Simple, transparent pricing
First scan free — no credit card. Paid plans add continuous monitoring, evidence, and more targets as your compliance program grows.
Free
See it
Run your first scan and see real findings.
Start free- 1 scan target (repo or database)
- On-demand scans
- Findings mapped to SOC 2 / HIPAA + 12 more frameworks
- Posture dashboard
- KGAI Advisory Review (Compliance preview)
Starter
Get audit-ready
or $19.69/mo billed annually
For small teams building toward SOC 2 / HIPAA.
Get startedEverything in Free, plus
- Up to 5 scan targets
- Continuous / scheduled scans
- Full KGAI Advisory Board (Compliance, CSO, CTO, CFO) + PDF export
- Evidence & downloadable reports
- Risk register
- Penetration-test tracker (SOC 2 / HIPAA evidence)
- Developer Tools — issues / epics / tickets + import
- Auto-mapped architecture diagram
- Read-only MCP / API key
- Daily digest
- Security-questionnaire automation (50 answers/mo)
- Public Trust Center (branded)
Growth
Most popularProve it & automate
or $84/mo billed annually
For growing teams proving posture to customers.
Get startedEverything in Starter, plus
- Unlimited scan targets
- Cloud (AWS) posture scanning
- Web-app scanning
- BAA / DPA / NDA tracker
- Unlimited security-questionnaire answers
- White-label your Trust Center (no “Powered by KollGuard” badge)
- Vendor risk
- Agent Watch
- Closed-loop remediation
- Write-scoped MCP keys
- RAG knowledge base
- AI System Register + EU AI Act classification
- Physical AI — embodied-AI compliance register (robots, cobots, AMRs, drones)
Scale
Scale past the gap
or $339/mo billed annually
For Series A–B teams that outgrew Growth but aren’t an Enterprise contract yet.
Get startedEverything in Growth, plus
- SSO / SAML
- Priority support
- Full AI-governance suite
- Unlimited everything Growth meters
Enterprise
Pass procurement
Growth-stage & security teams. Scales per-seat / per-entity from the $750 floor toward Strategic.
Contact usEverything in Scale, plus
- SCIM provisioning
- Branded subdomains
- DPA / BAA with KollGuard
- SAML/SCIM, SLA
- Named support with an SLA
Strategic
Coming soonGovernment & large multi-entity orgs
Multi-department State & Federal government, and organizations with many custom requirements. Per-entity / per-division pricing.
Contact usEverything in Enterprise, plus
- Per-entity / per-division deployment
- Dedicated onboarding & success
- Backed by KollGuard’s own SOC 2 Type II
- Custom annual contract
Need something tailored? Talk to us.
Compare plans
| Feature | Free | Starter | Growth | Scale | Enterprise | Strategic |
|---|---|---|---|---|---|---|
| Scanning | ||||||
| Scan targets (repos / databases) | 1 | 5 | Unlimited | Unlimited | Unlimited | Unlimited |
| On-demand scans | ||||||
| Continuous / scheduled scans | ||||||
| Cloud (AWS) posture scanning | ||||||
| Web-app scanning | ||||||
| Compliance & evidence | ||||||
| SOC 2 / HIPAA + 12 more framework mapping | ||||||
| Posture dashboard | ||||||
| KGAI Advisory Review | Compliance preview | Full board + PDF | Full board + PDF | Full board + PDF | Full board + PDF | Full board + PDF |
| Evidence & downloadable reports | ||||||
| Risk register | ||||||
| Penetration-test tracker + request | ||||||
| Quantum Readiness (PQC assessment) | Preview | Preview | Preview | Preview | Preview | Preview |
| BAA / DPA / NDA tracker | ||||||
| Security-questionnaire automation | 50/mo | Unlimited | Unlimited | Unlimited | Unlimited | |
| Public Trust Center / shareable posture | Branded | Unbranded | Unbranded | Unbranded | Unbranded | |
| Vendor risk | ||||||
| Developer & agent tooling | ||||||
| Developer Tools (issues / epics / tickets + import) | ||||||
| Auto-mapped architecture diagram | ||||||
| Daily digest | ||||||
| MCP / API key | Read-only | Write-scoped | Write-scoped | Write-scoped | Write-scoped | |
| Agent Watch | ||||||
| Closed-loop remediation | ||||||
| RAG knowledge base | ||||||
| AI System Register + EU AI Act classification | ||||||
| Physical AI — embodied-AI compliance (EU Machinery Reg, PL/SIL, safety case) | ||||||
| Scale & enterprise | ||||||
| SSO / SAML | ||||||
| Priority support | ||||||
| SCIM provisioning | ||||||
| Branded subdomains | ||||||
| DPA / BAA with KollGuard | ||||||
| SLA | ||||||
| Per-entity / per-division deployment | ||||||
| Backed by KollGuard’s own SOC 2 Type II | ||||||
included · not included. KollGuard produces auditor-ready evidence; the SOC 2 / HIPAA audit itself is engaged separately with a CPA firm.
Frequently asked
- Is the first scan really free?
- Yes. The Free plan gives you one scan target (a repo or a database) with on-demand scans, real findings, and mapping to SOC 2 / HIPAA + 12 more frameworks — no credit card. Continuous monitoring, evidence export, and more targets start on Starter ($29/mo, or $19.69/mo billed annually).
- Do you offer a free trial?
- Better than a trial — the Free plan is permanently free for one target. You see real findings before paying. Paid plans add continuous scans, evidence export, and more targets.
- Why $19.69?
- A deliberately small number — the annual-billing price for Starter (list is $29/mo). It reflects what we think dev-first compliance tooling should cost: orders of magnitude under the $7,500+/yr platforms aimed at funded teams.
- Can I pay per questionnaire instead of subscribing?
- Yes — the Questionnaire Deal Pass is $499 one-time: answer one inbound security questionnaire end-to-end (import, AI drafting grounded in your stack, review, export in the sender's format). It's for teams without a subscription, limited to two lifetime — past that, Growth at $99/mo with unlimited answers is strictly cheaper.
- What sits between Enterprise and Strategic?
- Enterprise scales per-seat / per-entity from the $750/mo floor to roughly $3,000/mo as seats, entities, and SLA scope grow (~$9k–36k/yr). Strategic picks up where per-entity contracts and government/multi-division requirements exceed that.
- What do I get on Growth ($99)?
- Everything in Starter plus unlimited targets, cloud (AWS) posture scanning, web-app scanning, a BAA/DPA/NDA tracker, unlimited questionnaire answers and a white-label Trust Center (Starter includes both, metered), vendor risk, Agent Watch, closed-loop remediation, write-scoped MCP keys, a RAG knowledge base, the AI System Register with EU AI Act risk classification, and Physical AI — the embodied-AI compliance register for robots, cobots, AMRs and drones (EU Machinery Regulation readiness, PL/SIL safety functions, and an exportable safety case).
- What’s between Growth and Enterprise?
- Scale ($399/mo, or $339/mo billed annually) fills the gap: everything in Growth plus SSO/SAML, priority support, and the full AI-governance suite, with every Growth-metered feature unlimited. It’s self-serve, no sales call.
- How do Enterprise and Strategic work?
- Enterprise starts at a published floor of $750/mo (per-seat/entity) and adds SCIM provisioning, branded subdomains, a DPA/BAA with KollGuard, and an SLA. Strategic ($150k–400k/yr) is for health systems and government agencies — per-entity/division pricing, dedicated onboarding, and it’s backed by KollGuard’s own SOC 2 Type II. Contact info@kollitech.com for a quote.
- Does paid include an audit?
- No. KollGuard produces auditor-ready evidence. You engage a CPA firm directly for the audit itself (typically $10k–$30k for a SOC 2 Type 1, more for Type 2). Splitting tool cost from audit cost is intentional — you pay each at its right price.
- Can I cancel anytime?
- Yes. Self-serve cancel from the billing portal. No phone trees, no retention scripts.
- Can you help us migrate off a legacy system?
- Yes. Our team brings 20+ years of enterprise data-conversion experience — including regulated-industry and healthcare migrations. If you're moving from spreadsheets, a legacy GRC platform, or a homegrown tracker, we offer consulting and migration services to map, clean, and import your controls, evidence, vendors, and agreements into KollGuard. We can also help with other data or compliance migration tasks. Email info@kollitech.com to scope an engagement.
