Discover everything devguard offers, then choose the plan that fits. Start for free and upgrade the moment you need more.
Everything you need, fully unlocked tailored to your organization.
Free-tier limits are permanent and may change over time, but we never delete data you have already created.
| Feature | Free | Business |
|---|---|---|
| PlatformInvite your team and run as many organizations as you need. | ||
| OrganizationsRun as many organizations as you need, each fully isolated. | ||
| UsersInvite your team into the workspace. | 3 | Unlimited |
| Employee portalA portal-only seat where employees read policies, complete trainings and tasks, provide evidence and report incidents. | ||
| Auditor accessA read-only seat for the certification auditor or internal audit: inspect every register, change nothing | ||
| External contactsKeep contacts without an account on the roster to reference them in reviews and roles, at no seat cost | ||
| RolesBusiness roles that carry ownership and approvals, independent of permissions. | ||
| IntegrationsGitHub, GitLab, Jira and Slack, connected through tools you control. | ||
| Comments & mentionsDiscuss any item in place and pull colleagues in with an @-mention. | ||
| API & tokensAutomate devguard over the REST API with access tokens. | ||
| MCP serverPoint Claude, Cursor or any MCP client at your data for read-only questions. | ||
| AI assistantOpt-in drafts from your own data, reviewed by you, never silent. | 10 requests / month | 1000 requests / month |
| Custom brandingShow your own logo and colors on vendor questionnaires and reports | — | Unlimited |
| Client mandatesA portal of its own for consultancies and MSPs: every client organization in one portfolio, under your brand, one licence per client and five to start | Business plan only | From 5 licences |
| SupportEmail support from the team that builds devguard. | No support | Email support |
| GovernanceAdopt regulatory frameworks and map their controls with full coverage tracking. | ||
| PoliciesVersion, approve and map every policy to its controls. | 10 | Unlimited |
| TrainingsAssign trainings to your team and track who has completed them. | 2 | Unlimited |
| RecordsMeeting minutes, access requests, management reviews | 10 | Unlimited |
| ProcessesChecklists your people work through on a cadence, and forms they file when something goes wrong | 3 | Unlimited |
| FrameworksOfficial frameworks out of the box: ISO 27001, SOC 2, GDPR and more. | 1 | Unlimited |
| Custom frameworksAuthor your own framework and controls when the official ones aren’t enough. | 1 | Unlimited |
| ControlsScales with the frameworks you adopt. | ||
| Control coverageLive coverage per control, rolled up per framework, gaps visible early. | ||
| ReportsPDF reports straight from the workspace, from SoA to management summary. | ||
| Trust CenterA public, read-only view of your posture, served over an API you embed. | ||
| RiskDocument policies, manage your risk register, and pass certification audits. | ||
| AssetsOne inventory: the scope your controls and reviews map to. | 100 | Unlimited |
| EntitlementsWho has access to what, through onboarding, offboarding and access reviews. | 100 | Unlimited |
| Device monitoringA lightweight agent checks disk encryption, antivirus, firewall, screen lock, Find My and OS updates hourly and can lock a lost laptop remotely, phones are confirmed by their owners | 3 | Unlimited |
| Device app policyDefine which applications must or must not be installed | — | Unlimited |
| RisksScore, treat and review risks from one register. | 100 | Unlimited |
| Treatment actionsConcrete remediations tied to the risks they address. | 10 | Unlimited |
| Risk template cataloguePopulate the register from BSI IT-Grundschutz, ENISA, CSA, OWASP and NIS2/DORA templates in one step | ||
| Asset & risk reviewsRecurring reviews that keep both registers current. | 4 | Unlimited |
| VendorsYour third parties, with owners and reassessment dates. | 2 | Unlimited |
| Vendor assessmentsPoint-in-time snapshots with scores, findings and recommendations. | 2 | Unlimited |
| External vendor questionnairesInvite vendors to fill out questionnaires via a secure link | — | Unlimited |
| IncidentsRecord security and data incidents, with GDPR breach-notification deadlines | 10 | Unlimited |
| ComplianceTrack your IT inventory, entitlements, devices, and third parties. | ||
| Security questionnairesAnswer the security questionnaires your customers send you, with a reusable answer library | 2 | Unlimited |
| AuditsInternal audits with findings carried to closure. | 4 | Unlimited |
| Integration checksAutomated checks that collect evidence from your tools | 1 | Unlimited |
| Audit-log retentionHow long the who-did-what-when trail is kept. | 1 month | 3 years |
| ActionsAutomated runs on a schedule, or when you trigger them. | 4 | Unlimited |
| AcronymsA shared shortcut list, referenced across policies, risks and frameworks. | ||
| DeadlinesEvery review and renewal on one calendar, with an iCalendar feed. | ||
| DefinitionsClear terms used consistently across your documents. | ||
| LabelsTags that group and filter across risks, assets and policies. | ||
| LocationsWhere you work and host, grouped across your content. | ||
| RoadmapPlan open tasks toward an audit-ready target date. | ||
| SchedulesRecurring cadences that drive reviews and due dates. | ||
| TasksSeeded when you adopt a framework, plus your own. | ||
| VariablesNamed values reused consistently across your documents. | ||
Start free, upgrade to Business when you outgrow the limits, or book a short call to scope the move and the price.