management, risk management and a trust center. The public starting price does not establish a buyer-specific headcount band or total.
CPA audit: Get a separate CPA quote.
Iru
Iru Core for startups		 From $9,000
Vendor site		 Iru Core startup bundle for up to 25 endpoint devices, 25 mobile devices, and 25 identity users
CPA audit: CPA examination fee separate.
Sprinto
Starter + first framework		 From $9,500
$7,500 + $2,000
AWS Marketplace		 AWS Marketplace 12-month platform dimension for up to 100 employees; the first compliance framework is a separate add-on. AWS Marketplace add-on for one core framework, including SOC 2, ISO 27001, HIPAA, CPRA, or GDPR.
CPA audit: Get a separate CPA quote.
ComplyJet
Core (1-year plan)		 From $9,999
Vendor site		 One framework, up to 50 employees, with one external audit advertised as included; one-year plan.
CPA audit: Advertises one included external audit; confirm report type and scope.
Vanta
Essentials		 From $14,000
AWS Marketplace		 One compliance framework, Vanta AI Agent, evidence collection, Auditor API and Trust Center; Questionnaire Automation (144 per year) is an optional add-on. AWS Marketplace price applies to a 12-month contract for 1-20 employees.
CPA audit: Get a separate CPA quote.
Trustero
SMB platform + SOC 2 Type 2		 $20,000
$5,000 + $15,000
AWS Marketplace		 Required platform dimension for fewer than 100 employees; SOC 2 Type 2 framework is sold separately. SOC 2 Type 2 framework and controls, added to a required platform dimension; does not establish an included independent CPA examination.
CPA audit: Get a separate CPA quote.
Drata
Platform + SOC 2 framework		 $32,500
$25,000 + $7,500
AWS Marketplace		 Drata Security & Compliance Automation Platform (D) seller-listed SaaS base, capacity for an organization of up to 100 FTE; frameworks are separate dimensions. SOC 2 2017 control set; separate from the base platform fee.
CPA audit: Get a separate CPA quote.

Sources checked 2026-09-30, 2026-10-20. Marketplace prices cover a 12-month contract. Your quote may exceed a starting price; private offers may differ.

Check what each package includes before comparing prices:

  • Carbide Foundation covers one framework. Advanced starts at $12,500/year for two; Insights starts at $22,000/year for three and adds a dedicated security advisor. The quote-based Fractional CISO package covers hands-on implementation and remediation. Compare Carbide plans.
  • Secureframe Fundamentals starts at $7,500/year for one framework. Ask which employee band that price covers and what your full contract would cost. Complete adds SSO and SCIM connections and advanced modules, and requires a quote. Compare Secureframe packages.
  • ComplyJet Core starts at $7,999/year with a three-year commitment, or $9,999/year with a one-year commitment. The table uses the one-year price. Both advertise one external audit; confirm whether it meets your customer’s report type and scope. Check ComplyJet’s terms.
  • Iru’s $9,000/year startup bundle includes Compliance Automation with Trust Center, endpoint management, EDR, vulnerability management, and workforce identity. Check whether those products can replace tools you already pay for. Extra seats come in blocks of ten at an unpublished price; standalone Compliance Automation needs a quote. Check the Iru startup offer.

For vendors without a comparable public price, request a quote for your company. The Comp AI pricing guide and the Oneleet quote checklist explain what to ask for.

Which SOC 2 software is cheapest?

Carbide Foundation and Secureframe Fundamentals have the lowest annual starting prices in this public-package comparison. To compare total costs, add the audit and any implementation help you need. Also check whether the platform price includes the SOC 2 framework.

The Trustero Marketplace listing charges $5,000 for the SMB platform plus $15,000 for the SOC 2 Type 2 framework. That makes $20,000 for the software, before any separately agreed audit or services.

The Sprinto listing charges $7,500 for the Starter Platform plus a first core framework starting at $2,000. The combined software price starts at $9,500, with the audit quoted separately. The Sprinto review covers what the listing leaves out.

These packages charge separately for the framework

Platform + required framework, annual USD. The outlined segment is the framework charge.

  • SprintoFrom $9,500 / year
    Sprinto platform and required framework prices Platform $7,500 plus First framework from $2,000 gives a total starting at $9,500 for a 12-month software contract. Zero to $32,500 scale. Up to 100 employees. Independent CPA audit fee separate.

    Platform $7,500 + First framework from $2,000

    Up to 100 employees.

  • Trustero$20,000 / year
    Trustero platform and required framework prices Platform $5,000 plus SOC 2 Type 2 $15,000 gives a total of $20,000 for a 12-month software contract. Zero to $32,500 scale. Fewer than 100 employees. Independent CPA audit fee separate.

    Platform $5,000 + SOC 2 Type 2 $15,000

    Fewer than 100 employees.

  • Drata$32,500 / year
    Drata platform and required framework prices Platform $25,000 plus SOC 2 framework $7,500 gives a total of $32,500 for a 12-month software contract. Zero to $32,500 scale. Up to 100 FTE. Independent CPA audit fee separate.

    Platform $25,000 + SOC 2 framework $7,500

    Up to 100 FTE.

$0$32,500 / year

AWS Marketplace listings checked 2026-09-30, 2026-10-20. Employee limits differ between packages. Your quote may exceed a starting price; private quotes may differ. Budget separately for the CPA audit.

What makes a SOC 2 software quote more expensive?

A quote can rise when you add employees, frameworks, entities, paid modules, or services. Ask for prices based on your current requirements and the growth you expect before renewal.

  • Include contractors, subsidiaries, cloud accounts, and separate workspaces in your requirements. Ask what triggers the next price band and whether growth is billed during the contract.
  • If you need SOC 2 and ISO 27001, ask what the second framework adds to the price and what work is needed to reuse evidence.
  • Check whether trust centers, questionnaire automation, vendor assessments, and access reviews are included or sold separately. Ask about usage limits for the modules you need.
  • Ask who sets up the platform and fixes failed controls. A customer-success contact may provide guidance while leaving the configuration work to your team.

For each vendor’s included features and add-ons, see the Vanta pricing guide, Drata pricing guide, and Secureframe review. For product fit beyond price, use best SOC 2 software by buyer fit.

Does SOC 2 software include the audit?

Sometimes. Ask for a written proposal naming the CPA firm, report type, scope, and included fee. “Audit-ready,” auditor collaboration tools, or access to an auditor network can still leave you paying for the examination separately.

ComplyJet advertises one external audit in Core and Plus. Comp AI’s cost page advertises a bundled audit and penetration test, with subscription pricing by quote. Thoropass connects its platform with a legally separate CPA practice; the Thoropass pricing guide explains the arrangement. Compare each bundle’s audit terms with a quote for software and an audit purchased separately.

Ask who signs the report, whether the fee covers Type 1 or Type 2, which Trust Services Criteria and systems are included, and what happens if you choose another auditor. If the platform includes one audit over a multi-year commitment, confirm the cost of later examinations.

You can compare firms that list experience with Vanta or Drata, or browse SOC 2 auditors. Ask the CPA how they would review evidence from your chosen platform before buying it.

How do you compare SOC 2 software quotes fairly?

Give every vendor the same requirements and compare the full first-year cost for the same audit scope. Ask for renewal prices both with your current requirements and with your expected growth. If a proposal omits an audit or required module, ask for its price before adding up the total.

Copy these requirements into each quote request:

  1. List employees and contractors today and at renewal, legal entities, products, and cloud environments.
  2. Specify the SOC 2 report type, planned observation period, Trust Services Criteria, and any additional frameworks.
  3. Name your cloud, identity, HR, device, ticketing, and code tools. Require the connections you need in the quoted package.
  4. Ask who sets up the platform, writes and approves policies, fixes failed controls, and answers audit requests.
  5. Request the required modules, usage limits, overage rates, contract length, payment schedule, renewal price, and cancellation notice.
  6. Ask for the signing CPA firm, examination fee and whether it’s included, plus charges for re-testing or additional reports.

First-year cash cost = subscription + required modules + setup/services + CPA examination. Add any security tools and testing you’ll buy separately. Estimate your team’s time as well; setup and ongoing compliance work still need an owner.

For example, a $10,000 subscription plus an $8,000 audit totals $18,000 before other services. A $15,000 package with the same audit included totals $15,000 for software and audit. These are hypothetical prices, not vendor quotes.

Before taking a multi-year discount, check the total commitment, payment dates, annual increases, and exit terms. You may still owe payments if your requirements change.

Shortlist two or three packages that cover your requirements, run the same evidence test in each demo, and check how you’ll share that evidence with the auditor. Use the software buyer-fit comparison to narrow the shortlist, or compare all current SOC 2 platforms.

SOC 2 software pricing questions

Can you pay monthly for SOC 2 software?

Ask the vendor whether it allows monthly payments and whether you still have to commit for a year. Dividing an annual price by 12 gives you a monthly budget figure, but the full payment may be due upfront. Iru’s startup offer, for example, is an annual commitment billed annually.

Do you need paid software to get SOC 2?

No. You can organize controls and evidence with existing tools, provided your CPA can examine the required evidence. Compare the subscription and setup costs with the recurring work the platform could save your team; what SOC 2 automation covers shows which work that is, and the small-business software picks suit small teams with limited internal capacity. Ask your auditor to review your plan before choosing a manual approach.

What should you budget for software in year two?

Ask for a written renewal price that covers your expected headcount, frameworks, and required modules. Budget separately for the recurring CPA examination and ongoing security work. Confirm whether the first-year discount continues and whether an included audit covers renewals.

More software prices and sources

The software directory also covers broader GRC and customer-trust tools. Check each price's purpose, currency, and billing period before comparing it. Where the price is unknown, ask for a quote.

Prices and sources for every listed software profile
SoftwarePrice / packageSource / checked
Anecdotes
SOC 2 platform		 $46,875–$78,125 / year. Third-party estimate or reported contracts. Price source
2026-07-24
Apptega
SOC 2 platform		 $6.00 / user/month. Third-party estimate or reported contracts. Price source
2026-07-24
Optro
SOC 2 platform		 Price unknown; request a quote for your company. No price source
Carbide
SOC 2 platform
  • Foundation: from $7,500 / year. One framework; core platform and auditor collaboration tools. Dedicated security advisor is not included.
  • Advanced: from $12,500 / year. Two frameworks; adds multi-framework mapping, weekly vulnerability scans, and security questionnaire support.
  • Insights: from $22,000 / year. Three frameworks; adds a dedicated security advisor and personalized audit guidance.

Also recorded: $7,500–$22,000 / year.

Package source
2026-09-30

Recorded observation
2026-08-31
Comp AI
SOC 2 platform		 Price unknown; request a quote for your company. Price source
2026-09-24
ComplyJet
SOC 2 platform
  • Core (3-year plan): from $7,999 / year. One framework, up to 50 employees, with one external audit advertised as included; requires a three-year plan.
  • Plus (3-year plan): from $9,999 / year. Two frameworks, up to 50 employees, with one external audit advertised as included; requires a three-year plan.
  • Core (1-year plan): from $9,999 / year. One framework, up to 50 employees, with one external audit advertised as included; one-year plan.
  • Plus (1-year plan): from $11,999 / year. Two frameworks, up to 50 employees, with one external audit advertised as included; one-year plan.

Also recorded: $9,999 / year. one-year Core plan

Package source
2026-09-30

Recorded observation
2026-09-28
Conveyor
Adjacent software		 $0.00–$9,600 / year. Published price. Price source
2026-07-24
Delve
SOC 2 platform
  • Foundation Package: from $12,000 / 12-month contract. AWS Marketplace listing for 1–20 employees on a 12-month contract; confirm included frameworks, audit scope, and renewal terms.

Also recorded: $10,000–$30,000 / year.

Package source
2026-09-29

Recorded observation
2026-07-24
Drata
SOC 2 platform
  • AWS Marketplace Foundation Package: $15,000 / 12-month contract. Drata-sold AWS Marketplace package for companies with 1 to 50 FTE, sold as a single 12-month dimension. The listing does not itemize frameworks or modules. Its name and 50-FTE cap match the Foundation plan on drata.com/plans, which includes one pre-mapped framework (SOC 2, ISO 27001, Cyber Essentials, HIPAA, or GDPR); the listing itself does not confirm that mapping.
  • AWS Marketplace Platform Fee: $25,000 / 12-month contract. Drata Security & Compliance Automation Platform (D) seller-listed SaaS base, capacity for an organization of up to 100 FTE; frameworks are separate dimensions.
  • AWS Marketplace SOC 2 Framework: $7,500 / 12-month contract. SOC 2 2017 control set; separate from the base platform fee.
  • AWS Marketplace ISO 27001 Framework: $7,500 / 12-month contract. ISO 27001 v2022 control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace HIPAA Framework: $7,500 / 12-month contract. HIPAA control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace GDPR Framework: $7,500 / 12-month contract. GDPR control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace PCI DSS Framework: $7,500 / 12-month contract. PCI DSS control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace CCPA Framework: $7,500 / 12-month contract. CCPA control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace CMMC Framework: $7,500 / 12-month contract. CMMC control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace Microsoft SSPA Framework: $7,500 / 12-month contract. Microsoft SSPA control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace NIST CSF Framework: $7,500 / 12-month contract. NIST CSF control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace NIST SP 800-53 Framework: $7,500 / 12-month contract. NIST SP 800-53 control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace ISO 27701 Framework: $7,500 / 12-month contract. ISO 27701 control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace FFIEC Framework: $7,500 / 12-month contract. FFIEC control set; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace DORA Framework: $7,500 / 12-month contract. DORA framework dimension; separate from the base platform fee and from every other framework dimension.
  • AWS Marketplace Trust Center Module: $25,000 / 12-month contract. Trust Center module on the Platform (D) listing; separate from the base platform fee.
  • AWS Marketplace Risk Management Module: $50,000 / 12-month contract. Risk Management module on the Platform (D) listing; separate from the base platform fee.

Also recorded: $9,415–$68,250 / year.

Package source
2026-10-20

Package source
2026-10-20

Recorded observation
2026-09-30
Hyperproof
SOC 2 platform		 $22,215–$70,000 / year. Third-party estimate or reported contracts. Price source
2026-09-29
Iru
SOC 2 platform
  • Iru Core for startups: from $9,000 / year. Iru's startup offer includes Endpoint Management, Endpoint Detection & Response, Vulnerability Management, Compliance Automation with Trust Center, and Workforce Identity for up to 25 endpoint devices, 25 mobile devices, and 25 identity users. Annual commitment, billed annually; additional seats are offered in blocks of ten at an unpublished price.

Also recorded: Up to $15,000 recorded / year for Compliance Automation.

Package source
2026-09-30

Recorded observation
2026-09-18
Oneleet
SOC 2 platform		 Price unknown; request a quote for your company. No price source
OneTrust Certification Automation
SOC 2 platform		 £36,180 / year. Published price. Price source
2026-09-29
Onspring
SOC 2 platform		 Price unknown; request a quote for your company. No price source
RealCISO
Adjacent software		 $3,600–$50,000 / year. Published price. Price source
2026-08-12
SafeBase by Drata
Adjacent software		 Price unknown; request a quote for your company. Price source
2026-07-24
Screenata
SOC 2 platform
  • AI compliance officer: $5,988 / year. Under 50 employees, one framework, unlimited seats, all modules included. Audit fee is separate. Additional frameworks priced separately.

Also recorded: $5,988 / year.

Package source
2026-09-02

Recorded observation
2026-09-02
Scrut Automation
SOC 2 platform		 $15,000 / year. Published price. Price source
2026-09-24
Scytale
SOC 2 platform
  • AWS Marketplace Software Platform: from $7,500 / 12-month contract. Security Compliance Automation Hub: software access and one framework, starting price per organization size, quote required.
  • AWS Marketplace Additional Platform Framework: from $2,100 / 12-month contract. One additional framework (for example SOC 2, ISO 27001 or PCI DSS) with automation and support, starting price, quote required.
  • AWS Marketplace Framework Consulting: from $4,000 / 12-month contract. Dedicated compliance expert support, starting price, quote required.
  • AWS Marketplace Offensive Security (PT): from $4,500 / 12-month contract. Advanced security penetration testing, starting price, quote required.
  • AWS Marketplace Virtual Compliance: from $36,000 / 12-month contract. Personal vGRC/vDPO expert full support, starting price, quote required.
  • AWS Marketplace Security Questionnaires: from $12,000 / 12-month contract. Security questionnaires with AI and expert review, starting price, quote required.
  • AWS Marketplace 3rd Party Audit: $4,200 / 12-month contract. Third-party audit services offered through the listing; the listing names no audit firm or report type.

Also recorded: $7,500 / year.

Package source
2026-10-20

Recorded observation
2026-10-20
Secureframe
SOC 2 platform
  • Fundamentals: from $7,500 / year. One compliance framework; includes evidence collection, policy management, personnel management, risk management and a trust center. The public starting price does not establish a buyer-specific headcount band or total.

Also recorded: $7,733–$32,575 / year.

Package source
2026-10-20

Recorded observation
2026-09-30
ServiceNow Integrated Risk Management
SOC 2 platform		 Price unknown; request a quote for your company. No price source
Sprinto
SOC 2 platform
  • Sprinto Starter Platform: $7,500 / 12-month contract. AWS Marketplace 12-month platform dimension for up to 100 employees; the first compliance framework is a separate add-on.
  • First Compliance Framework: from $2,000 / 12-month contract. AWS Marketplace add-on for one core framework, including SOC 2, ISO 27001, HIPAA, CPRA, or GDPR.

Package source
2026-09-30
Strike Graph
SOC 2 platform
  • Scale: from $21,500 / year. One framework from any tier; advertised advanced AI and readiness tools. Additional frameworks, services and AI consumption may cost extra.
  • Enterprise: from $35,000 / year. Builds on Scale with Evidence API, custom frameworks, enterprise workspaces and multi-domain reporting; additional frameworks and services may cost extra.
  • Verify AI Starter: $4,250 / year. Consumption add-on with 350 credits per month; included allowances and credit charging rules require confirmation.
  • Verify AI Standard: $6,500 / year. Consumption add-on with 750 credits per month; included allowances and credit charging rules require confirmation.
  • Verify AI Pro: $10,000 / year. Consumption add-on with 1,000 credits per month; included allowances and credit charging rules require confirmation.

Also recorded: $0.00 / year.

Package source
2026-10-05

Recorded observation
2026-10-05
Thoropass
SOC 2 platform
  • Compliance Platform: from $8,700 / year. AWS Marketplace 12-month platform dimension ("Platform Subscription, including your first framework"); billed separately from the SOC 2 Audit Subscription.
  • SOC 2 Audit Subscription: from $5,800 / year. AWS Marketplace 12-month audit dimension; billed separately from the platform.

Also recorded: $14,500 / year.

Package source
2026-10-20

Recorded observation
2026-10-20
TrustCloud
SOC 2 platform
  • TrustOps: $5,000 / 12-month contract. AWS Marketplace: AI-powered control assurance for 51–500 employees, 1 framework.
  • TrustRegister: $5,000 / 12-month contract. AWS Marketplace: AI-powered risk register for 51–500 employees, unlimited risks.
  • TrustShare: $150 / 12-month contract. AWS Marketplace: AI-powered security questionnaire automation, 1 questionnaire.
  • TrustLens: $150 / 12-month contract. AWS Marketplace: AI-powered vendor risk management for 51–500 employees, 1 vendor.

Package source
2026-10-20
Trustero
SOC 2 platform
  • Trustero GRC Platform for SMBs (<100 Employees): $5,000 / 12-month contract. Required platform dimension for fewer than 100 employees; SOC 2 Type 2 framework is sold separately.
  • Trustero GRC Platform for Mid Market (101-1000 employees): $10,000 / 12-month contract. Required platform dimension for 101-1000 employees; SOC 2 Type 2 framework is sold separately.
  • SOC 2 Type 2 Framework: $15,000 / 12-month contract. SOC 2 Type 2 framework and controls, added to a required platform dimension; does not establish an included independent CPA examination.

Also recorded: $5,000–$25,000 / year.

Package source
2026-09-30

Recorded observation
2026-07-24
Vanta
SOC 2 platform
  • Essentials: from $14,000 / 12-month contract. One compliance framework, Vanta AI Agent, evidence collection, Auditor API and Trust Center; Questionnaire Automation (144 per year) is an optional add-on. AWS Marketplace price applies to a 12-month contract for 1-20 employees.
  • Plus: from $21,500 / 12-month contract. Everything in Essentials plus automated policy onboarding, Access Management and Questionnaire Automation (25 questionnaires per year included, optional upgrade to 144). AWS Marketplace price applies to a 12-month contract for 1-20 employees.
  • Professional: from $23,000 / 12-month contract. Everything in Plus plus Questionnaire Automation (144 per year), risk management, Advanced Trust Center, custom monitoring tests, automated access management, six customizable reports, advanced control management and agentic issue management. AWS Marketplace price applies to a 12-month contract for 1-20 employees.
  • AWS FTR: $7,500 / 12-month contract. AWS Foundational Technical Review module.
  • Trust Center: $6,000 / 12-month contract. Trust Center module for 1-20 employees.
  • Third Party Risk Management: $13,600 / 12-month contract. Up to 50 vendors managed per year.
  • Questionnaire Automation: $10,000 / 12-month contract. 144 questionnaires per year.
  • Questionnaire Automation Advanced: $16,000 / 12-month contract. 288 questionnaires per year.
  • Trust Center Advanced: $10,000 / 12-month contract. Trust Center Advanced module for 1-20 employees.
  • Customer Trust Management: $22,250 / 12-month contract. Trust Center Advanced plus Questionnaire Automation Advanced.

Also recorded: $7,500–$57,207 / year.

Package source
2026-10-15

Package source
2026-10-15

Recorded observation
2026-10-15
Whistic
Adjacent software		 $12,850–$42,625 / year. Third-party estimate or reported contracts. Price source
2026-07-24
Zania
SOC 2 platform		 Price unknown; request a quote for your company. No price source

More in Compliance Tools