Menu
Carbide
Carbide is a compliance platform and advisory service for companies preparing for SOC 2, ISO 27001, HIPAA, and PCI DSS. Annual packages pair its software with varying levels of expert guidance and implementation support.
Securicy (Sydney, Nova Scotia) rebranded to Carbide on 2022-02-01, per the company's own release and independent corroboration (Digital Nova Scotia member directory, PR Newswire/Yahoo Finance syndication). As of 2026-07-24 the vendor site (carbidesecure.com), G2 listing, and LinkedIn page are all live and current under the Carbide name; no subsequent acquisition or further rename has been reported.
Best for: Early-stage SaaS companies that want hands-on guidance for a first compliance frameworkWatch for: Enterprise administration and fully native, per-framework control sets are not publicly documented
AI and MCP
MCP server: Official. Access: Read and write. Checked 12 Oct 2026.
How much does Carbide cost?
Carbide publishes prices of $7,500 to $22,000 a year. Your price depends on plan scope, headcount, services, and contract term.
Price source: view reported prices · checked 2026-08-31
Published prices (3)
| Listed item | Price | Scope |
|---|---|---|
| Foundation | From $7,500 / year | One framework; core platform and auditor collaboration tools. Dedicated security advisor is not included. · Source |
| Advanced | From $12,500 / year | Two frameworks; adds multi-framework mapping, weekly vulnerability scans, and security questionnaire support. · Source |
| Insights | From $22,000 / year | Three frameworks; adds a dedicated security advisor and personalized audit guidance. · Source |
These are annual plan starting prices, not a contract range or maximum. Fractional CISO implementation and remediation services require a quote. Confirm independent CPA fees separately. Plan source
Carbide's published prices cover different plans with advisory included, so compare plan scope and implementation help before treating the range as a like-for-like platform price. Plan source
Ask for the first-year total, renewal cap, implementation charge, required add-ons, and separate audit fee in writing.
What does Carbide do?
Carbide was founded in 2016. Carbide is led by Darren Gallop. Carbide is headquartered in Sydney, Nova Scotia, Canada.
Evidence collection
Available · "Technical Integrations" automatically collect evidence from connected systems and map it to controls.
Auditor workspace
Available · "Audit Manager" gives auditors a read-only view of the compliance dashboard; sold as "Audit Manager + Auditor Collaboration Tools" in every paid tier.
Trust center
Available · Trust Center is included at every subscription tier, including the entry-level Foundation plan.
Security questionnaires
Partial · "Security Questionnaire Support" is included from the Advanced tier up; not in the entry-level Foundation plan.
Scope and limits
"Security Questionnaire Support" is included from the Advanced tier up; not in the entry-level Foundation plan. Also sold as an a-la-carte service.
Continuous control testing
Available · Continuous Cloud Monitoring runs across all tiers; Weekly Vulnerability Scans from the Advanced tier up.
Multi-framework support
Partial · Vendor describes a shared "universal blueprint" of Domains and Organizational Controls that is crosswalk-mapped to each framework, rather than fully separate native control sets per framework.
Funding history
Raised roughly $5.5M total across seed rounds per Tracxn/CB Insights, most recently a $4.1M round (Jan 2022) led by Allos Ventures and Build Ventures; no funding disclosed since 2022.
How does Carbide compare with ComplyJet, Comp AI, Scytale?
| Attribute | CarbideThis profile | Comp AI | Iru | ComplyJet | Scytale |
|---|---|---|---|---|---|
| Best for | Early-stage SaaS companies that want hands-on guidance for a first compliance framework | Engineering-led teams that value inspectable code or the option to self-host | Teams seeking SOC 2 automation and device management in one platform | Small B2B SaaS teams that want hands-on ownership of a first SOC 2 program | Companies without compliance expertise seeking software plus hands-on advisory |
| Observed price | $7,500–$22,000 / year | Not published | Up to $15,000 / year for Compliance Automation | $9,999 / year · one-year Core plan | $7,500 / year |
| G2 rating | 4.6/5 (86 reviews) | 4.7/5 (73 reviews) | 4.7/5 (853 reviews) | 4.8/5 (17 reviews) | 4.8/5 (734 reviews) |
| Integrations | 100+ published | 590+ published | Not published | 350+ published | 150+ published |
| Frameworks | 4 listed | 11 listed | 11 listed | 8 listed | 9 listed |
| Onboarding | guided | guided | guided | guided | bundled expert |
| Auditors here | Not published | 4 | Not published | Not published | Not published |
| Trust center | Listed | Listed | Listed | Listed | Listed |
Will Carbide connect to your stack?
Carbide reports 100+ integrations. Check the exact fields, tests, permissions, and plan coverage for each tool you need.
- Which required tools have a native connector, need an API build, or require manual upload?
- What fields and control tests sync, how often, and with which permissions?
- Which connections are included in the quoted plan?
Which frameworks does Carbide support?
- SOC 2Carbide says
- ISO 27001Carbide says
- HIPAACarbide says
- PCI DSSCarbide says
Some frameworks use mapped controls rather than native workflows. Confirm the tests and evidence required for each program.
Who does what in a SOC 2 with Carbide?
Carbide
Organizes the listed control, evidence, and audit workflows.
Your team
Owns policies, control decisions, exceptions, and approval of shared evidence.
The CPA firm
Sets audit scope, tests controls independently, and issues the SOC 2 report.
Carbide does not issue the SOC 2 report itself. Per its own pricing-page FAQ, only a certified CPA firm can conduct the audit, and Carbide connects customers to independent audit partners once the program is audit-ready.
Questions to ask in a Carbide demo
- Which parts of security questionnaire answering require another tool or service?
- Can you demonstrate enterprise administration in the product?
- Can you demonstrate SCIM provisioning in the product?
- Which parts of native multi-framework support require another tool or service?
- Which plan includes SCIM, and is it a paid add-on?
- What renewal increase and minimum contract term should we put in writing?
- Is the SOC 2 audit contracted with a separate CPA firm, and what does that firm charge?
Carbide FAQ
Where is Carbide based?
Carbide is headquartered in Sydney, Nova Scotia, Canada.
Who runs Carbide?
Darren Gallop is the CEO of Carbide.
Who founded Carbide?
Darren Gallop and Laird Wilton founded Carbide in 2016.
Does Carbide include the SOC 2 audit?
Carbide does not issue the SOC 2 report itself. Per its own pricing-page FAQ, only a certified CPA firm can conduct the audit, and Carbide connects customers to independent audit partners once the program is audit-ready. A licensed CPA firm issues the SOC 2 report.
Is Carbide itself SOC 2 compliant?
Supporting a buyer's SOC 2 program does not establish that Carbide holds a current SOC 2 report. Ask for the vendor's current report during security review.
What does Carbide integrate with?
Carbide reports 100+ integrations. Confirm the fields, tests, permissions, and plan coverage for your own tools.
Similar platforms
Carbide on SOC2Auditors
Sources 19 records · last read 2026-09-30
These links show what we checked and when.
| Establishes | Source | Retrieved |
|---|---|---|
| Company page names Darren Gallop CEO and co-founder with Laird Wilton. | Carbide Vendor docs | 2026-09-29 |
| Securicy rebranded to Carbide on February 1, 2022, in Sydney, Nova Scotia, Canada. | Vendor docs Vendor docs | 2026-07-24 |
| Independent syndication confirming "Carbide, formerly known as Securicy" and describing the platform's positioning. | Yahoo Finance / PR Newswire Press | 2026-07-24 |
| Independent, non-vendor confirmation that Carbide was formerly Securicy, listed as a current member. | Digital Nova Scotia (industry association member directory) Editorial | 2026-07-24 |
| Carbide is rated 4.6 stars from 86 verified reviews, current as of this research date (also visible via G2's Carbide vs. Secureframe comparison page). | G2 Review platform | 2026-07-24 |
| Published pricing tiers ($7,500 / $12,500 / $22,000 per year) and per-tier feature matrix. | Vendor docs Vendor docs | 2026-07-24 |
| Platform capability detail: evidence automation, audit manager, multi-framework 'universal blueprint,' continuous cloud monitoring. | Vendor docs Vendor docs | 2026-07-24 |
| SOC 2-specific capability page; states 100+ technical integrations and that Carbide refers customers to independent CPA audit partners rather than issuing the report itself. | Vendor docs Vendor docs | 2026-07-24 |
| Total funding of $5.46M over 6 rounds; latest round a Seed round on 2021-12-21. | Tracxn Third-party estimate | 2026-07-24 |
| Founded 2016; total raised $5.58M; company status "Alive"; last raise $4.1M ~5 years ago. | CB Insights Third-party estimate | 2026-07-24 |
| Company profile: founded 2016, HQ Sydney Nova Scotia, 11-50 employees, last funding round Seed $4.1M (2022-01-21), investors Build Ventures and Allos Ventures. | LinkedIn Editorial | 2026-07-24 |
| HIPAA framework support recorded as vendor-claimed. | Carbide Vendor docs | 2026-07-24 |
| Vendor-claimed HIPAA workflow: advisors map requirements to the buyer's data flows and vendor relationships; the platform tracks controls/documentation continuously as vendors and BAAs change, with gap analysis, customized policies, evidence collection, and audit workspace. | Carbide Vendor docs | 2026-08-31 |
| Not established. The reviewed Carbide framework page describes HIPAA program support but does not establish the vendor's own PHI permission or customer BAA route. | SOC2Auditors.org Editorial | 2026-08-31 |
| Pricing page checked 2026-08-31: Foundation starts at $7,500/year for one framework; Advanced at $12,500/year for two; Insights at $22,000/year for three. Dedicated security advisor, Carbide-led gap/risk assessment and personalized audit guidance start at Insights. Hands-on implementation/remediation is in the quote-based Fractional CISO package. All plans list auditor collaboration tools; software pricing does not establish the CPA examination fee. | Carbide Vendor docs | 2026-08-31 |
| G2 seller listing shows 4.6/5 from 86 reviews; snapshot retrieved 2026-09-29. | G2 Review platform | 2026-09-29 |
| Carbide's privacy notice gives Carbide Secure Inc. a postal address in Sydney, Nova Scotia. | Carbide Vendor docs | 2026-09-29 |
| Carbide says it was co-founded in 2016 as Securicy and renamed Carbide on February 1, 2022. | Carbide Vendor docs | 2026-09-29 |
| Foundation, Advanced, and Insights annual starting prices are $7,500, $12,500, and $22,000; their scope is one, two, and three frameworks. Dedicated security advisor starts at Insights. | Carbide Vendor docs | 2026-09-30 |
Not yet confirmed
- Customer count · last checked 2026-09-24