Pricing
Transparent pricing.
Start with the foundation, not the overkill. Most SMBs don't need enterprise GRC on day one — pick the plan that fits where you actually are, and upgrade when you're ready. Every plan includes the autonomous AI engine.
Start on your own in minutes, no sales call needed. Managing several companies or need a custom setup? Talk to us.
Interactive scoping
What compliance or security level do you actually need?
Take 60 seconds to select your stage and see your exact risk requirements. No sales pitch, no pushy follow-ups.
Not sure which frameworks apply to you? Try our Scoping Calculator.
Risk intelligence pricing — from $25/mo.
Four plans. Every one includes the autonomous AI engine — the difference is scope, frameworks and seats.
Scarlet Go
Start understanding your risk.
Month-to-month, billed monthly
Essential risk awareness for small teams getting started with compliance and security basics.
Runs on its own: a weekly State Intel Briefing in your inbox.
Unlimited Risk Reviews
- AI risk assistant — ask anything about compliance, regulations, and cyber risk
- GRC policy generator
- Cyber risk checklist + risk score
- Risk Register Lite (up to 10 risks)
- State Intel Briefing — weekly digest
- World Watch — preview only (locked)
- 1–10 seats
- AI support assistant + email support (48hr response)
Scarlet Pro
Risk intelligence for growing teams.
Month-to-month, billed monthly
Full compliance toolkit plus weekly threat briefings scoped to your industry and region.
Runs on its own: twice-weekly state briefings, a weekly industry threat digest and regulatory alerts.
Unlimited Risk Reviews · Unlimited Policy Generation
- Everything in Scarlet Go
- Unlimited AI Work — risk reviews, policies, and executive briefings
- Full Risk Register — unlimited risks, owner assignment, remediation tracking, exportable reports
- SOC 2, HIPAA, CMMC, PCI DSS compliance frameworks
- Incident Response Playbook generator — step-by-step breach response plan built for your business in minutes
- Vendor risk reviews — up to 5 assessments per billing period
- State Intel Briefing — twice weekly
- Industry threat digest — weekly briefing scoped to your sector
- Regulatory alerts — new rules and deadlines translated into action
- World Watch — daily global threat map preview
- 11–49 seats
- AI support assistant + email support (24hr response)
Scarlet Elite
Enterprise-grade intelligence. SMB price.
Month-to-month, billed monthly
The full Scarlet Intelligence platform — daily global threat intelligence, company-specific risk scoring, and enterprise-grade compliance at a fraction of enterprise cost.
Runs on its own: everything in Pro, plus daily World Watch updates and guidance tuned to your company profile.
Unlimited AI Work · The foundational risk layer above whatever tooling you already run.
- Everything in Scarlet Pro
- Unlimited AI Work — unlimited risk reviews, policy generation, and executive briefings
- Scarlet Intelligence company profile — Scarlet learns your tech stack, industry, and risk posture and applies it to every policy, briefing, and recommendation automatically
- World Watch — global threat dashboard refreshed daily with incident markers, threat feeds, and cyber threat intelligence
- Company-profile-based risk guidance and prioritized recommendations — not external attack-surface scanning
- Credential exposure checks — continuous credential monitoring is coming soon
- Vendor risk reviews — up to 25 assessments per billing period
- Audit-ready evidence exports + control mapping — organized exports and documentation for SOC 2, HIPAA, and PCI audits
- BAA generator — HIPAA Business Associate Agreements ready in minutes
- 50–99 seats
- AI support assistant + email support (same day response) + live chat during business hours
Scarlet Team
Built for multi-user teams and MSP end-clients.
Month-to-month, billed monthly
Everything in Elite, with scope agreed for 100+ seats and partner-managed needs. Talk to us about your access, reporting, and workspace requirements.
Runs on its own: everything in Elite, across your team or clients.
Talk to usUnlimited Agent Actions
- Everything in Scarlet Elite
- Multi-user and role requirements agreed during scoping
- AI tool activity logging — not a comprehensive audit trail of every platform action
- Board-ready reporting — generate executive summaries on demand
- MSP client-workspace requirements reviewed during scoping
- SSO / SAML — discuss availability during scoping
- Priority onboarding and quarterly business review
- 100+ seats and custom scope — Talk to us
- Priority email + chat support (same-day response, business hours)
À la carte add-ons
Risk Intelligence Reports
Buy reports individually, or get all five included with Elite and Team. Pro includes a basic Compliance Risk Predictor score; the other reports are purchased separately.
Comparable one-time risk reports from consulting firms and automated platforms typically run $200–$10,000+. Ours start at $79.
Compliance Risk Predictor
Paste your company description, select your frameworks, get a predicted risk score with your top 3 exposure areas and recommended next steps.
Vendor Risk Report
Paste a vendor name and description. Get a third-party risk assessment covering compliance gaps and due-diligence flags.
Policy Gap Audit
Upload your compliance policies and get a structured gap analysis mapped against SOC 2 or HIPAA requirements.
Board-Ready Risk Report
A one-time executive summary of your risk posture, formatted for board presentation. Built for CFOs and CCOs.
Incident Response Playbook
A custom IR playbook based on your company size, industry, and frameworks. Built once, used every time.
Scarlet Intelligence works with your existing tech stack. Already using other security or compliance tools? Scarlet Intelligence works alongside your current setup.
Scarlet AI Governance
then $10,000 per year to keep it current
A risk-scored inventory of every AI tool your team uses, a policy drafted to the findings, and reports for audits, customer reviews and insurers.
Add-ons
Bolt on what you need
Add-ons attach to an existing subscription. Cancel any time.
Shadow AI Lite
Find the AI tools your team is actually using, understand the exposure they create in plain English, and turn each finding into a decision — block, approve with guardrails, or monitor. Findings flow straight into your risk register, policy library and a staff notice.
Requires Scarlet Pro or above.
Need something custom — deeper permissions, a specific workflow, or a unique integration? Professional services are available on request.
For everyone, not just auditees
Not pursuing a certification?
Scarlet Risk works for you too. Our platform is designed for any company that wants to understand and manage risk — not just the ones with an upcoming SOC 2 audit.
Talk to us
Book a Call
Have questions about which plan fits your team? Schedule a quick 30-minute call.
Self-guided
Not sure where to begin?
See a stage-by-stage roadmap of what companies your size usually need — and what comes next.
Pricing FAQ
Questions we get a lot.
Common questions.
- What is Scarlet Risk?
- Scarlet Risk is an AI-powered risk-intelligence platform that helps small businesses identify, prioritize and manage cyber, AI, vendor and compliance risk in one place — instead of across spreadsheets, inboxes and separate tools.
- Who is it for?
- Small businesses without a dedicated compliance team, and the MSPs and IT advisors who manage risk programs on behalf of their clients. Small business is the primary audience; partners get a dedicated MSP Hub.
- How long does setup take?
- Less than 20 minutes. Answer a short set of questions and get policies, a cyber checklist and a risk register, refined as you add evidence.
- Do I have to replace my existing security tools?
- No. Scarlet Risk adds a governance and risk-intelligence layer over the security, cloud, identity and compliance tools you already run. No agent is required for the initial assessment — connect what helps, and enter the rest.
- How does pricing work?
- Plans start at $25/month. Billing is month-to-month and you can cancel any time from Settings.
- Is a sales call required?
- Start on your own in minutes, no sales call needed. Managing several companies or need a custom setup? Talk to us.
More detail on pricing and the platform.
For procurement
Procurement process? No problem.
Send us your RFP, security questionnaire, or vendor packet. Our AI completes it — typically within one business day — with answers your security and legal teams can verify line-by-line.
Stop guessing.
Start knowing.
See where you're exposed and what to fix first, in less than 20 minutes.