Essential
€700 / year
For organisations that need the security baseline — and not much else.
Just the baseline (Cybsis Baseline), single instance, Core ISMS stripped to essentials.
- Core ISMS
- Stripped
- Standards included
- 1
- Add-on modules
- None
Pricing
Three combos.
Or assemble exactly what you need.
Cybsis 2.0 is sold as a base plus modules. Pick a combo for a clear price, or use the configurator to build a bundle. Invoice-only — no payment processing on this site.
Reasonable
€2,950 / year
The full ISMS suite, one standard of choice — same price as Cybsis 1.x.
Full Core ISMS, one standard of choice, one instance.
- Core ISMS
- Full
- Standards included
- 1
- Add-on modules
- None — add à la carte
Complete
€14,950 / year
Everything Cybsis 2.0 does today — and every paid module Cybsis ships tomorrow.
17 paid modules + 3 standards bundled + 3 sub-instances. Every future paid module folds in at no extra charge — that's the load-bearing part.
- Core ISMS
- Full
- Standards included
- 3
- Add-on modules
- 17 included
All prices in EUR, exclusive of VAT. VAT is added on the invoice based on your country. Combo prices are licence-only — pick a hosting option below.
Hosting
Pick where Cybsis runs.
One licence price, three places it can live. RW Hosting is the only option with a fee attached — €300/year flat, regardless of bundle size. The other two are your infrastructure, no incremental charge from us.
RW Hosting · AWS eu-north-1
+€300/yrWe run it on Amazon's Stockholm region. Same-day updates, usage telemetry so support resolves fast, zero runtime ops on your side. Flat fee regardless of size.
Your cloud — AWS / GCP / Azure
No extra chargeRun the Docker image in your tenancy. You own the runtime; you tell us when an update is welcome. Same product, your infrastructure.
On-premise
No extra chargeFor high-security customers: your data centre, air-gapped if needed. You get the Docker image and documentation; you run it.
Add-on modules
17 modules above the Core ISMS base. Mix and match — every module is sold individually, the three combos are convenient pre-built bundles.
Federation
PlatformCross-instance read-only reporting. Hub-and-spoke for holdings, groups, and consultancies.
€2,000/yr
Ludwig — AI Security Specialist
AIA seasoned information-security specialist in chat form. Reads your live data, proposes actions you approve.
€1,500/yr
BYO keyMulti-Instance Framework
PlatformRun multiple legal entities under one tenant. Framework is free; pay €300 per sub-instance per year.
€300 / sub-instance / yr
No framework fee — pay only for sub-instances you use.
Learn more →Graph
PlatformWalk the relationships between every register — assets, risks, controls, documents, incidents, threats, audits — as a navigable map. Included in every Cybsis instance.
Included in Core ISMS
Monitoring
PlatformInternal ISMS health surface — control-implementation status, evidence freshness, review-cadence visibility. Included in every Cybsis instance.
Included in Core ISMS
Audit Trail
PlatformEvery action on every register, attributed, timestamped, searchable. The audit trail that turns "who did what, when" from a question into a query. Included in every Cybsis instance.
Included in Core ISMS
User Activity
PlatformPer-user contribution breakdown across the major registers — who's actually doing the work, in numbers. Sibling view to the Audit Trail. Included in every Cybsis instance.
Included in Core ISMS
AI Watchdog
PlatformEvery AI call logged, every Ludwig conversation measured, every euro of inference cost accounted for. Included in every Cybsis instance.
Included in Core ISMS
Internal Audit
CompliancePlan, run, and document internal audit campaigns — cycles, findings, evidence, meetings, reports.
€900/yr
System Health
PlatformReal-time view of the host server's pulse — CPU, memory, disk, database, backups, integrations, license, AI provider — all on one admin screen. Included in every Cybsis instance.
Included in Core ISMS
System Log
PlatformIn-app log viewer for the running container — DEBUG, INFO, WARN, ERROR — filterable and streamed live. Included in every Cybsis instance.
Included in Core ISMS
External Audit
ComplianceManage external audit campaigns — main audits, follow-ups, evidence packaging, external-auditor collaboration.
€900/yr
AI Assistant
AIIn-workflow AI helper. Sparkle buttons across the product for suggestions, drafts, gap analysis, and next-best-action.
€400/yr
BYO keyAI Documents
AIAI-generated long-form documents — policies, procedures, risk assessments, BCM plans — drafted from your instance data plus a questionnaire.
€600/yr
BYO keyLudwig DPO — Data Protection Assistant
AIExtends Ludwig into an assistant to your data protection officer. GDPR and Estonian data-protection law, answered from a verbatim legal corpus with act and § citations.
€900/yr
BYO keyService Provider Registry
ComplianceVendor management with control linking and contract references. NIS2 / GDPR Art. 28 ready.
€700/yr
Audit Questionnaires
ComplianceTargeted questionnaires for unmet prerequisites — manual or AI-generated, with response tracking and prerequisite cross-references.
€600/yr
Processing Activities (RoPA)
ComplianceGDPR Article 30 record of processing activities, linked to your data assets.
€700/yr
JIRA Connector
WorkflowBidirectional JIRA integration — push incidents, risks, and corrective actions into JIRA; sync status and comments back.
€700/yr
Microsoft 365 Connector
WorkflowSharePoint and OneDrive document linking via Microsoft Graph, with encrypted tenant credentials.
€100/yr
Email Triage / Service Desk
WorkflowInbound routing rules, create-incident-from-email, watchers and approvals.
€700/yr
Incident Response
WorkflowSLA tracking with business-hours awareness, automation rules, and regulatory-grade exports for incident handling.
€1,000/yr
Automation Rules
WorkflowEvent-driven workflows for incidents and tickets — "when X happens, do Y."
€700/yr
Modern Authentication
AuthenticationPasskeys (WebAuthn) with hardware-key support, Estonian ID-card via Web eID, and TARA SSO — included in every Cybsis instance.
Included in Core ISMS
Active Directory / LDAP
AuthenticationAuthenticate against AD or any LDAP directory via LDAP bind — TLS and group-restricted access included.
€100/yr
Standards
A catalogue of 28 frameworks across 9 categories, any number run side-by-side in one installation. Each pack is €600/year; we map any framework in on request, typically in about two weeks. No upper limit on concurrent standards.
- Cybersecurity & ISMS8
- Privacy & data protection4
- AI governance2
- Financial sector4
- Sector-specific3
- Quality & integrity management2
- Environmental & sustainability3
- Business continuity1
- Audit & assurance1
Need something not in the catalogue?
Industry-specific schemes (ISO 14971, IEC 62443, AS9100, HITRUST CSF, FDA 21 CFR Part 820 …), national variants, or contractual frameworks specific to your customers — mention it in the quote request. Catalogue ingestion, control mapping, and seeding takes about two weeks, after which it joins the catalogue at the same €600/year.
Before you commit
Two things worth knowing.
AI features cost only when enabled
Buying Ludwig, AI Assistant, or AI Documents adds the licence to your bundle, but no AI request leaves the platform until an administrator turns the feature on and attaches a provider key. Bring your own (OpenAI / Anthropic public key, self-hosted endpoint) or have us supply one — either way, runtime token spend is separate from the module fee.
Buyers who want the option without the runtime cost can ship with the modules installed but disabled — feature stays dormant until you flip it on.
Core ISMS is not a stub
Essential at €700 includes the full Cybsis 1.x feature set — assets, risks, controls, documents, incident log, evidence library, monitoring dashboards, modern authentication (passkeys + Estonian ID-card + TARA SSO). It's a working ISMS on day one, before any paid module is added.
The paid catalogue extends Core with things Core deliberately doesn't try to do: full audit campaigns, GDPR Article 30 records, vendor management, AI authoring, federation, sub-instances, and the integrations that hook Cybsis into your existing stack.
How buying works
- 1. Configure & request
- Pick a combo or assemble à la carte in the configurator, then submit the quote form. Six fields — no account, no demo required upfront.
- 2. We reply within 1 business day
- You'll get a quote by email with the configured bundle, the price, applicable VAT for your country, and a proposed invoice schedule.
- 3. Invoice & onboard
- After the invoice is settled, you receive Docker images, a licence, and an onboarding walkthrough. AI features stay off until you turn them on.