Choose Starter when
You need stakeholder contacts, Essential Eight reporting or an ISM document pack, and the assessor does not need to work inside SecBoost.
Pricing
Choose by assessment workflow, not by a long feature table.
Starter covers Essential Eight reporting, stakeholder contacts and ISM documentation. Standard adds assessor-managed assessment workflow and final OSCAL/CCM outputs. Enterprise adds Teams, tasks, workflow gates and multiple organisations.
Starter
$7k/year + GST
Best for SMBs and small teams starting Essential Eight or ISM documentation work.
- ✓One organisation and one assessed system
- ✓Multiple projects for that assessed system
- ✓20+ plans, policies, standards and reports
- ✓Full ISM support, updated for March 2026
- ✓Wizard-based project creation
- ✓SSP Annex and Control Matrix Excel import
- ✓Essential Eight dashboard, index and report
- ✓Evidence attachments for controls
- ✓Contacts and stakeholder records
- ✓Asset library for logos, diagrams and contact lists
- ✓Passkey and TOTP MFA
- ✓Five users and 5 GB storage
- ✓Business hours email support
- ✓One hour onboarding and training
- ✓SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Standard
$12k/year + GST
Best when an assessor needs to log in and perform assessment work inside SecBoost.
- ✓Everything in Starter
- ✓Assessor-managed control workflow with assessment steps
- ✓Assessors can perform assessment work inside SecBoost
- ✓Assessors can return controls to editing when more information is needed
- ✓Customisable roles and permissions
- ✓10+ registers including hardware, training and evidence
- ✓Completed CCM and OSCAL SSP and Assessment Results exports
- ✓Up to two assessed systems, each with multiple projects
- ✓20 users and 20 GB storage
- ✓AI-generated implementation suggestions
- ✓Optional Jira integration
- ✓Business hours priority phone support
- ✓SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Enterprise
Contact us
Best for multiple organisations, multiple systems, delivery teams and portfolio assurance.
- ✓Everything in Standard
- ✓Multiple organisations, assessed systems and projects
- ✓Teams and task assignment
- ✓Task reminders, escalation and reporting
- ✓Custom workflow gates
- ✓Portfolio assessment workflow with completed CCM and OSCAL exports
- ✓SSO with just-in-time provisioning
- ✓Custom domain
- ✓On-premises deployment option
- ✓SECRET and TOP SECRET classification support
- ✓Unlimited users
- ✓Configurable storage
- ✓Extended support, custom training and quarterly reviews
Choose Standard when
An assessor, consultant or internal reviewer needs user access to perform assessment work and produce final OSCAL and completed CCM outputs.
Choose Enterprise when
You manage multiple customers, organisations, systems or delivery teams, and need tasks, Teams, SSO or custom workflow gates.
FAQ
Pricing questions
Common questions about choosing the right SecBoost tier for Essential Eight, ISM and IRAP workflows.
Which SecBoost tier should a small team start with?
Starter is usually the right fit when the team needs Essential Eight reporting, ISM documentation, stakeholder contacts and evidence records for one assessed system, and the assessor does not need to work inside SecBoost.
When should we choose Standard?
Choose Standard when an assessor, consultant or internal reviewer needs to log in, review controls, complete assessment steps, return controls for more information, and produce final OSCAL and CCM outputs from the platform.
When is Enterprise needed?
Enterprise is designed for teams managing multiple organisations, multiple assessed systems, delivery teams, tasks, custom workflow gates, SSO, custom domains or deployment requirements beyond the standard hosted tenancy.
Do prices include GST?
Published Starter and Standard prices are listed per year plus GST. Enterprise pricing depends on organisation count, assessed systems, users, storage, deployment model and support requirements.