XeeSecurityoffensive · iso 27001
Sign in Start free
Home / pricing

Simple pricing, in Rand

Every plan includes all 93 Annex A controls, the risk register, the Statement of Applicability, policies, assets, suppliers, training and a public Trust Center. Penetration testing is quoted per engagement. No lock-in — cancel anytime.

Free
R0/mo

Set up your ISMS and see where you stand.

  • All 93 Annex A controls
  • Risk register & Statement of Applicability
  • Policies, assets, suppliers, training
  • Findings, audits & compliance calendar
  • Public Trust Center
  • Up to 3 users
Start free
MOST POPULAR
Growth
R499/mo

For teams working toward certification.

  • Everything in Free
  • Unlimited users
  • Framework crosswalk — POPIA, SOC 2, NIST, CIS, GDPR
  • 1 connected integration for verified evidence
  • Board, IT, developer & implementer reports
  • Questionnaire auto-answer
Choose Growth
Scale
R1499/mo

Multi-team programmes and ongoing testing.

  • Everything in Growth
  • Unlimited integrations
  • Auditor pack export
  • White-label Trust Center subdomain
  • AI-guided, expert-supervised penetration testing
  • SLA-backed priority support
Choose Scale
plan comparison

What changes between tiers

Plan limits are enforced server-side, not hidden in the interface — a boundary here is a real boundary.

 FreeGrowthScale
93 Annex A controls & SoA✓✓✓
Risk register & treatment plans✓✓✓
Policies, assets, suppliers, training✓✓✓
Findings, audits & management review✓✓✓
Public Trust Center✓✓✓
Users3UnlimitedUnlimited
Framework crosswalk (5 frameworks)—✓✓
Connected integrations—1Unlimited
Auditor pack export——✓
White-label Trust Center subdomain——✓
Priority support with an SLA——✓
penetration testing

Quoted per engagement

Every environment is different, so we price each test to its scope rather than a fixed tier. Tell us what's in scope and we'll send a Scope of Work and a quote — including VAT, payable via PayFast.

  • Fixed price agreed before any testing begins
  • Scoped, monitored and signed off by a security tester
  • Signed authorisation, indemnity and rules of engagement
  • Full report with remediation and a re-scan
  • Findings mapped into your ISO 27001 evidence

Request a quote

example quoteZAR
External web application testR 18,000
Authorisation & reportingincluded
Re-scan after remediationincluded
VAT (15%)R 2,700
TotalR 20,700

Illustrative only. Your quote depends on scope.

Two ways the price comes down. Refer another company and you earn account credit applied to your next charge the moment they upgrade. And if you bring customers regularly, the partner programme pays 20–30% recurring commission instead.

Pricing questions

Can I switch plans or cancel later?
Yes — change plan or cancel anytime from your account. Cancelling sets the subscription to end at the close of the current period, and you can resume before then without losing anything.
How does billing work?
Subscriptions are billed monthly in Rand through PayFast as a recurring subscription, with a VAT receipt emailed on each successful charge. Penetration-test engagements are invoiced per engagement with a SARS-format VAT invoice.
What happens if a payment fails?
It retries and you're notified. If it keeps failing the account escalates and is suspended after the fourth attempt — and reactivates automatically the moment a payment goes through. Your data is never deleted for a failed payment.
Is the free plan a trial?
No. Free is a real plan with the full 93-control register, risk register, Statement of Applicability, policies, assets, suppliers and a Trust Center. It's capped at three users and doesn't include the framework crosswalk or connected integrations.
Do I need the platform to book a pen test?
No. You can book a one-off penetration test on its own. If you also use the platform, findings flow straight into your ISO 27001 evidence against the controls they break.
Is the test actually run by a person?
Yes. The tooling is AI-guided, which is what makes it fast and thorough — but a qualified security tester scopes every engagement, monitors the run while it happens, triages the findings and signs the report before it reaches you. Nothing intrusive runs without a human approving it first.
Do you offer discounts for consultants running multiple clients?
That's what the partner programme is for — recurring commission on every client subscription you bring, rising with volume. See the tiers.

Start on Free.
The 93 controls are already there.

Start freeSee everything included