What do vendors publish about their plans?
Less than you might expect, and it varies. On the pages we read on 2 February 2026, one vendor in our lineup published a price: Secureframe lists Fundamentals at Starting at $7,500/year. Several others publish plan names and what each plan includes, without a price. A few publish neither.
The detail that matters for a switch is usually in the limits rather than the price.
Which limits matter most when switching?
- Headcount. Drata's Foundation plan covers up to 50 FTEs.
- Frameworks per plan. Drata Foundation includes 1 pre-mapped framework, limited to SOC 2, ISO 27001, Cyber Essentials, HIPAA or GDPR. Vanta Essentials covers one framework. Secureframe Fundamentals covers 1 compliance framework. Scytale's Build Starter bundle includes 1 framework with add-ons.
- Questionnaires. Vanta lists 25 a year on Plus and 144 on Professional; Sprinto lists 20 a year on Foundation; Secureframe places questionnaire automation on Complete.
- Add-ons. Drata lists additional frameworks and user access reviews as add-ons on Foundation.
What do plan pages usually leave out?
Contract length, renewal terms, what happens to your data when you leave, and what the vendor will import from your old platform are rarely on a public plan page. Neither is the price for most vendors. These are the questions to put in writing during procurement, because they decide how easy your next switch will be.
How do you compare plans across vendors?
Match on what you need, not on plan names. Write your needs as a short list (headcount band, frameworks for the next 12 months, questionnaires a year, audit route, pen testing) and check each finalist's plan page against it. Our switch planner does this for the limits that vendors publish and flags each one your answers would hit.
What should you get in writing?
- The plan name and every limit that applies to you.
- The price for your headcount and frameworks, and how it changes if either grows.
- Data export: what you can take with you, in which formats, and for how long after the contract ends.
- What the vendor will import from your current platform.
What if a vendor publishes no plan page?
Ask for the plan sheet in writing before the first demo. A one-page list of plans, limits and add-ons takes a vendor minutes to send, and it turns the demo into a check of specifics rather than a tour. If a vendor will only discuss limits on a call, write down what you were told and send it back by email so both sides agree on it.