Secureframe
By Secureframe
Secureframe supports SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST and CMMC, with a Defense plan aimed at CMMC. Auditors get read-only access that an admin scopes by module and that ends when the audit closes. Plans are named Fundamentals, Complete and Defense, and no prices are published.
- From
- Price on request
- Free plan
- No
- Free trial
- No
Pricing
Taken from the vendor's pricing page.
| Plan | Price | Charged | Notes |
|---|---|---|---|
| Fundamentals | On request | per account | Includes one compliance framework, and more can be added |
| Complete | On request | per account | Everything in Fundamentals, plus more |
| Defense | On request | per account | Everything in Complete, plus CMMC tooling |
Costs not in the plan price
- Each plan includes one framework, and the page says additional quantities can be added.
- The pricing table does not show which plan includes Automated Evidence Collection or the Audit Partner Network.
Categories it qualifies for
Facts we checked
- The home page names SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST and CMMC among the frameworks it supports. Source
- The pricing page lists Automated Evidence Collection, an Evidence Library and access to the Secureframe Audit Partner Network, but its comparison columns are unlabeled, so the plan for each row is unclear. Source
- An admin adds an auditor to a specific audit, chooses which modules the auditor can see, and the auditor loses access after the audit is completed unless other audits are active. Source
- The Defense plan is positioned for CMMC and lists an SSP, a POA&M and an SPRS score tracker. Source
- The pricing page shows no dollar amounts and no free trial. Source
Reviews
Review collection has not opened yet, so there are no reviews to show. When it opens, reviewers will confirm their identity with a work email or LinkedIn before a review is published.
Who pays us
Secureframe does not pay us anything.