Simple, Transparent Pricing
Start with a 14-day free trial. No credit card required. Scale as you grow.
Starter
$79/mo billed annually
Essential security for small teams getting started with compliance.
- Up to 25 endpoints
- Cerulean Security Baseline (15 controls)
- Compliance scanning
- Risk register
- Vendor management
- Employee directory
- Email support
Professional
$249/mo billed annually
Multi-framework GRC for growing businesses that need to prove compliance.
- Up to 100 endpoints
- SOC 2, ISO 27001, HIPAA, GDPR
- Unified Control Matrix
- SSP generator (Corporate Blueprint)
- Legal & Privacy Vault
- Evidence management & audit trail
- Multi-framework assessments
- Risk treatment workflows
- Priority support
Enterprise
$499/mo billed annually
Full compliance suite for regulated industries with custom integrations.
- Unlimited endpoints
- ISO 9001 & AS9100D (Aerospace)
- Custom framework CSV import
- Custom integrations & API access
- Dedicated success manager
- Audit-ready PDF exports
- SSO / SAML support
Cerulean Vault
14-day free trial included
Air-gapped, self-hosted CMMC compliance for defense contractors handling CUI.
- CMMC 2.0 Level 1 & Level 2
- NIST 800-171 Rev 2 & Rev 3
- SPRS scoring & POA&M tracking
- Docker-based self-hosted deployment
- Air-gapped / offline operation
- Local PostgreSQL database
- Local evidence file storage
- No data leaves your network
- CSV asset inventory importer
- SSP document generator
- One-command updates via Docker
Compare Plans
| Feature | Starter | Professional | Enterprise | Cerulean Vault |
|---|---|---|---|---|
| Endpoints | 25 | 100 | Unlimited | Unlimited |
| Cerulean Security Baseline | ||||
| Compliance Scanning | ||||
| Risk Register | ||||
| Vendor Management | ||||
| SOC 2 / ISO 27001 | — | |||
| HIPAA / GDPR | — | — | ||
| Unified Control Matrix | — | |||
| SSP Generator | — | |||
| Legal & Privacy Vault | — | — | ||
| Evidence Management | — | |||
| CMMC 2.0 Level 1 & Level 2 | — | — | — | |
| NIST 800-171 Rev 2 & Rev 3 | — | — | — | |
| SPRS Scoring & POA&M | — | — | — | |
| ISO 9001 / AS9100D | — | — | — | |
| CSV Framework Importer | — | — | ||
| API Access | — | — | — | |
| SSO / SAML | — | — | — | |
| Air-Gapped / Offline | — | — | — | |
| Self-Hosted Docker | — | — | — | |
| Local Database & Storage | — | — | — | |
| Support | Priority | Dedicated CSM | Email + Docs |
Frequently Asked Questions
What does the 14-day free trial include?
Full access to all Professional tier features. No credit card required. Your data is preserved if you choose to subscribe.
Can I switch plans later?
Yes. Upgrade or downgrade anytime. When upgrading, you get immediate access to new features. When downgrading, your current billing cycle completes first.
What frameworks are included?
Starter includes the Cerulean Security Baseline. Professional adds SOC 2, ISO 27001, HIPAA, and GDPR. Enterprise includes everything plus CMMC 2.0, NIST 800-171, ISO 9001, AS9100D, NERC CIP, and FISMA.
Do I need a consultant to use Cerulean Shield?
No. The platform is designed with guided workflows so your team can manage compliance without external consultants. Enterprise customers get a dedicated success manager for onboarding.
How does the Unified Control Matrix work?
You implement a control once and upload evidence once. The matrix automatically maps that evidence to every framework that requires it — SOC 2, ISO, HIPAA, and more. Comply once, satisfy many.
Is my data secure?
Yes. All data is encrypted at rest and in transit. We use Supabase (built on PostgreSQL) with row-level security. Evidence artifacts maintain a 7-year audit trail with soft-delete.
What is Cerulean Vault?
Cerulean Vault is a self-hosted Docker package built for CMMC compliance. It runs entirely on your infrastructure with a local PostgreSQL database and local file storage. No CUI or compliance data leaves your network. Includes NIST 800-171 Rev 2 & Rev 3, SPRS scoring, POA&M tracking, and SSP generation.
Does Cerulean Vault have a free trial?
Yes. Sign up and get a 14-day trial with all CMMC features enabled. You'll receive a license key and installer immediately — no sales call required. After the trial, the annual license is $4,000/year.
Who needs Cerulean Vault?
Defense contractors handling CUI in air-gapped or restricted network environments. If your CMMC assessment boundary requires that compliance data never leaves your facility, Cerulean Vault is the right choice.
Ready to Simplify Your Compliance?
Start your 14-day free trial. Multi-framework compliance in minutes, not months.
Start Free Trial