Crux Platform Pricing

Whether you are a bootstrapping startup or just closed a venture capital round, there is a Crux Security Platform tier that will work for you.

Basic

Free

✓ Unlimited users

✓ 19+ Security Policies

✓ Task Management

Complete

$500/month

✓ Unlimited users

✓ 19+ Security Policies

✓ Security Training

✓ Task Management

✓ Risk Register

✓ Vendor Tracker

Complete Plus

$1,000/month

Everything in Complete
+

✓ Quarterly Network Scans

✓ Program Review Meetings

Assisted

$2,500/month

Everything in Complete Plus
+

✓ Bi-Weekly Program Review Meetings

✓ Vendor Management Support

✓ Risk Register Support

✓ Shared Slack Channel

✓ Shared Document Drive

Assisted Plus

$3,500/month

Everything in Assisted
+

✓ Policy Review

✓ Annual Incident Response Table Top

✓ Customer Questionnaire Support

Assisted Premium

$5,000/month

Everything in
Assisted Plus
+

✓ Annual Risk Assessment

✓ Annual Internal Controls Review

Choosing the right plan

Self-Service Plans

Basic

The plan for companies getting started on their security journey and need a place to start without being overwhelmed.

This self-serve tier gives access to key security functions such as our 19+ security policy templates ready to be tailored to you, and task management to ensure you are able to keep track of your next steps of your security program

Complete

The right starting point for teams ready to take security seriously.

Complete gives you the full Crux Platform with continuous monitoring, risk visibility, and compliance tooling so you can build a strong security foundation without the overhead of a dedicated security team.

Assisted Plans

Assisted

For teams that want expert hands on deck.

Assisted pairs the full Crux Platform with direct support from our security team to help you prioritize findings, navigate compliance requirements, and act on what matters most. The right choice if you want a security partner, not just a security tool.

Virtual CISO

In addition to the platform tiers, Crux also offers Virtual CISO Consulting Services. In this engagement, we designate a member of our team to act as your CISO.

They participate in budgeting, hiring, tool selection, executive management reporting, and every other aspect of running a security program. The Virtual CISO gives you access to experienced leaders at a fraction of the cost of a full time CISO.

Complete Plus

Everything in Complete, expanded for organizations with broader environments or deeper compliance requirements.

Complete Plus adds increased coverage and capacity, making it a natural fit for growing companies that need more without moving to a managed model.

Assisted Plus

A deeper level of engagement for organizations managing more complex environments or accelerating toward audit readiness.

Assisted Plus extends the Assisted model with expanded coverage, more touchpoints with our team, and a higher level of hands-on guidance throughout your security program.

Assisted Premium

Our most comprehensive offering. Assisted Premium delivers the full depth of the Crux Platform with the highest level of expert involvement, including continuous collaboration, proactive guidance, and dedicated support across every aspect of your security and compliance program. Built for organizations where security outcomes are non-negotiable.

Professional Services

Compare Plans

BasicCompleteComplete PlusAssisted Tiers
Crux Security Platform access
Security program task tracking
Policy & process templates
Training videos (Security Awareness, Policy Overview, OWASP Top 10)
Vendor Management portal access
Vendor Management support
Risk Register tool access
Risk Register support
Quarterly external vuln scans (up to 50 domains / IPs)
Program review meetingsN/A
Biweekly security program review meetings
Shared Slack channel
Shared document drive
Policy ReviewAdd OnAdd On*
Annual Incident Response Table Top exerciseAdd OnAdd On*
Customer questionnaire support (up to 6/yr)Add OnAdd On*
Annual Risk AssessmentAdd OnAdd On*
Annual internal controls review, interview-based (SOC 2, NIST, ISO; deeper scope quoted separately)Add OnAdd On*
MCP Server Pen TestAdd OnAdd OnAdd On
Consulting Hourly RetainerAdd OnAdd OnAdd On
Simulated Phishing Attacks (O365 or Google Workspace)Add OnAdd OnAdd On
Discount on Network and Application Pen Tests5%5%10%-20%

Ready to get started?

Build a comprehensive security program using our proven model.