Pricing
Transparent. No surprises.
All plans include a 14-day free trial — your card isn't charged until it ends, cancel any time before then at no charge.
Every asset, cloud account, identity, and device — analyzed, prioritized, and fixed. 14-day free trial on every plan.
Free scan
$0
forever
- 1 cloud or Microsoft 365 connection (read-only)
- Security score with weekly rescans
- Every finding counted by severity
- Top 3 findings fully explained
- Asset inventory for the connected account
- Self-serve support center
- No card, no trial clock — upgrade whenever you're ready
Starter
$199
billed monthly
- 1 cloud account (AWS, Azure, or Google Cloud) + Microsoft 365
- Single user
- 1 identity provider — Entra ID, Okta, JumpCloud, OneLogin, Ping, or Google Cloud Identity
- Cybermatic agents included — device, mobile & network discovery
- Weekly automated scans
- Up to 150 assets
- SOC2 documentation: 6 docs
- Cybermatic Copilot
- Executive reports
- Email support
Growth
$499
billed monthly
- 5 cloud & M365 accounts (AWS, Azure, GCP, Microsoft 365)
- 3 users: 1 admin + 2 view-only teammates
- 3 identity providers — Entra ID, Okta, JumpCloud, OneLogin, Ping & Google Cloud Identity
- 2 security & asset platforms — Lansweeper, runZero, Microsoft Defender, Rapid7 & Qualys
- Cybermatic agents included — device, mobile & network discovery
- Daily automated scans
- Up to 450 assets
- All frameworks: SOC2, ISO 27001, HIPAA, NIST
- Auto remediation code
- Questionnaire Copilot (36/yr) & public Trust Center
- API access
- Priority support
Business
$999
billed monthly
- 10 cloud & M365 accounts (AWS, Azure, GCP, Microsoft 365)
- 10 users: 3 admins + 7 view-only teammates
- 7 identity providers — Entra ID, Okta, JumpCloud, OneLogin, Ping & Google Cloud Identity
- 5 security & asset platforms — Lansweeper, runZero, Microsoft Defender, Rapid7 & Qualys
- Cybermatic agents included — device, mobile & network discovery
- Daily automated scans
- Up to 990 assets
- All frameworks: SOC2, ISO 27001, HIPAA, NIST
- Auto remediation code
- Questionnaire Copilot (250/yr) & Trust Center with NDA document vault
- API access
- Priority support
- Guided Deployment ($2,500 value) included with annual billing
Enterprise
Custom
tailored to your environment
- Unlimited cloud accounts
- Up to 10 admins + unlimited viewers
- Unlimited identity providers & security platforms
- Cybermatic agents included — device, mobile & network discovery
- Unlimited assets
- Real-time continuous scanning
- Custom compliance frameworks
- Custom scale — accounts, assets, and integrations sized to you
- Dedicated success manager
- 99.9% uptime SLA in writing
- MSA, DPA, and BAA
- Invoicing and PO terms
- Custom retention
- Quarterly Security Reviews included
- Guided Deployment included
- Early access to new features
- SAML single sign-on
- White-glove onboarding
Not ready for a trial? Run a free security scan — one cloud or Microsoft 365 connection, weekly, no card.
Professional services
Expert implementation. A security professional on your calendar.
Guided deployment accelerates time-to-value, reduces configuration mistakes, and establishes a strong operational baseline from day one. Purchase from any product's Settings page.
Quick Start
$750
one-time
Kickoff call · one cloud or Microsoft 365 environment plus identity connected · agent deployment guidance · initial configuration.
Purchase in SettingsGuided Deployment
$2,500
one-time · included with annual Business & Enterprise
Full standard deployment (~6–8 hours): up to 3 cloud/identity integrations, endpoint rollout scripts and plan, EPP policy configuration, up to 5 SIEM/syslog sources, one compliance framework baseline, initial Insurance Readiness and board reports, 30-day review.
Purchase in SettingsAdvanced Deployment
from $5,000
quoted
Complex, multi-site, or multi-cloud deployments, migrations, large SIEM environments, and custom integrations.
Talk to usQuarterly Security Review
$950
per review · $3,000/yr prepaid · included with Enterprise
A security professional reviews your data and delivers a written Quarterly Security Review: score trend, top risks, coverage gaps, compliance and insurance readiness, and a 90-day action plan. Growth, Pro, and Business.
Purchase in SettingsServices are purchased inside your workspace (sign in first) so we can schedule against your real environment — checkout is by Stripe, one click from the Settings page. Not a customer yet? Start a free trial, then add a service.
Questionnaire Copilot — drafted answers to customer security questionnaires from live evidence — is included on Growth (36/yr), Pro (100/yr), and Business (250/yr) plans; Enterprise is fair-use unlimited.
Common questions
- Do I need a credit card to start the trial?
- Yes — a card is required to start the 14-day free trial, but it isn't charged until the trial ends, and you can cancel any time before then from Settings → Billing at no charge.
- What access does Cybermatic need?
- Read-only. You deploy a CloudFormation template (or equivalent for Azure/GCP) that grants read-only API access — we never get write access to your cloud. Cybermatic's own agents are report-only: they send device posture in, and nothing reaches back into your devices.
- Are the Cybermatic agents included?
- Yes — all three, on every plan: the Device Agent for Windows, macOS, and Linux, the Device Trust app for phones and tablets, and the network Discovery Agent. Devices they report, like all assets, count toward your plan's asset limit.
- Can I change plans later?
- Yes — manage your plan, payment method, and invoices any time from Settings → Billing in the portal. Upgrades take effect immediately; downgrades at the next billing cycle. Payments are processed securely by Stripe.
- How is payment handled?
- Subscriptions are processed by Stripe. We never see or store your card details.
- Can my team share one workspace?
- Yes. Growth includes 3 users — 1 administrator and 2 view-only teammates who can see everything and generate reports but can't change connections, assets, users, or billing. Enterprise includes up to 10 administrators and unlimited viewers. Invited teammates sign in with their own credentials and are never asked for a card — access rides on the workspace subscription.
Need custom terms? Contact sales.