Featured guide
Create and assess a risk
Learn how to complete CIA and FAIR assessments, add controls, assign treatment actions and manage risk exceptions.
Read the guide
Straightforward GRC pricing
Governance software that grows with your organisation.
Start free, then move to a paid plan when you are ready to run your governance programme fully. PurpleWASP keeps entry pricing visible while allowing larger organisations to scale capacity, onboarding and service around their real requirements.
One connected platform
Documents, assets, risks, FAIR analysis and ISO 27001 are available across the plan family.
Transparent starting prices
Essentials and Growth show clear annual starting prices so organisations understand the entry point before contacting sales.
Community stays free
Explore the workflow with controlled allowances before deciding whether a paid governance programme is right for you.
Annual subscription pricing
Flexible payment arrangements may be available for qualifying organisations.
Starting prices shown in GBP.
Taxes are calculated separately where applicable.
-
Essentials
For small organisations establishing a structured governance, risk and compliance programme without enterprise software costs.
Typically suitable for organisations with up to 50 employeesFrom£ 2,995per year5 power users
50 participantsFull document management and approval workflowsAsset management, import and classificationQualitative and FAIR quantitative risk assessmentFull ISO 27001 workspace, evidence and workflowsCompliance registers and audit managementBusiness continuity and supplier governanceUp to 50 documentsUp to 100 assetsUp to 50 active risksSelf-service onboarding and email support -
Most Popular
Growth
For organisations coordinating governance across larger teams, expanding compliance requirements and higher operational volumes.
Often suitable for 50–500 employees, depending on programme complexityFrom£ 7,995per year10+ power users
150+ participantsEverything in EssentialsHigher-capacity packages for larger governance programmesFull FAIR, ISO 27001 and compliance workflowsGuided onboarding availablePriority support optionsFrom 200 documentsFrom 500 assetsFrom 200 active risks -
Enterprise
For complex, regulated and multi-entity organisations requiring contracted capacity, tailored implementation and service commitments.
Complex requirements or large-scale deploymentsCustom pricingtypically from scoped around capacity, implementation and service requirementsCustom power users
Custom participants and record allowancesAll current PurpleWASP modulesContracted document, asset and risk capacityCustom power-user and participant allowancesFull ISO 27001, FAIR and compliance workflowsDedicated implementation planningConfiguration and administrator workshopsDedicated customer success contactContracted support and service levels
Prices exclude VAT, sales tax and other applicable taxes. Annual subscriptions are billed in advance unless an alternative payment arrangement is agreed. Published allowances are the standard starting package; higher Growth capacity and Enterprise requirements are confirmed in the quote or order form.
Compare Plans
Three commercial paths. One connected platform.
PurpleWASP keeps the core governance journey connected. Essentials establishes a structured governance programme, Growth supports broader operational scale and higher capacity, and Enterprise covers complex requirements that need contractual allowances or tailored implementation. Community remains a separate free entry point.
| Capability | Community | Essentials | Growth | Enterprise |
|---|---|---|---|---|
| Power users / participants | 1 / 10 | 5 / 50 | From 10 / 150 | Custom |
| Documents | 5 | 50 | From 200 | Contracted |
| Asset records | 10 | 100 | From 500 | Contracted |
| Active risks | 5 | 50 | From 200 | Contracted |
| FAIR scenarios | 1 | No scenario limit | No scenario limit | Contracted |
| Document management | Basic | Full | Full | Full |
| Asset register, import and classification | ✔ | ✔ | ✔ | ✔ |
| Qualitative risk management | ✔ | ✔ | ✔ | ✔ |
| FAIR quantitative assessment | 1 scenario | ✔ | ✔ | ✔ |
| ISO 27001 workspace | View and export | Full | Full | Full |
| ISMS Manual | Edit enabled | Full | Full | Full |
| SoA, evidence, audits and registers | View and export | Create, edit and workflow | Create, edit and workflow | Create, edit and workflow |
| Business continuity, suppliers and training | View and export | Create, edit and workflow | Create, edit and workflow | Create, edit and workflow |
| Exports | ✔ | ✔ | ✔ | ✔ |
| Support | Help Centre | Email support | Standard; priority options | Contracted service level |
| Onboarding | Self-guided | Self-service | Guided option | Custom implementation plan |
The table reflects the capabilities and limits currently implemented in PurpleWASP. SSO/SCIM, public APIs and webhooks are not advertised until they are production-ready. Integrations are named publicly only after the relevant provider connector has completed production validation.
Founding Customer Programme
Early-customer benefits without a permanent discount model.
The first 25 paying organisations can receive launch incentives in return for structured product feedback. Eligibility and the final commercial package are confirmed before purchase.
First year
Up to 30% off
Second year
Preferential pricing
Launch support
Onboarding included
- Price protection for the first 24 months
- One configuration review
- Quarterly roadmap and feedback sessions
- Direct access to the product team
- Early access to selected product improvements
- No testimonial, logo or case-study use without separate approval
Trials and Pilots
Evaluate PurpleWASP before committing.
Use the no-card self-service trial to explore the connected platform, or choose a structured pilot when your evaluation needs higher allowances, guided configuration and agreed success criteria.
Self-service trial
30 days · FreeExplore paid-plan access across documents, assets, risk, FAIR and ISO 27001 with trial allowances.
- Essentials-level access to current PurpleWASP modules
- Sample policies and guided setup content
- No credit card required
- Customer-created data retained for 30 days after expiry
Guided pilot
90 days · Tailored scopeEvaluate Growth or Enterprise with configuration support and an agreed success plan.
- Allowances agreed for the pilot scope
- Configuration workshop and success criteria
- Structured administrator guidance
- Any pilot fee and subscription credit are agreed before the pilot begins
Capacity and Onboarding
Scale Growth before moving into Enterprise.
Growth can be quoted with higher user and record capacity when a standard allowance is not enough. Enterprise is reserved for requirements that need contracted capacity, tailored implementation or service commitments.
| Capacity or service | Approach |
|---|---|
| Additional Growth power users | Higher-capacity Growth quote |
| Additional Growth participants | Higher-capacity Growth quote |
| Additional document, asset or risk capacity | Growth capacity package or Enterprise |
| Guided onboarding | Quoted before purchase or included in the agreed package |
| Enterprise implementation planning | Scoped in the proposal and order form |
Find the Right Plan
Choose the package that fits your governance programme.
Tell us how many people will manage the platform, your governance and compliance scope, the approximate number of documents, assets and risks you expect to manage, and the level of onboarding or support you need. Organisation size provides context, but it does not determine your plan on its own.
Frequently Asked Questions
Pricing questions, answered.
Yes. The self-service trial lasts 30 days, requires no credit card and provides paid-plan access with trial allowances. A structured 90-day guided pilot is also available for organisations that need configuration support and agreed success criteria.
The three commercial plans are Essentials, Growth and Enterprise. Essentials is designed for organisations establishing a structured governance programme, Growth supports larger or more complex programmes with higher capacity and service needs, and Enterprise covers contracted capacity or tailored implementation requirements. Community is a separate free entry point rather than a commercial tier.
No. Employee ranges are guidance only. PurpleWASP recommends a plan based on the people who will use and participate in the platform, governance and compliance scope, document, asset and risk volumes, and the onboarding or service level required. A smaller organisation with complex requirements may therefore need Growth or Enterprise, while a larger organisation with a straightforward programme may fit a lower tier.
Power users are enabled or invited users whose assigned organisation roles provide administrative, management, ownership, contribution or approval capability. Every other enabled or invited user is a participant, including users who have not yet been assigned an organisation role. Accounts awaiting a required password reset remain counted.
Community includes 5 documents, 10 assets, 5 active risks and 1 FAIR scenario. Essentials includes 50 documents, 100 assets and 50 active risks. Standard Growth starts at 200 documents, 500 assets and 200 active risks, with higher-capacity Growth packages available by quote. Enterprise allowances are agreed contractually.
Community can review and export the ISO 27001 compliance workspace and can edit the ISMS Manual. Creating or changing compliance register records, linking evidence and using approval workflows requires a paid plan.
Yes. Community can create one FAIR scenario so organisations can experience the quantitative workflow. Paid plans currently have no FAIR scenario limit.
Yes. Growth can be quoted with higher user and record capacity before an organisation needs Enterprise. Enterprise is used when requirements need contracted allowances, tailored implementation or service commitments.
Not currently. PurpleWASP does not advertise these capabilities until they are production-ready. When introduced, their packaging and availability will be stated clearly.
The published Essentials and Growth figures are standard annual starting prices. A quote may be higher where you need increased user or record capacity, guided implementation or a broader agreed service scope. Any change from the starting price is shown before purchase.
No. Public prices exclude VAT, sales tax and other applicable taxes. The selected currency is used as the basis for the quote or order form.
Community and Essentials are designed for self-guided or self-service onboarding. Guided onboarding can be included or quoted for Growth, while Enterprise implementation is scoped as part of the commercial proposal. Eligible Founding Customers receive onboarding support as part of the programme.