Pricing · excluding VAT · cancel any month · free for 30 days

What secctl costs

Enter your headcount and you see straight away what Awareness, RiskCompass and the collection cost. Every price is on this page. secctl sells to organisations, not to consumers.

Everyone who gets an account counts. From 1 to 1,000.

For 50 employees

ProductPer monthPer year
Awareness IB·01Security training for staff€131.75€1,317.50
RiskCompass IB·02Risk register and policy, unlimited users€99€990
Information security collection IBAwareness and RiskCompass together, 15% off€196.14€1,961.40

Awareness starts with a starter package of €83 a month, including 25 employees. Beyond that you pay per extra employee. RiskCompass has one price per organisation.

Pay per year and you pay up front, for 10 months out of 12. All amounts exclude VAT.

For comparison: one day of consulting costs €1,050.

Try it free for 30 daysNo payment details. It stops by itself if you don’t choose to continue.

If your environment isn’t ready within one working day, your first paid month is free.

Awareness: €83 a month for 25 employees

Beyond that per extra employee, in bands. Each band applies only to the employees in it, so 51 employees never costs less than 50. Pay annually and you pay ten months for twelve.

IB Information security

Awareness

Available

Included: baseline test and auto-trainer for every employee · every training at every level, including the ones added later · 8,000+ quiz questions kept up to date by secctl · phishing and red-flag exercises · Human Risk Score per person, department and organisation, as PDF and Excel · a certificate per completed training · sign in with Microsoft, or with a second factor or passkey · your own logo and colours · Dutch and English · hosting in the EU, or in the Netherlands only · support by email.

From €83 a month, including 25 employees

Awareness price bands, excluding VAT
EmployeesPer monthPer year
1 to 25, starter package€83€830
26 to 50, per extra employee€1.95€19.50
51 to 250, per extra employee€1.75€17.50
251 to 1,000, per extra employee€1.45€14.50

More than 1,000 employees? Book a call through the contact page and you get a tailored price.

RiskCompass: €99 a month per organisation

By the size of your organisation, unlimited users. How many people work in RiskCompass doesn’t change the price.

IB Information security

RiskCompass

Available

Included: risk register · assessment framework with versions · signals · treatment plans with KPIs · policy documents as PDF and Word · Excel export · audit log · Dutch and English · hosting in the EU, or in the Netherlands only · support by email.

From €99 a month per organisation

RiskCompass price by organisation size, excluding VAT
EmployeesPer monthPer year
Up to 50€99€990
51 to 250€199€1,990
251 to 1,000€349€3,490

Take Awareness and RiskCompass together and you get 15% off the total. That is the Information security collection; the calculator at the top works it out.

Active Directory assessment: a fixed price per assessment

secctl assesses your Active Directory with 51 checks and shows which routes an attacker could take through your Windows network. The price depends on the number of enabled user accounts.

PT Penetration testing

Active Directory assessment

Service

Included: an intake, a written scope, the assessment itself, a report with the findings ranked by risk and what to do about each one, a one-hour debrief and one retest within 90 days. You arrange written consent from someone authorised to sign for your organisation, and access to the network. Fixing is done by your own administrator or supplier; travel costs for an on-site assessment are agreed up front.

From €2,950 per assessment

Active Directory assessment price by environment size, excluding VAT
EnvironmentPrice per assessment
Up to 250 accounts, one domain€2,950
251 to 1,000 accounts, one domain€4,450
1,001 to 2,500 accounts, or several domains in one forest€6,950

Consulting: €1,050 a day, €135 an hour

For an ISO 27001 project, interim CISO work, or help with a customer’s security questionnaire. Excluding VAT.

Consulting starts with a 30-minute call about what you need and whether there is time for it. That first call is free.

Book a call30 minutes, at a time that suits you.

How your trial works

30 days, with your own staff or your own risks, no payment details.

  1. You request an environment. It's ready within one working day. You don't give any payment details.
  2. You add your staff or your risks. So you can already see where your organisation stands during the trial.
  3. A week before the end, you get an email. It shows what you've built up and what continuing costs for your headcount.
  4. On day 30, you decide. Continue, and you get an invoice at the end of every month. Do nothing, and the environment stops. You pay nothing.
  5. You can export your data at any time. During the trial too, as PDF, Excel or Word.

Questions about paying

What you want to know before you start.

Do I have to give payment details for the trial?

No. secctl only asks for your invoicing details once you decide to continue after 30 days.

How do I pay?

By invoice. Pay monthly and you get an invoice at the end of every month. Pay yearly and you get one invoice up front for the whole year.

How do I cancel?

By email, with no notice period. Your cancellation takes effect at the end of the current month. A yearly subscription runs until the end of the year you have paid for.

How does secctl count employees, and what if we grow or shrink?

Every month, Awareness counts the employees who have an account. That number is on your invoice. Grow and you pay more; shrink and you pay less. On a yearly subscription you pay up front for the headcount at the start, and growth is billed pro rata. For RiskCompass the headcount of your organisation applies.

How do the bands work?

Each band applies only to the employees in it. For 100 employees you pay the starter package of €83 for the first 25, 25 times €1.95 and 50 times €1.75: €219.25 per month. That is why 51 employees never costs less than 50.

Can the price change?

The price is fixed for the current month or year. If it changes, you'll hear at least two months in advance, and you can cancel free of charge.

Do schools and non-profits get a discount?

No. Everyone pays the same price, and it is on this page.

Do we get a data processing agreement?

Yes. It's on the site, under Legal in the footer of every page. You don't need to ask for it.

What happens to our data when we cancel?

As long as your environment exists, you can download your reports and documents, and every employee can download their own data. After your subscription ends, secctl deletes the environment, so download what you want to keep before then.

Try it with your own team for 30 days

You won't need payment details. Rather talk first? Pick a time that suits you.

Try it free for 30 daysNo payment details. It stops by itself if you don’t choose to continue.
Book a call30 minutes, at a time that suits you.