Standard
up to 49 employees
Small firms, medical practices, law firms, trades
€499 / month
excl. VAT · billed annually, €5,988 per year
One-off setup including data migration
approx. €1,200
SecTepe.Core
Pricing and plans
Every feature for everyone. The price depends only on your size.
No feature tiers, no per-user pricing, no surcharge per standard. Every organisation gets the full scope of SecTepe.Core. Work that falls outside the platform is listed further down with guide prices.
Plans by company size
In every plan:
- Every feature
- No limit on users
- All standards and your own catalogues
- Support, bug fixes and updates
- Hosted only in the EU
Request a demo or a call
Premium
50 to 249 employees
Mid-sized firms, often in scope of NIS2 as an important entity
€999 / month
excl. VAT · billed annually, €11,988 per year
One-off setup including data migration
approx. €1,900
Corporate
250 to 999 employees
Larger mid-sized firms, hospitals, utilities, housing firms
€1,690 / month
excl. VAT · billed annually, €20,280 per year
One-off setup including data migration
approx. €2,900
Enterprise · from 1,000 employees, corporate groups and public authorities
Individual quote, same feature set. Guide value from €2,490 per month.
What counts is the number of employees within the scope. You state it yourself when you sign. If you grow past a threshold, the new price applies from the next contract renewal. All prices excl. VAT, billed annually.
Included in every plan
Whether 20 or 900 employees: you use the same platform with every area.
Information security
ISO 27001, NIS2 (the EU cyber rules), BSI IT-Grundschutz (from the German federal IT security office), BSI C5 for cloud services, SOC 2 and all other standards. Plus your own catalogues for checks with no fixed standard.
Industry standards
B3S for hospitals and health care. DORA (the EU rules for banks and the finance sector). TISAX (the car industry check). PCI DSS (the card payment standard).
Data protection
Records of processing (RoPA), technical and organisational measures (TOMs), impact assessments (DPIA), the rights of data subjects, data breaches, processors.
Business continuity and crisis management
Business impact analysis (BIA), scenarios, crisis team, emergency drills, ISO 22301.
Audits, reports and notifications
Plan audits, give access to outside auditors, write reports for management and the board, notify authorities, run a whistleblower portal.
Security operations
Track and fix weak spots, steer pen tests (simulated attacks), watch for leaked logins and open attack surface, run phishing tests.
AI and product regulation
EU AI Act (the EU rules on AI) with a list of your AI systems. Cyber Resilience Act (the EU rules for software and connected devices) with a software bill of materials (SBOM).
Quality, environment, energy
ISO 9001, ISO 14001 and ISO 50001 in one joint management system. One shared standard structure, combined audits.
Suppliers, Trust Center, AI assistance
Rate your suppliers, a public trust page for your customers, sign-in with your company account (single sign-on), AI help that sends no data to US providers.
More on individual areas:ISMS management,multi-framework assessments,supplier & vendor portal,Trust Center,enterprise authentication andAI automation.
Services outside the platform
The platform fee covers software, hosting, support and updates. Work in your environment or on your content is billed on its own. The prices below are guide values to give you a first picture. Your quote states the firm price, after a short check up front.
Setup
We set up the platform. We set roles and rights, sign-in with your company account and the base settings for your standards. Once, we load your data via our import templates. That covers assets, risks, controls and documents. Last, we brief the key owners.
approx. €1,200 / 1,900 / 2,900one-off, depending on package
Integration from the catalogue
We set up a ready-made integration for you. For example Microsoft 365, Jira or your cloud.
approx. €600 per integrationone-off, optional
Connection to your SOC or SIEM
We link the platform to your SOC, the team that watches your security. Or to your SIEM, the central system for security alerts. We work this out with the team that runs it.
from approx. €2,400one-off, optional
Collectors in your own network
We put collectors in your internal network. They pick up data there and send it to the platform.
from approx. €1,800one-off, optional
Custom integration
We build a link to a system that is not yet in the catalogue. If that system changes later, we bill the changes by effort.
approx. €6,000–12,000one-off, optional
Your own catalogue
We build a list of requirements for checks with no fixed standard. For example, for the regulator of your sector.
€150 / hourby effort
User training
Online training for your team, up to 12 people, 4 hours.
approx. €900per session
Operation in your own data centre
We install the platform on your site or in your private cloud, even with no internet link. Ongoing support is billed on top of the platform fee.
from approx. €10,000 / yearrecurring, optional
Extended service commitment
Higher availability, set out in the contract. For critical faults, we respond within 30 minutes.
approx. €10,000–20,000 / yearrecurring, optional
You can also set up integrations from the catalogue yourself or with your IT service provider. The guides for that are free. All prices excl. VAT.
Total cost over three years
The free TCO calculator shows the total cost. It compares SecTepe.Core at list prices with a platform plus consulting fee and with software priced per user. It also names the right plan for your headcount.
Open the TCO calculatorEstimate the return on security
The security ROI calculator estimates what your security is worth in money. That helps you back up your budget with numbers.
Open the security ROI calculatorFAQ on pricing and plans
- Why only by size?
- As your headcount grows, so do your assets, processes, suppliers and users. So do the amount of data and the support work. Which standards you use does not change the price.
- How is headcount counted?
- We count all staff your management system covers. You state the number yourself when you sign. If you have several legal entities, we add them up.
- What happens when we grow?
- The new price only applies when the contract next renews. Until then, nothing changes.
- What does support include?
- Questions about the platform, bug fixes and all updates. Questions about your management system itself are consulting. One example is how to rate your risks.
- We already work with SecTepe as consultants. What applies then?
- Talk to us. If we already advise you, we make you one joint quote for platform and consulting.
- Are the prices for extra services binding?
- No, they are guide prices. How much work a link takes depends on your setup. After a short check up front, you get a firm price.
- How long is the contract term?
- Twelve months, billed once a year. Unless you cancel, it renews for twelve months at a time.
For what SecTepe.Core does in practice, seeISO 27001 software andNIS2 software.
How we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.