OdySecure, the security platform by Cybervize, is packaged by functional scope and digitally connected people. Assessments are counted by assessment unit, awareness by participant, supplier risk by active supplier. The number of platform users is not capped.
Every tier includes the shared data foundation: risks, measures, controls, evidence and reports all work on the same structures.
Run a full ISMS
from €1,075 per month
billed annually, from €12,900 per year
Organisations that run their management system themselves and want evidence without a landscape of spreadsheets.
Automate and integrate
from €2,075 per month
billed annually, from €24,900 per year
Organisations running several standards in parallel and connecting the platform to their system landscape.
Group scale and complex operations
individual
quoted by scope and operating model
Corporates, critical infrastructure operators and anyone negotiating place of operation, tenant structure or SLA.
Material loss scenarios are valued in euros rather than traffic-light colours: expected annual loss, percentiles and an exceedance curve as the basis for the board paper. Measures can be weighed against their effect. A local language model proposes parameters; people decide.
Quantification produces model values based on documented assumptions and does not replace insurance or legal advice.
All prices are net and exclude VAT. This offer is directed exclusively at business customers.
All tiers share the same data foundation. What differs is the degree of automation and the freedom in how you operate it.
| Capability | Core | Professional | Enterprise |
|---|---|---|---|
| Management system | |||
| Risks, measures and policies | |||
| Controls and statement of applicability | |||
| Incidents, audits and management review | |||
| Business continuity with BIA, RTO and RPO | – | ||
| Qualitative risk assessment with register and rating | – | – | |
| Evidence and standards | |||
| Standards catalogue, 50 frameworks | |||
| Your own standards via OSCAL | |||
| Export reports and statement of applicability | |||
| Equivalences between frameworks | – | ||
| Supplier management (capacity product) | |||
| Supplier register with criticality | – | ||
| Due diligence, evidence and deadlines | – | ||
| Risk history, reassessment and register report | – | ||
| OdySecure Navigator | |||
| Answer questions, with source and figure | |||
| Guide you through the software | |||
| Integration and operation | |||
| API and webhooks | – | ||
| Single sign-on (SSO, planned) | – | ||
| User provisioning via SCIM (planned) | – | – | |
| Multiple tenants and group structure | – | – | |
| Self-hosting in your own data centre | – | – | |
| Premium SLA | – | – | |
| AI operation | |||
| Cybervize Managed AI | |||
| Your own AI provider (BYOK) | – | ||
| Local language model on your own premises | – | – | |
The plus sign means: available in this tier, but charged separately. Premium SLA and self-hosting are operating options with their own surcharge, and the local language model is billed per endpoint. Features marked “planned” are not yet available; they are on the product roadmap and are being trialled with pilot customers. Assessments, awareness and supplier management are capacity products, available from Professional upwards. They are not part of Core. They meter by their own driver because it does not follow headcount: assessments count assessment units, awareness counts participants, supplier management counts active suppliers. Platform users are unlimited in every tier; the size class is a commercial metric, not a login limit.
This table compares our tiers. The question that comes before it, whether ISMS software is the right route at all, is covered in the selection guide: The comparison of the four ways to ISO 27001
Assessments, awareness and supplier management are available from Professional upwards and are not part of Core. Each meters by its own driver, because none of them follows headcount: assessment units, evidenced participants, active suppliers. Assessments can additionally be used on their own.
counted by assessment units
Assess plants, sites, legal entities or departments individually, with snapshots, site comparison and a consolidated report. Packages for 5, 25 and 100 units, more by agreement.
from €1,408 per month
billed annually, from €16,900 per year
counted by participants
Workforce register from a file import, previewed before it is written, training in five languages, phishing simulation, acknowledgements and per-person evidence export.
from €200 per month
billed annually, from €2,400 per year
counted by active suppliers
Supplier register, due diligence, evidence and ongoing monitoring, with clause-level mapping for regulated organisations.
from €1,075 per month
billed annually, from €12,900 per year
Assessments can be used without a full platform licence. For many organisations that is the entry point: first know the maturity of your plants, then decide what follows from it.
| Package | Capacity | Typical use |
|---|---|---|
| Assessments 5 | up to 5 units | a first site or plant assessment |
| Assessments 25 | up to 25 units | a multi-site programme |
| Assessments 100 | up to 100 units | a programme across many sites |
| Assessments Enterprise | more than 100 units | by agreement |
If you need more later, the same tenant expands into the platform. Assessed units, snapshots and reports carry over; no second set of data is created.
The platform counts people who are actually connected digitally. Anyone working in production without an individual digital identity does not appear in the platform licence. That is the difference between a tool built for offices and one built for industry.
A plant with 2,000 staff, 220 of them digitally connected, is priced on those 220. Awareness training still reaches all 2,000, because it is counted by participant rather than by platform licence.
Workflows, permissions, approvals and the audit trail are identical across all three operating models. What differs is who runs the model.
simplest start
Cybervize runs provider access, routing, budgeting and monitoring. An included allowance comes with it, additional capacity stays predictable.
capacity included
use your existing contract
You provide approved provider access and carry the usage cost directly. Cybervize controls context, permissions and logging.
no platform discount
maximum data sovereignty
The model runs in your environment and Cybervize connects to it through a controlled endpoint. Model qualification and operations are agreed with you.
enterprise option
Output quality and speed depend on the model you choose and how it is sized. Cybervize qualifies supported models and versions. The platform SLA does not cover the availability of an endpoint you operate yourself.
A manufacturer with eight plants, 2,000 staff and 400 active suppliers. This is how the quote comes together.
The platform is paid for by digital workload, assessments by plant, awareness by participant and supplier risk by supplier. No platform licence is charged for the 1,780 staff without an individual digital identity.
That is all it takes to determine your price. We work through the answers in the scoping call.
Self-hosting, data residency, around-the-clock operations, multiple tenants or a critical-infrastructure and OT scope are quoted individually.
Thirty minutes for scope, thirty for the demo. After that you know which tier and which capacities fit, and you get a package proposal.