AutoCISO Pricing
Plans and pricing.
Start free — no credit card.
The Seed
$99 /mo
billed monthly
$83 /mo
billed annually
For teams of 5–25.
Start 14-day trial → Unlimited users
Recommended
The Growth
$699 /mo
billed monthly
$583 /mo
billed annually
For teams of 25–80. Built for SOC2 and ISO 27001 audit season.
Start 14-day trial → Unlimited users
The Scale
$1,999 /mo
billed monthly
$1,999 /mo
contact for annual
For teams of 80–200. Your full CISO office.
Contact sales → Unlimited users
Usage Limits
Connected apps
15
150
500
Unlimited
Audits per month
10
60
500
2000
AI assistant requests / month
30
200
1000
4000
Core
Employee directory & CSV import
✓
✓
✓
✓
Asset & SaaS app inventory
✓
✓
✓
✓
Access inventory & identity mapping
✓
✓
✓
✓
Ghost account detection
✓
✓
✓
✓
License waste calculator
✓
✓
✓
✓
Access relationship graph (visual map)
✓
✓
✓
✓
Security health dashboard
✓
✓
✓
✓
Team members & role-based access
✓
✓
✓
✓
AI Assistant
AI assistant & MCP tools for every feature in your plan
✓
✓
✓
✓
Evidence Capture
Manual screenshot & evidence upload
✓
✓
✓
✓
Browser Extension (Legacy Bridge)
—
✓
✓
✓
Workflows
Offboarding Command Center
—
✓
✓
✓
Joiners & leavers lifecycle workflows (JML)
—
✓
✓
✓
Jira & Slack remediation tasks
—
✓
✓
✓
Manual review queue (approve / reject / remap)
—
✓
✓
✓
Export
CSV & PDF export for all reports
—
✓
✓
✓
Detection
Service account & NHI detection
—
✓
✓
✓
Zombie Hunter (activity-signal correlation)
—
—
✓
✓
Toxic combinations & SoD conflict detection
—
—
✓
✓
Audit
Audit runner (CSV-based access validation)
—
✓
✓
✓
Audit trail
—
—
✓
✓
Reporting
CISO security intelligence reports (10 reports + PDF)
—
✓
✓
✓
vCISO Operating System (phased roadmap, AI insights, monthly KPI summary)
—
✓
✓
✓
Compliance & offboarding violations dashboard
—
✓
✓
✓
Advanced CISO reports (UAR, privileged delta, security debt, dept risk)
—
—
✓
✓
Risk Management workspace, register, budgets, and AI-guided intake
—
—
✓
✓
partner
Partner Portal — vCISO portfolio management for multiple client orgs
—
✓
✓
✓
Partner compliance posture overview across client portfolio
—
—
—
✓
Automation
Automated Evidence Agent (Playwright browser automation)
—
—
✓
✓
Vault-backed credential management (HashiCorp Vault)
—
—
✓
✓
Public API (API tokens on the REST API)
—
✓
✓
✓
Compliance & Certification
Privacy operations workspace (RoPA, DPIA, DSAR readiness, DPO Cockpit)
—
—
—
✓
Compliance Cockpit (unified posture score, coverage matrix)
—
—
✓
✓
Multi-framework crosswalk engine (objectives, crosswalks, framework selector)
—
—
✓
✓
Certification body directory & selection guide
—
—
✓
✓
ISO 27001 compliance workspace (scope, gap analysis, risk register, SoA, policies, roadmap, access reviews, backup tests, internal audit, management review)
—
—
✓
✓
HIPAA BAA & evidence collection
—
—
—
✓
Enterprise
Supply Chain Security — SBOM inventory, vulnerability findings, and vendor risk registry
—
—
✓
✓
Compliance framework export (PDF/XLSX)
—
—
—
✓
Continuous control monitoring
—
—
—
✓
Auditor-first compliance portal (external auditor access)
—
—
—
✓
Board & executive reporting
—
—
—
✓
Audit Simulator mode (pre-audit rehearsal)
—
—
—
✓
Certificate management & public verification page
—
—
—
✓
Single Sign-On (SAML / OIDC)
—
—
✓
✓
Partner Program
vCISO Partner Program
Built for fractional CISOs who manage security across multiple client organizations.
Choose one track per client organization. The two tracks are mutually exclusive — you can switch at any time or use both.
Track A
Referral
The client pays AutoCISO directly. You earn a 20% cash payout on every payment they make.
Available to any partner — individuals, resellers, or vCISOs. Share your referral link; no portal account required.
Track B
Managed Discount
You pay AutoCISO directly for each client org at a tiered discount:
Starter · 2–5 orgs 20% off
Pro · 6–14 orgs 25% off
Elite · 15+ orgs 30% off
Only managed-track orgs with an active paid subscription count toward your tier. Min 2 orgs required.
How to join
The vCISO Portal requires at least the Seed plan (Track B). Register in your account settings — no application, instant activation.
Learn more about the vCISO Partner Program FAQ
Common questions.
Is the Free tier really free forever?
Yes. The Free tier is not a trial — it never expires. You get 5 connected apps and 1 audit per month, permanently. We want you to find your first ghost account before you ever see a billing page.
Why is it unlimited users on every tier?
Security audits cover your whole company by nature. Penalizing headcount creates friction and misaligns incentives. Our limits are on scope (apps, automation features, audit frequency) not on how many people you protect.
What counts as a "connected app"?
Any application you upload a screenshot for, or that the Evidence Agent logs into. A single GitHub organization counts as one app. AWS would count as one app. Each distinct tool with its own user list counts separately.
Can I cancel anytime?
Yes. Monthly plans cancel at the end of the billing period. Annual plans are non-refundable but can be cancelled before renewal. No contracts, no lock-in.
Do you support HIPAA or ISO 27001?
ISO 27001 control mapping is available on The Growth tier and above. HIPAA BAA and full HIPAA evidence collection is available on The Scale tier. Contact sales for details.
What happens to my data?
Screenshots are processed through a local PII masking pipeline before any AI API call. Raw employee data never leaves your environment unmasked. All evidence is stored encrypted with AES-256-GCM and protected by an audit trail. See the Security page for architecture details.
Start finding ghost accounts. Free.
Up to 15 apps, 10 audit/month . No credit card. Run your first audit and see what's hiding in your SaaS stack.