Choose Starter when
You need stakeholder contacts, Essential Eight reporting, operational registers or an ISM document pack, and the assessor does not need to work inside SecBoost.
Pricing
Choose a tier for your assessment workflow.
Starter covers Essential Eight reporting, operational registers, stakeholder contacts and ISM documentation. Standard adds assessor-managed assessment workflow and final OSCAL/CCM outputs. Enterprise adds Teams, tasks, workflow gates and multiple organisations.
Annual prices in AUD, excluding GST. Expand each tier to see all inclusions.
Starter
$7,000 / year
AUD, excluding GST
For small teams preparing Essential Eight reports and ISM documentation for customer or assessment requirements.
- ✓One organisation · one system
- ✓Five users · 5 GB storage
- ✓Documents, reports and evidence
All Starter inclusions
- One organisation and one assessed system
- Multiple projects for that assessed system
- 20+ plans, policies, standards and reports
- Full ISM support, updated for June 2026
- Wizard-based project creation
- SSP Annex and Control Matrix Excel import
- Essential Eight dashboard, index and report
- Evidence attachments for controls
- Contacts and stakeholder records
- 10+ registers including hardware, training and evidence
- Asset library for logos, diagrams and contact lists
- Passkey and TOTP MFA
- Five users and 5 GB storage
- Business hours email support
- One hour onboarding and training
- SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Standard
$12,000 / year
AUD, excluding GST
Best when an assessor needs to log in and perform assessment work inside SecBoost.
- ✓Up to two assessed systems
- ✓20 users · 20 GB storage
- ✓Assessor review and final exports
All Standard inclusions
- Everything in Starter
- Assessor-managed control workflow with assessment steps
- Assessors can perform assessment work inside SecBoost
- Assessors can return controls to editing when more information is needed
- Customisable roles and permissions
- Completed CCM and OSCAL SSP and Assessment Results exports
- Up to two assessed systems, each with multiple projects
- 20 users and 20 GB storage
- AI-generated implementation suggestions
- Optional Jira integration
- Business hours priority phone support
- SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Enterprise
Contact us
Best for multiple organisations, multiple systems, delivery teams and portfolio assurance.
- ✓Multiple organisations and systems
- ✓Unlimited users · configurable storage
- ✓Teams, tasks and SSO
All Enterprise inclusions
- Everything in Standard
- Multiple organisations, assessed systems and projects
- Teams and task assignment
- Task reminders, escalation and reporting
- Custom workflow gates
- Portfolio assessment workflow with completed CCM and OSCAL exports
- SSO with just-in-time provisioning
- Custom domain
- On-premises deployment option
- On-premises options for SECRET and TOP SECRET environments
- Unlimited users
- Configurable storage
- Extended support, custom training and quarterly reviews
Planning to use your own AI agent or integration? The API can automate record updates, evidence uploads and document generation. API actions follow your chosen tier’s features and user permissions. Explore API automation.
Choose Standard when
An assessor, consultant or internal reviewer needs user access to perform assessment work and produce final OSCAL and completed CCM outputs.
Choose Enterprise when
You manage multiple customers, organisations, systems or delivery teams, and need tasks, Teams, SSO or custom workflow gates.
FAQ
Pricing questions
Common questions about choosing the right SecBoost tier for Essential Eight, ISM and IRAP workflows.
Which SecBoost tier should a small team start with?
Starter is usually the right fit when the team needs Essential Eight reporting, ISM documentation, operational registers, stakeholder contacts and evidence records for one assessed system, and the assessor does not need to work inside SecBoost.
When should we choose Standard?
Choose Standard when an assessor, consultant or internal reviewer needs to log in, review controls, complete assessment steps, return controls for more information, and produce final OSCAL and CCM outputs from the platform.
When is Enterprise needed?
Enterprise is designed for teams managing multiple organisations, multiple assessed systems, delivery teams, tasks, custom workflow gates, SSO, custom domains or deployment requirements beyond the standard hosted tenancy.
Do prices include GST?
Published Starter and Standard prices are in Australian dollars per year, excluding GST. Enterprise pricing depends on organisation count, assessed systems, users, storage, deployment model and support requirements.