Simple, transparent pricing
Every offer runs the same platform. What changes is depth: how many capabilities you use and the size of your organisation. Prices are agreed with our team; volume discounts and annual or multi-year contracts are available.
Growth
For compliance teams getting structured
Price on request · based on your contributors and scope
Get started- Up to 10 active frameworks from the 85+ library, incl. the 8 Saudi frameworks
- Up to 25 contributors · up to 100 third parties
- Risk register, scenarios & heatmap, risk acceptances
- Compliance assessments, AI gap analysis, cross-framework mapping, action plan
- Custom frameworks: fork, edit, build or generate with AI
- Audits, findings and the external auditor portal
- Policies with approval workflow and employee acknowledgement
- AI document generator — 27 document types
- Third-party risk: AI prescreen, AI contract review, vendor portal with e-signature
- Incidents, vulnerabilities, threat library, applied controls, exceptions
- Regulatory updates
- 5 built-in PDF reports
- MFA, 13 roles, activity log
- English, French and Arabic (RTL)
- Email support
Enterprise
For organisations running GRC at scale
Price on request · based on your contributors and scope
Get started- Everything in Growth
- Unlimited frameworks, contributors and third parties
- AI GRC assistant (chat on your own risk, compliance and vendor data)
- Multiple frameworks assessed together with shared evidence
- Dedicated onboarding
- Priority support
Elite
For regulated and critical-infrastructure organisations
Price on request · based on your contributors and scope
Contact sales- Everything in Enterprise
- Active Directory / LDAP sign-in with group → role mapping
- Asset valuation (CIA), asset cartography & lifecycle with end-of-life alerts
- Vulnerability scanner connectors (Tenable, Nessus, Qualys, OpenVAS) & impact scoring
- CVE knowledge base with daily NVD sync
- Threat profiles, scenario versioning, risk appetite & treatment plans
- Control effectiveness evaluation (5 criteria)
- Report builder (Excel / PDF), scheduled reports, 9 dashboards
- RACI governance, document repository, archiving & retention
- OCR document capture (FR / EN / AR)
- Tamper-evident, hash-chained activity log
Compare the offers
Every capability, offer by offer.
Scroll sideways to see every offer
| Capability | Growth | EnterpriseMost popular | Elite |
|---|---|---|---|
| Risk | |||
| Risk register & heatmap | Included | Included | Included |
| Risk scenarios | Included | Included | Included |
| Risk acceptances | Included | Included | Included |
| Threat profiles & scenario versioning | Not included | Not included | Included |
| Risk appetite & treatment plans | Not included | Not included | Included |
| Compliance | |||
| Frameworks from the 85+ library | Up to 10 | Unlimited | Unlimited |
| 8 Saudi frameworks in official English + Arabic | Included | Included | Included |
| AI gap analysis | Included | Included | Included |
| Cross-framework mapping | Included | Included | Included |
| Custom frameworks & AI builder | Included | Included | Included |
| Control effectiveness evaluation | Not included | Not included | Included |
| Audit & policies | |||
| Audits & external auditor portal | Included | Included | Included |
| Policies, approval & acknowledgement | Included | Included | Included |
| AI document generator (27 types) | Included | Included | Included |
| OCR document capture | Not included | Not included | Included |
| Third parties & assets | |||
| Third parties | Up to 100 | Unlimited | Unlimited |
| AI prescreen & contract review | Included | Included | Included |
| Vendor portal with e-signature | Included | Included | Included |
| Asset valuation, cartography & lifecycle | Not included | Not included | Included |
| Security operations | |||
| Incidents & vulnerabilities | Included | Included | Included |
| Threat library | Included | Included | Included |
| Scanner connectors & impact scoring | Not included | Not included | Included |
| CVE knowledge base | Not included | Not included | Included |
| Reporting & governance | |||
| 5 built-in PDF reports | Included | Included | Included |
| Report builder, scheduling & 9 dashboards | Not included | Not included | Included |
| RACI, document repository & archiving | Not included | Not included | Included |
| Regulatory updates | Included | Included | Included |
| AI | |||
| AI document generation & analysis | Included | Included | Included |
| AI GRC assistant | Not included | Included | Included |
| Security & administration | |||
| Contributors | Up to 25 | Unlimited | Unlimited |
| Viewers, executives, auditors & employees — free and unlimited | Included | Included | Included |
| MFA & 13 roles | Included | Included | Included |
| Active Directory / LDAP sign-in | Not included | Not included | Included |
| Tamper-evident activity log | Not included | Not included | Included |
| English, French & Arabic (RTL) | Included | Included | Included |
| Support | |||
| Email support | Included | Included | Included |
| Dedicated onboarding | Not included | Included | Included |
| Priority support | Not included | Included | Included |
| Get started | Get started | Contact sales | |
Each offer includes everything in the previous one. GRC Eye helps you meet regulatory requirements; it does not by itself make you compliant. Options are priced by scope and available with any offer.
Options
Add-ons available with any offer, priced by scope.
Private edition
A yearly licence per installation, available with every offer including Elite. On-premises or air-gapped: Docker, VMware OVA appliance or offline installer, offline licence keys. With a local AI model: zero data egress.
Bring your own AI model
Connect your own Ollama or OpenAI-compatible endpoint so AI runs where you decide.
Onboarding, training & regulation loading
Guided setup, team training, and loading of your national or internal frameworks.
Not sure which offer fits?
Tell us how many people you have, which frameworks you must meet and where your data must stay. We demo the platform on sample data and recommend an offer.
- A 30-minute demo
- An offer sized to your contributors and scope
- A free framework-coverage review, whatever you decide
Pricing questions
How is the price set?
By the number of contributors, the offer you choose, any options (private edition, your own AI model) and the contract length. Annual and multi-year contracts are available.
Who counts as a user?
Only contributors: the people who edit in GRC Eye, such as administrators, the CISO, risk, compliance, policy and vendor managers, control and business owners, and security analysts. Read-only viewers and executives, auditors (including the external auditor portal), employees who only read and acknowledge policies, and third parties using the vendor portal are free and unlimited on every offer; third parties need no account.
Can I change offer later?
Yes. You can upgrade at any time; your data and configuration stay in place.
Is there a trial?
Yes, a 14-day trial.
Start your 14-day trialCan GRC Eye run on our own infrastructure?
Yes, with the Private edition option: a yearly licence per installation, on-premises or air-gapped, available with every offer.
Which languages are supported?
English, French and Arabic, including the Saudi frameworks in their official Arabic wording.