Simple, transparent pricing
Choose the plan that fits your CRA compliance needs. Every plan includes European data residency and the full Academy.
Founders
For founders and small makers: the full toolkit for one product.
€19.99/mo
- 1 product · 2 users
- Everything in Free, plus:
- Unlimited SBOM uploads + vulnerability scanning
- Declaration of Conformity + end-user info PDFs
- Incident reporting (24h / 72h / final report)
- Weekly vulnerability monitoring
- 90-day activity log · email support
- 50 AI Copilot messages / month
Most Popular
Professional
For small teams shipping 1–3 products.
€59/mo
- 3 products · 3 users
- Everything in Free, plus:
- Unlimited SBOM uploads + vulnerability scanning
- Declaration of Conformity + end-user info PDFs
- Incident reporting (24h / 72h / final report)
- 90-day activity log
- Email support (48h response, business days)
- 100 AI Copilot messages / month
Business
For manufacturers with multiple product lines and an active compliance team.
€219/mo
- 15 products · 10 users
- Everything in Professional, plus:
- Daily continuous vulnerability monitoring
- Public PSIRT page + security.txt
- Full document template library
- API access (120 req/min)
- Priority support (8h, business hours) + guided onboarding
- 500 AI Copilot messages / month
AI Boost add-on
Add 1200 extra Copilot messages every month to any paid plan for €49/month.
Need more than Business?
For large portfolios, regulated verticals, SSO, parent-child groups, or a custom SLA, we build a plan and price around your requirements.
- Unlimited products and team members
- SSO / SAML · SCIM provisioning · parent-child org linking
- Dedicated CSM, guided onboarding, and a custom MSA
Compare plans
Every feature, across every tier.
Feature
Free
Founders
Professional
Business
Limits
Products
1
1
3
15
Team members
1
2
3
10
SBOM uploads
—
∞
∞
∞
Activity log retention
30 days
90 days
90 days
∞
CRA compliance
CRA scope assessment wizard
Product classification (default / important / critical)
Annex I compliance checklist
Conformity assessment (Module A / B+C / H)
Entity-role obligations (manufacturer / importer / distributor / AR)
Notified-body tracking
SBOM + vulnerabilities
SBOM upload (CycloneDX + SPDX)
—
Component catalog
—
Vulnerability scanning (OSV.dev)
—
CISA KEV flagging
—
CVSS severity classification
—
Triage workflow + MTTR tracking
—
Actively-exploited flag
—
EPSS exploit-probability scores
—
First-class VEX status + justification
—
—
—
Vendor CSAF ingest (Siemens ProductCERT)
—
—
—
OT scanner CLI (CODESYS / Siemens export)
—
Continuous monitoring frequency
On-demand
Weekly
Weekly
Daily
VEX / CSAF export
—
—
—
Documents + PDFs
Declaration of Conformity PDF
—
End-user information sheet PDF (Annex II(3))
—
Document templates library
—
Full library
Full library
Full library
Technical file builder
—
AI assistant (Copilot)
Copilot messages / month
10 / mo
50 / mo
100 / mo
500 / mo
AI drafting (DoC, incident, threat model)
—
AI Boost add-on
—
+1200/month (€49/month)
+1200/month (€49/month)
+1200/month (€49/month)
Notifications & alerts
Notification topics
None
Important
Important
Important
Incident management
Incident reporting (Article 14)
—
24h / 72h / final-report deadline tracking
—
Incident report PDF exports
—
SRP-ready packages (JSON + per-stage PDF)
—
—
—
CVE linkage from incidents
—
Public security (PSIRT)
Public PSIRT page (/security/…)
—
—
—
security.txt (RFC 9116)
—
—
—
Public vulnerability-report intake
—
—
—
PSIRT triage workflow
—
—
—
Public trust page
—
—
—
Auditor share links
—
—
—
Product lifecycle
Release tracking + CVE-fixed mapping
Support-period tracking
Update-channel tracking
Supplier due diligence (Art. 13(6))
—
ATT&CK for ICS + EMB3D catalogs
Training + help
Academy (26 CRA lessons)
Full access
Full access
Full access
Full access
Quizzes + PDF certificates
Team progress tracking
—
CSV export of team progress
—
By-screen lesson recommendations
CRA glossary (50+ terms)
Data + exports
GDPR data export (Art. 20)
GDPR deletion rights (Art. 17)
Activity log CSV export
—
Data residency
Europe
Europe
Europe
Europe
Billing currency
EUR
EUR
EUR
EUR
Integrations
REST API access
—
—
—
Webhooks
—
—
—
SSO / SAML
Enterprise
SCIM provisioning
Enterprise
Slack slash commands
—
—
—
GitHub Action (SBOM upload)
—
—
—
Jira issue creation
—
—
—
Two-way Jira / ServiceNow sync
Coming soon
Coming soon
Coming soon
Coming soon
Security
Two-factor authentication (TOTP)
Role-based access (5 roles)
Multi-admin deletion confirmation
Audit log
Row-level security (org isolation)
Abuse rate-limiting on public endpoints
Support
Support channel
Community
Email
Email
Priority email + live chat
Onboarding
Self-serve
Self-serve
Self-serve
1h guided call