Pricing Options

There's something for everyone!

Basic Package

Regular

Perfect starting point to get going with OpenGRC

$4,500 /year

Enhanced Package

Quick Start

All the benefits of the Basic package, plus white glove setup, support, SMB Risk Assessment, and initial consulting. Get up to speed FAST with one of our experts!

$7,500 /year

Basic Pricing Package

  • Unlimited Internal Users
  • Unlimited Frameworks
  • Integrated Risk Management Module
  • Incident Management Module
  • Unlimited Vendors and Applications
  • AI Gap Assessments
  • AI Vendor Survey Completer
  • AI-Powered Security Risk Assessment Module
  • AI MCP Server Integration (Claude, ChatGPT, etc)
  • Dashboards & Downloadable Reports
  • Email Support with 24-hour response
  • Secure and Compliant Hosting
  • Additional features only for Enterprise customers
Get Started Today!

How our pricing works

No per-seat fees, and no charging extra for the frameworks you happen to need. Every plan includes unlimited internal users, unlimited frameworks, and unlimited vendors and applications. We price on the organisation, not on how many people you let log in.

That is deliberate. Per-seat GRC pricing punishes you for involving the people who actually own the controls, which is exactly backwards.

Which plan fits

  • Community — free, self-hosted, full source access. Right when you have your own hosting requirements or no budget.
  • Enterprise Basic — hosted by us, unlimited users and frameworks, the AI modules and the MCP server, and email support with 24-hour response.
  • Enterprise Enhanced — everything in Basic plus white-glove setup, an SMB risk assessment and initial consulting, for teams that want to be productive immediately.
  • MSSP — per-tenant licensing for providers running GRC across a client book, with isolated instances per client.

What hosted plans include

A 99.5% monthly uptime commitment, encryption in transit and at rest, logical isolation of your data with a key unique to your instance, and a SOC 2 Type II examination performed annually by an independent auditor. We do not use your data to train AI models. The full detail is on our security page.

Questions

Need a HIPAA BAA, a specific data residency region, or an invoice rather than a card? Ask us — these are normal requests, not enterprise upsells. You can also book a demo to see it against your own frameworks first.