Fixed monthly pricing, sized for small businesses.
Every plan includes Proven Assure. We quote in INR, SGD or USD based on your headcount and the frameworks you need, and the price doesn't change when audit season comes.
Platform
For companies with someone in-house who owns compliance.
- Proven Assure with all integrations
- Policy templates and training library
- Email and chat support
Managed compliance
For teams who need the certificate but don't have a security person.
- Everything in Platform
- A named compliance analyst
- Policies written, risks and vendors reviewed for you
- Audit management with your chosen auditor
Full security partner
For companies that want compliance and day-to-day security in one contract.
- Everything in Managed compliance
- Virtual CISO
- 24/7 managed SOC and MDR
- Vulnerability and cloud posture management
Compare plans
Add-ons can be added to any plan at any time.
| Feature | Platform | Managed compliance | Full security partner |
|---|---|---|---|
| Proven Assure platform | |||
| All frameworks and control mapping | |||
| Automated evidence collection | |||
| Risk, vendor and policy modules | |||
| Auditor portal | |||
| Trust centre | |||
| Compliance services | |||
| Named compliance analyst | – | ||
| Policies written for you | – | ||
| Risk assessments and vendor reviews | – | ||
| Audit management with your auditor | – | ||
| Security questionnaires | Add-on | ||
| Security operations | |||
| Virtual CISO | – | Add-on | |
| 24/7 managed SOC and MDR | – | Add-on | |
| Vulnerability management | – | Add-on | |
| Cloud security posture management | – | Add-on | |
| Awareness training and phishing simulation | |||
| Support | |||
| Email and chat support | |||
| Response time | 1 working day | Same working day | Same day, 24/7 for incidents |
| Quarterly business review | – | ||
One-off projects and add-ons
For when you need a single piece of work, or more of one service.
SOC 2 or ISO 27001 gap assessment
A two-week, fixed-fee review of where you stand, with a remediation plan and cost estimate.
Audit fees
Auditor and certification body fees are paid directly to them. We negotiate rates for our customers.
Penetration test coordination
We scope the test, introduce an independent firm and track the findings to closure.
Incident response retainer
Pre-agreed hours and response times, so help is ready the moment you need it.
Additional frameworks
Add PDPA, DPDP Act, MAS TRM, PCI DSS or HIPAA to an existing programme.
Tabletop exercises
A facilitated incident simulation for your leadership team, with a written report.
Pricing questions
Why don't you publish prices?
Your price depends on headcount, the number of frameworks and which services you need. We send a written, fixed monthly quote after a 30-minute call, usually the same week.
Is there a minimum contract?
Managed plans run for 12 months, which covers a full audit cycle. The Platform plan is available monthly after the first three months.
Can we start with Platform and upgrade later?
Yes. Everything you've built in Proven Assure stays in place when you move to a managed plan.
Which currencies and payment methods do you accept?
We invoice in INR, SGD or USD by bank transfer, and accept major cards for the Platform plan. Indian invoices include GST and Singapore invoices include GST where applicable.
Find out how close you are to SOC 2.
A 30-minute call with an analyst. You leave with a gap list, a timeline and a price.