Snapshot 38459
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to content TRUSTWin-the-Deal Security Proof Answer any security questionnaire and share a trust profile — in a week, not a quarter. Built for SaaS, agencies, and B2B SMBs that must prove security to close deals — your documents generated, your safeguards monitored, and the evidence kept. Every status comes from a check we actually ran. Get my program — $999/yr Free 2-minute readiness check Self-service $999/yr: weekly external scan, daily dark-web check, evidence vault. Run my free scan · Tour the live demo TRUST readiness — sample readoutwk 1 60% READY Elements in place 3 of 5 A typical first week — the platform works the pending items with you. Information security policyIn place Access control policyIn place Incident response planIn place Vendor risk managementPending External validation (clean scan)Pending SOC 2 (readiness)NIST CSF This is a sample — click to explore the real portal on demo data. No signup. → The problem Enterprise customers and partners sending security questionnaires before they'll buy From free scan to finished program Where this path comes from The same path on every industry page — and each step names the engine that runs it and when. That comes from the capability catalog our tests check, not copy written for this page. 01Day one · no extra setup Public security grade DNS, TLS, email authentication, and HTTP headers — the same free scan, kept on a cadence. Engine: RECON Before you pay: run the free public scan or the readiness check — no signup. 02Minutes after checkout Your written program Framework policies generated for your firm, not a static template. Self-attested on the face of every document. Engine: GUARDIAN 03Day one Audit-ready evidence vault SHA-256 sealed records, readiness matrix for your framework, and a shareable auditor register. Engine: CHRONICLE 04Day one The registers a real program runs on People, risks, incidents, data inventory, training, and policy acknowledgments — in the portal, not a binder. Engine: COMPLY 05 · MonitoringIncluded on Protected Kept true after day one Sign-in risk or uptime, watched continuouslyVIGIL Dark-web monitoringSHADOW Threat intel on your stackFALCON 06 · On requestSigned authorization required Deeper testing, only when you say so Staff phishing simulationPHANTOM Authorized vulnerability scanBREACH Authorized penetration testAPEX$499 per authorized run · never auto-runs TRUST · Win-the-Deal Security Proof Protected — $999/yr Steps 01–04 ship on day one, and monitoring is included. How this price holds for a larger practice, and the managed option The same automated engine, the same simple annual price, for every firm in this program — no custom quote, no sales call. Larger practices step up to a published band, never a negotiation. Managed Safeguards from $1,999/yr when you want an advisor to review your program and evidence package; the review shows as signed off in your portal only once the advisor has signed it, and your attestation stays self-attested. Compare firm sizes → Documents generated for you 5 documents Written for your firm, refreshed annually — never a static template. Information Security Policy Generated · refreshed annually Acceptable Use Policy Generated · refreshed annually Incident Response Plan Generated · refreshed annually Access Control Policy Generated · refreshed annually Vendor Management Policy Generated · refreshed annually What your readiness view tracks 5 elements Element by element, computed from what is actually in place. Information security policy Access control policy Incident response plan Vendor risk management External validation (clean scan) Your deliverable: Security Posture & Controls Summary — self-attested, and it says so. On managed plans an advisor also reviews the evidence package behind it. What actually runs for this program Every task in the program, and when each one runs Buyer outcomes first; the engines behind them are named below. Included means it ships on Protected. Authorized pentesting is never bundled — it is a signed, pay-per-use engagement. Day one After checkout, with no extra product setup. Public security gradeDNS, TLS, email authentication, and HTTP headers — the same free scan, kept on a cadence.Day one · no extra setup Your written programFramework policies generated for your firm, not a static template. Self-attested on the face of every document.Minutes after checkout Audit-ready evidence vaultSHA-256 sealed records, readiness matrix for your framework, and a shareable auditor register.Day one The registers a real program runs onPeople, risks, incidents, data inventory, training, and policy acknowledgments — in the portal, not a binder.Day one Included on Protected Monitoring that keeps the documents true. Dark-web monitoringDaily Have I Been Pwned check of your contact address and the staff addresses on your account; a new exposure raises an alert.Included on Protected · Have I Been Pwned Threat intel on your stackCISA Known Exploited Vulnerabilities, refreshed daily and filtered to the technology profile on your account — we alert on what matches it, never on the raw feed. With no profile on file we raise a task asking for one rather than passing the raw feed off as filtered.Included on Protected On request — never implied as included Deeper validation when you authorize it. Authorized penetration test — $499 per authorized runPensar Apex, only inside a signed testing window, with a kill switch. Never auto-runs. Never implied as included.Pay-per-use · signed authorization required Staff phishing simulationQuarterly campaign against your people register, on Practice and Multi-Site. The add-on buys one campaign an operator launches for you, not a place on the quarterly schedule.Practice plan and above Authorized vulnerability scanDeeper external checks than the free scan. On Practice and Multi-Site, or as an add-on.Practice plan and above Pricing — every number on this page One public self-serve offer, provisioned automatically with no sales call. Annual plan Protected $999 / year Generated policies · weekly external scanning · daily dark-web monitoring · threat alerts · evidence vault. Get my program Portal and policies provision after paymentPriced by firm scope, never per seatCheckout via Stripe What we never claim The self-service plan is self-attested and says so on every document. No certification, no guaranteed outcome, no legal advice, and no active testing without your signed authorization. Want eligible work done and an advisor’s sign-off? Managed Safeguards from $1,999/yr → What you get — and what runs it Everything your TRUST program does — and what produces it Open the roster: all eleven engines, grouped by when they run Five land from day one with zero configuration. Three are included on Protected. Three never run without your signed authorization on file. The roster below is pinned by a test in our own code (tests/test_agent_roster.py): eleven named engines, and nothing in the first two groups may say “penetration test”. Each engine listed runs from a scheduled job or a portal route; an engine whose executor is still a placeholder is left off — this is what runs, not what is planned. Runs from day one Zero-config after checkout. Public security grade External Attack Surface Scanner DNS, TLS, email authentication, HTTP headers, open ports, and technology fingerprinting — kept on a cadence. RECON “I see what hackers see.” Your written program AI Virtual CISO & GRC Engine Generates your framework policies and keeps the readiness matrix current as the program changes. GUARDIAN “I build your security program while you run your business.” Audit-ready evidence vault Reporting & Intelligence Engine SHA-256 sealed evidence vault, auditor-shareable register, and monthly posture recap. CHRONICLE “I tell the story of your security journey.” The registers a real program runs on Compliance Registers Engine People, risks, incidents, data inventory, training, and policy acknowledgments — live registers in your portal from day one, not a binder. COMPLY “I keep the records a real program runs on.” Incident playbooks, ready before you need one Incident Response Engine Seven pre-built response playbooks plus a general one for anything else, surfaced on every incident you log in the portal incident register — with a dated timeline and the IRS, state, FTC, client, and insurer reporting checklist. DISPATCH “I hand you the playbook before you need it.” Included on Protected Some engines need a platform key; those show as pending until enabled — never as Active. Sign-in risk or uptime, watched continuously Continuous Monitoring Agent Microsoft 365 sign-in risk and impossible-travel checks every six hours when your tenant is connected; website uptime and SSL checked daily otherwise. VIGIL “I watch while you sleep.” Dark-web monitoring Dark Web & Credential Intelligence Agent Daily Have I Been Pwned check of your contact address and the staff addresses on your account; a new exposure raises an alert. SHADOW “I find your secrets before criminals do.” Source: Have I Been Pwned Threat intel on your stack Threat Intelligence Agent CISA Known Exploited Vulnerabilities, refreshed daily and filtered to the technology profile on your account — we alert on what matches it, never on the raw feed. With no profile on file we raise a task asking for one rather than passing the raw feed off as filtered. FALCON “I tell you which vulnerabilities matter to YOUR stack.” On request — gated by your signed authorization Never auto-runs. Never implied as included. Staff phishing simulation Phishing Simulation & Security Awareness Agent Quarterly phishing campaign against your people register. Practice plan and above only — and only with your signed active-testing authorization on file and a staff roster to send to. PHANTOM “I test your people before hackers do.” Authorized vulnerability scan Authorized Vulnerability Scanner Deeper external checks than the free scan, monthly. Practice plan and above, or as an add-on — and only with your signed active-testing authorization on file. BREACH “I probe deeper than the free scan does.” Authorized penetration test Authorized Penetration Testing Engine Pensar Apex, only inside a signed testing window, with a kill switch. Never auto-runs, never implied as included. APEX “I attack you the way a real adversary would — only when you say so.” $499 per authorized run Before you buy — the straight answers What exactly do I get? On day one: your portal, 5 generated documents (Information Security Policy, Acceptable Use Policy, Incident Response Plan, and more), a SOC 2 (readiness) readiness view tracking 5 elements, your first external scan with a scored posture, an evidence vault, and the registers a real program runs on — people, risks, incidents, data inventory, training, policy acknowledgments. Plus your deliverable: the Security Posture & Controls Summary. Is this a certification? This is a self-attested security program with live evidence behind it — not a certification, and we never imply one. Every document says exactly what it is. How fast am I actually live? The portal provisions the minute payment completes, policies start generating immediately, and your first external scan starts within a minute of payment. No calls, no onboarding project — and you can verify that claim in the live demo before paying a cent. When should I choose the managed line instead? When you want CyberComply to complete the eligible work for you, an advisor to review your evidence package, and a quarterly program review — you still approve business and legal decisions. That is Managed Safeguards, from $1,999/yr. Self-service runs the same engine without the human, and every self-serve document says self-attested on its face. Your next step Start with the free check, or go straight to your price — $999/yr self-service, 14-day refund window. Get my program — $999/yrFree 2-minute readiness check