Pricing
Transparent. No surprises.
All plans include a 14-day free trial — your card isn't charged until it ends, cancel any time before then at no charge.
Starter
$199
per month · billed monthly
- 1 cloud account (AWS, Azure, or Google Cloud) + Microsoft 365
- Single user
- 1 identity provider — Entra ID, Okta, JumpCloud, OneLogin, Ping, or Google Cloud Identity
- Cybermatic agents included — device, mobile & network discovery
- Weekly automated scans
- Up to 250 assets
- SOC2 documentation: 6 docs
- Cybermatic Copilot
- Executive reports
- Email support
Most Popular
Growth
$499
per month · billed monthly
- 5 cloud & M365 accounts (AWS, Azure, GCP, Microsoft 365)
- 3 users: 1 admin + 2 view-only teammates
- 3 identity providers — Entra ID, Okta, JumpCloud, OneLogin, Ping & Google Cloud Identity
- 2 security & asset platforms — Lansweeper, runZero, Microsoft Defender, Rapid7 & Qualys
- Cybermatic agents included — device, mobile & network discovery
- Daily automated scans
- Up to 550 assets
- All frameworks: SOC2, ISO 27001, HIPAA, NIST
- Auto remediation code
- Slack and Jira integration
- API access
- Priority support
Enterprise
Custom
tailored to your environment
- Unlimited cloud accounts
- Up to 10 admins + unlimited viewers
- Unlimited identity providers & security platforms
- Cybermatic agents included — device, mobile & network discovery
- Unlimited assets
- Real-time continuous scanning
- Custom compliance frameworks
- Dedicated support channel & onboarding
- Custom options built around your needs:
- · Custom connectors for your tools
- · Consolidated invoicing & PO billing
- · SAML single sign-on (early access)
- · Custom scan cadence & report tailoring
- · Security reviews & DPA support
- SLA: 99.9% uptime
- White-glove onboarding
Common questions
- Do I need a credit card to start the trial?
- Yes — a card is required to start the 14-day free trial, but it isn't charged until the trial ends, and you can cancel any time before then from Settings → Billing at no charge.
- What access does Cybermatic need?
- Read-only. You deploy a CloudFormation template (or equivalent for Azure/GCP) that grants read-only API access — we never get write access to your cloud. Cybermatic's own agents are report-only: they send device posture in, and nothing reaches back into your devices.
- Are the Cybermatic agents included?
- Yes — all three, on every plan: the Device Agent for Windows, macOS, and Linux, the Device Trust app for phones and tablets, and the network Discovery Agent. Devices they report, like all assets, count toward your plan's asset limit.
- Can I change plans later?
- Yes — manage your plan, payment method, and invoices any time from Settings → Billing in the portal. Upgrades take effect immediately; downgrades at the next billing cycle. Payments are processed securely by Stripe.
- How is payment handled?
- Subscriptions are processed by Stripe. We never see or store your card details.
- Can my team share one workspace?
- Yes. Growth includes 3 users — 1 administrator and 2 view-only teammates who can see everything and generate reports but can't change connections, assets, users, or billing. Enterprise includes up to 10 administrators and unlimited viewers. Invited teammates sign in with their own credentials and are never asked for a card — access rides on the workspace subscription.
Need custom terms? Contact sales.