Simple, transparent pricing
Every offer runs the same platform. What changes is depth: how many capabilities you use and the size of your organisation. Prices are agreed with our team; volume discounts and annual or multi-year contracts are available.
Growth
For compliance teams getting structured
Price on request · based on your users and scope
Get started- Up to 10 active frameworks from the 85+ library, incl. the 8 Saudi frameworks
- Up to 50 users · up to 100 third parties
- Risk register, scenarios & heatmap, risk acceptances
- Compliance assessments, AI gap analysis, cross-framework mapping, action plan
- Custom frameworks: fork, edit, build or generate with AI
- Audits, findings and the external auditor portal
- Policies with approval workflow and employee acknowledgement
- AI document generator — 27 document types
- Third-party risk: AI prescreen, AI contract review, vendor portal with e-signature
- Incidents, vulnerabilities, threat library, applied controls, exceptions
- Regulatory updates
- 5 built-in PDF reports
- MFA, 13 roles, activity log
- English, French and Arabic (RTL)
- Email support
Enterprise
For organisations running GRC at scale
Price on request · based on your users and scope
Get started- Everything in Growth
- Unlimited frameworks, users and third parties
- AI GRC assistant (chat on your own risk, compliance and vendor data)
- Multiple frameworks assessed together with shared evidence
- Dedicated onboarding
- Priority support
Elite
For regulated and critical-infrastructure organisations
Price on request · based on your users and scope
Contact sales- Everything in Enterprise
- Active Directory / LDAP sign-in with group → role mapping
- Asset valuation (CIA), asset cartography & lifecycle with end-of-life alerts
- Vulnerability scanner connectors (Tenable, Nessus, Qualys, OpenVAS) & impact scoring
- CVE knowledge base with daily NVD sync
- Threat profiles, scenario versioning, risk appetite & treatment plans
- Control effectiveness evaluation (5 criteria)
- Report builder (Excel / PDF), scheduled reports, 9 dashboards
- RACI governance, document repository, archiving & retention
- OCR document capture (FR / EN / AR)
- Tamper-evident, hash-chained activity log
Compare the offers
Every capability, offer by offer.
Scroll sideways to see every offer
| Capability | Growth | EnterpriseMost popular | Elite |
|---|---|---|---|
| Risk | |||
| Risk register & heatmap | Included | Included | Included |
| Risk scenarios | Included | Included | Included |
| Risk acceptances | Included | Included | Included |
| Threat profiles & scenario versioning | Not included | Not included | Included |
| Risk appetite & treatment plans | Not included | Not included | Included |
| Compliance | |||
| Frameworks from the 85+ library | Up to 10 | Unlimited | Unlimited |
| 8 Saudi frameworks in official English + Arabic | Included | Included | Included |
| AI gap analysis | Included | Included | Included |
| Cross-framework mapping | Included | Included | Included |
| Custom frameworks & AI builder | Included | Included | Included |
| Control effectiveness evaluation | Not included | Not included | Included |
| Audit & policies | |||
| Audits & external auditor portal | Included | Included | Included |
| Policies, approval & acknowledgement | Included | Included | Included |
| AI document generator (27 types) | Included | Included | Included |
| OCR document capture | Not included | Not included | Included |
| Third parties & assets | |||
| Third parties | Up to 100 | Unlimited | Unlimited |
| AI prescreen & contract review | Included | Included | Included |
| Vendor portal with e-signature | Included | Included | Included |
| Asset valuation, cartography & lifecycle | Not included | Not included | Included |
| Security operations | |||
| Incidents & vulnerabilities | Included | Included | Included |
| Threat library | Included | Included | Included |
| Scanner connectors & impact scoring | Not included | Not included | Included |
| CVE knowledge base | Not included | Not included | Included |
| Reporting & governance | |||
| 5 built-in PDF reports | Included | Included | Included |
| Report builder, scheduling & 9 dashboards | Not included | Not included | Included |
| RACI, document repository & archiving | Not included | Not included | Included |
| Regulatory updates | Included | Included | Included |
| AI | |||
| AI document generation & analysis | Included | Included | Included |
| AI GRC assistant | Not included | Included | Included |
| Security & administration | |||
| Users | Up to 50 | Unlimited | Unlimited |
| MFA & 13 roles | Included | Included | Included |
| Active Directory / LDAP sign-in | Not included | Not included | Included |
| Tamper-evident activity log | Not included | Not included | Included |
| English, French & Arabic (RTL) | Included | Included | Included |
| Support | |||
| Email support | Included | Included | Included |
| Dedicated onboarding | Not included | Included | Included |
| Priority support | Not included | Included | Included |
| Get started | Get started | Contact sales | |
Each offer includes everything in the previous one. GRC Eye helps you meet regulatory requirements; it does not by itself make you compliant. Options are priced by scope and available with any offer.
Options
Add-ons available with any offer, priced by scope.
Private edition
On-premises or air-gapped: Docker, VMware OVA appliance or offline installer, offline licence keys. With a local AI model: zero data egress.
Bring your own AI model
Connect your own Ollama or OpenAI-compatible endpoint so AI runs where you decide.
Onboarding, training & regulation loading
Guided setup, team training, and loading of your national or internal frameworks.
Not sure which offer fits?
Tell us how many people you have, which frameworks you must meet and where your data must stay. We demo the platform on sample data and recommend an offer.
- A 30-minute demo
- An offer sized to your users and scope
- A free framework-coverage review, whatever you decide
Pricing questions
How is the price set?
By the number of users, the offer you choose, any options (private edition, your own AI model) and the contract length. Annual and multi-year contracts are available.
Can I change offer later?
Yes. You can upgrade at any time; your data and configuration stay in place.
Is there a trial?
Yes, a 14-day trial.
Start your 14-day trialCan GRC Eye run on our own infrastructure?
Yes, with the Private edition option.
Which languages are supported?
English, French and Arabic, including the Saudi frameworks in their official Arabic wording.