Plan 01
Anchor
$209/yr
billed annually
For the first SOC 2 you owe a customer.
- SOC 2 framework template
- 15 integrations
- Automated evidence collection
- Email support
SPEC 00 · price list
Compliance should cost less than the spreadsheet.
Three annual plans, priced by how big your audit is, not by how many seats you have. Pick the framework you owe someone this year and go.
billed annuallyFIG. 00 · the whole menu
- 01Anchor
one framework, 15 integrations$209/yr - 02Bulwark
four frameworks, auditor portal$339/yr - 03Citadel
unlimited, with a compliance manager$589/yr
SPEC 01 · plans, billed annually
Pick the size of your audit.
One price per year, no seat counting. Every plan collects evidence automatically from day one; the plans differ in how many frameworks, integrations and auditors you bring.
Plan 02
Bulwark
$339/yr
billed annually
For teams answering to more than one framework.
- Up to 4 frameworks
- 60+ integrations
- Vendor risk tracking
- Auditor portal access
Plan 03Most picked
Citadel
$589/yr
billed annually
For security teams that run compliance as a program.
- Unlimited frameworks
- SSO and SCIM provisioning
- Custom control library
- Dedicated compliance manager
SPEC 02 · side-by-side
Every line, in one grid.
What each plan includes, read straight across. Nothing here is hidden behind an add-on.
| Capability | Anchor | Bulwark | Citadel |
|---|---|---|---|
| Pricebilled annually | $209/yr | $339/yr | $589/yr |
| FrameworksSOC 2, ISO 27001, HIPAA | SOC 2 template | Up to 4 | Unlimited |
| IntegrationsAWS, GitHub, Okta and more | 15 | 60+ | 60+ |
| Automated evidence collection | |||
| Vendor risk tracking | Not included | ||
| Read-only auditor portal | Not included | ||
| SSO and SCIM provisioning | Not included | Not included | |
| Custom control library | Not included | Not included | |
| Support | Dedicated compliance manager |
SPEC 03 · sizing guide
Which one is yours?
Answer by the thing that is actually due: a customer questionnaire, a second framework, or an auditor who wants a seat at the table.
A customer asked for your SOC 2 report
Start on Anchor. The SOC 2 template, 15 integrations and automatic collection cover AWS, GitHub and Okta, and you keep email support when a control needs explaining.
Sales wants ISO 27001 and the auditor wants a login
Move to Bulwark. Up to four frameworks share the same evidence, vendor risk tracking lives beside your controls, and your auditor gets the read-only portal instead of a zip file.
Compliance is now somebody’s whole job
Choose Citadel. Unlimited frameworks, SSO and SCIM so access follows your identity provider, a custom control library for your own policies, and a dedicated compliance manager.
SPEC 04 · billing notes
The billing fine print, in plain text.
Q1What exactly am I billed for?
One flat annual fee for the plan you pick: $209, $339 or $589. There are no per-seat or per-integration meters on top, and the price on this page is the price on the invoice.
Q2When does the charge happen?
Once, when you get access, covering twelve months. It renews on the same date each year, and we send a reminder by email before the renewal goes through.
Q3How do I cancel?
Switch off renewal from workspace settings, or email contact@eddystoneworks.com and we will do it for you. Your plan stays active until the end of the paid year, and your evidence history stays exportable.
Q4Can I move up a plan mid-year?
Yes. Email us when your frameworks or auditors outgrow your plan and we will move you up to the next tier. Collected evidence and mappings carry over untouched.
Q5Does the auditor need a paid seat?
No. Auditor portal access is part of Bulwark and Citadel, so inviting your audit firm adds nothing to the invoice.
Ready when your next auditor is
Make audit week the dullest week of the quarter.
Pick a plan, connect AWS, GitHub and Okta, and let the evidence folder file itself. Your auditor gets a link; you get your Fridays back.
Get access