Standard
up to 49 employees
Small businesses, medical practices, law firms, trades
€499 / month
excl. VAT · billed annually, €5,988 per year
One-off setup including data migration
approx. €1,200
SecTepe.Core
Pricing and plans
Every feature for everyone. The price depends only on your size.
No feature tiers, no per-user pricing, no surcharge per standard. Every organisation gets the full scope of SecTepe.Core. Work that falls outside the platform is listed further down with guide prices.
Plans by company size
In every plan:
- Full feature set
- Unlimited users
- All standards and your own catalogues
- Support, bug fixes and updates
- Hosted exclusively in the EU
Request a demo or a call
Premium
50 to 249 employees
Mid-sized companies, often in scope of NIS2 as an important entity
€999 / month
excl. VAT · billed annually, €11,988 per year
One-off setup including data migration
approx. €1,900
Corporate
250 to 999 employees
Larger mid-market companies, hospitals, utilities, housing industry
€1,690 / month
excl. VAT · billed annually, €20,280 per year
One-off setup including data migration
approx. €2,900
Enterprise · from 1,000 employees, corporate groups and public authorities
Individual quote, same feature set. Guide value from €2,490 per month.
The decisive figure is the number of employees within the scope, self-declared when the contract is signed. If you grow past a threshold, the new price applies from the next contract renewal. All prices excl. VAT, billed annually.
Included in every plan
Whether 20 or 900 employees: you use the same platform with every area.
Information security
ISO 27001, NIS2 (the EU cybersecurity directive), BSI IT-Grundschutz (German Federal Office for Information Security), BSI C5 for cloud services, SOC 2 and all other standards. Plus your own catalogues for assessments without a fixed standard.
Industry standards
B3S for hospitals and healthcare, DORA (the EU regulation for the financial sector), TISAX (the automotive industry assessment), PCI DSS (the payment card industry standard).
Data protection
Records of processing activities, technical and organisational measures, data protection impact assessments, data subject rights, data breaches, processors.
Business continuity and crisis management
Business impact analysis, scenarios, crisis team, emergency exercises, ISO 22301.
Audits, reports and notifications
Audit planning, access for external auditors, management and board reports, notifications to authorities, whistleblower portal.
Security operations
Vulnerability management, coordination of penetration tests (simulated attacks), monitoring of leaked credentials and exposed attack surface, phishing simulations.
AI and product regulation
EU AI Act (the EU regulation on artificial intelligence) with an inventory of AI systems. Cyber Resilience Act (the EU regulation for software and connected devices) with a software bill of materials.
Quality, environment, energy
ISO 9001, ISO 14001 and ISO 50001 as an integrated management system with a shared standard structure and combined audits.
Suppliers, Trust Center, AI assistance
Supplier assessment, a public trust page for your customers, sign-in with your company account (single sign-on), AI assistance without passing data to US providers.
More on individual areas:ISMS management,multi-framework assessments,supplier & vendor portal,Trust Center,enterprise authentication andAI automation.
Services outside the platform
The platform fee covers software, hosting, support and updates. Work in your environment or on your content is billed separately. The following prices are guide values so you can get a picture in advance. You receive the binding price in your quote after a short preliminary review.
Setup
Platform provisioning, roles and permissions, sign-in with your company account, basic configuration of your standards. Also a one-off import of your existing data (assets, risks, controls, documents) via our import templates and a briefing of the key owners.
approx. €1,200 / 1,900 / 2,900one-off, depending on package
Integration from the catalogue
We set up an existing integration for you, for example Microsoft 365, Jira or your cloud environment.
approx. €600 per integrationone-off, optional
Connection to your SOC or SIEM
Connection to your Security Operations Center (SOC) or your central system for security events (SIEM), including coordination with its operator.
from approx. €2,400one-off, optional
Collectors in your own network
Installation and configuration of collectors that feed information from your internal network to the platform.
from approx. €1,800one-off, optional
Custom integration
Development and setup of an integration with a system that is not yet in the integration catalogue. Adjustments after later changes to the connected system are billed by effort.
approx. €6,000–12,000one-off, optional
Your own catalogue
Building a requirements catalogue for assessments without a fixed standard, for example for a sector regulator.
€150 / hourby effort
User training
Online training for your team, up to 12 participants, 4 hours.
approx. €900per session
Operation in your own data centre
Installation in your environment or private cloud, also without an internet connection. Ongoing support in addition to the platform fee.
from approx. €10,000 / yearrecurring, optional
Extended service commitment
99.999% availability and a 30-minute response time for critical incidents.
approx. €10,000–20,000 / yearrecurring, optional
You can also set up integrations from the catalogue yourself or with your IT service provider. The guides for that are free of charge. All prices excl. VAT.
Total cost over three years
The free TCO calculator compares SecTepe.Core at list prices with a platform plus consulting fee and with software priced per user. It also names the right plan for your headcount.
Open the TCO calculatorEstimate the return on security
The security ROI calculator works out the financial value of your security solutions. That helps you justify your security budget with numbers.
Open the security ROI calculatorFAQ on pricing and plans
- Why only by size?
- As headcount grows, so do assets, processes, suppliers and users, and with them data volume and support effort. Which standards you implement does not change the price.
- How is headcount counted?
- All employees within the scope of your management system, self-declared when the contract is signed. Several legal entities are counted together.
- What happens when we grow?
- The new price applies only from the next contract renewal. Nothing changes during the current term.
- What does support include?
- Questions about the platform, bug fixes and all updates. Questions about your management system itself, such as risk assessment, are consulting.
- We already work with SecTepe as consultants. What applies then?
- Talk to us. For customers we already advise, we prepare a combined quote for platform and consulting.
- Are the prices for additional services binding?
- No, they are guide values for orientation. The effort for integrations depends on your environment. After a short preliminary review you receive a binding price.
- How long is the contract term?
- Twelve months with annual billing, then renewed for twelve months at a time unless you cancel.
For what SecTepe.Core does in practice, seeISO 27001 software andNIS2 software.
How we work with you
We see every project as a long-term partnership, not a one-off delivery. Our approach has four clear phases. So you always know what happens next, who is in charge of what and which results to expect.
1. Free initial conversation
We learn about your starting point, your goals and your constraints. In 30 to 45 minutes we check whether our offer fits your situation. We outline possible paths and answer your questions, with no obligation.
2. Structured assessment
We record the current state: technical, organizational and regulatory. You get a prioritized assessment that names strengths, gaps and areas for action. It is the basis for a reliable offer.
3. Delivery with a dedicated lead
An experienced lead guides you through the delivery. You get clear milestones, transparent planning of effort and cost, and a weekly status. All results are documented and belong to you.
4. Continuous operations & review
After the project, we stay with you in operations. This includes managed services, regular reviews and tracking of open actions. We also reach out when new threats, new rules or technology changes come up.