Three packages. Quoted per scope.
Pick the one that matches where you are today. Move up by switching modules on, not by starting over.
Starter
A first audit, one framework
For a team getting its first SOC 2, HIPAA or ISO 27001 program in motion and wanting evidence and audit packs in one place.
- GRC + Audit modules
- 1 framework from the catalog of 48
- One-click PDF audit packs
- Sign-in with Entra ID, Google or any OIDC provider
- Email support
Growth
RecommendedSeveral frameworks, regulated work
For ops and security teams running more than one framework who also want scanning, vendors, contracts and privacy on the same data.
- + Vendor, Vulnerability, Pen test, Contracts, Privacy
- 3 frameworks
- 13 scan engines, plan-driven scans
- AI teammate with persistent memory
- Email + shared Slack channel
Enterprise
Several entities or strict data rules
For organizations that need several deployments kept in step, signed evidence, or no outbound calls to a hosted model.
- All modules
- All frameworks in the catalog
- A deployment per entity, patched together
- Air-gapped mode with a local or self-hosted LLM
- Audit packs signed with AWS KMS or your own signing command
- Named engineer
Dedicated deployment per customer · AWS · US regions
Tier comparison matrix
| Side by side | Starter | Growth | Enterprise |
|---|---|---|---|
| GRC module | |||
| Audit module | |||
| Vendor risk module | – | ||
| Vulnerability module (13 engines) | – | ||
| Pen test module | – | ||
| Contracts module | – | ||
| Privacy program | – | ||
| Frameworks | 1 | 3 | All 48 |
| Per-tenant OIDC sign-in | |||
| Dedicated AWS deployment | |||
| Several deployments, one patch stream | – | – | |
| Air-gapped mode | – | – | |
| KMS-signed audit packs | – | – | |
| Support | Email + Slack | Named engineer |
Common questions.
Do you publish prices?
Not yet. Cost depends on how many frameworks, modules and deployments you need, and we have not priced enough deals to publish a fair anchor. Tell us your scope and we will quote it.
Can we start small and add modules?
Yes. Modules are switched on per tenant, so adding one does not mean a second implementation project.
How is it deployed?
Each customer gets its own container service and its own Postgres database on AWS. Nothing is shared with another customer. Deployments have run in two US regions; there is no EU region yet.
Is there self-serve signup or a free trial?
No. There is no hosted multi-tenant service to sign up for, and no public demo tenant right now. We set up a walkthrough instead, on your own AWS read-only credentials and an Entra ID connection if you want to see evidence collection against your accounts.
How does this work with the tools we already run?
opsnite reads from AWS, Microsoft, Jira, Confluence, Slack and a few others today. Okta, ServiceNow, Qualys, Tenable and some more are built but have not run against a live system yet. The integrations page lists each one. It replaces standalone GRC, vendor risk and contract tracking. It does not replace your ITSM.
Do you have a SOC 2 report?
No. opsnite has no external audit reports yet. If that is a hard requirement for your procurement, we are not the right fit today.
Ready for a quote?
Tell us your frameworks, the modules you need and how many deployments. We’ll come back within one business day.