Vendor Attest and Vexia IQ are priced separately — per seat, and per vendor or application. The vendors and auditors you invite are always free.
Early-access pricing — USD / month, billed annually (monthly +20%), locked for 12 months. Running both? Save 20% on the bundle.
Vendor Attest · Vendor compliance
Priced by internal seats and the number of vendors under management. Every plan includes the full framework template library, unique vendor portal URLs, compliance scoring, and PDF reports.
Trial
The full Growth feature set with sample data. No card required.
Start free trialStarter
For teams standing up a vendor compliance program for the first time.
Choose StarterGrowth
For a running program across a larger, riskier vendor portfolio.
Choose GrowthEnterprise
Unlimited scale, procurement, and security review.
Talk to sales| Vendor Attest | Trial | Starter | Growth | Enterprise |
|---|---|---|---|---|
| Capacity | ||||
| Internal seats | 3 | 5 | 15 | Unlimited |
| Vendors under management | 5 | 25 | 100 | Unlimited |
| Questionnaire sends / year | 10 | Unlimited | Unlimited | Unlimited |
| Invited vendor & auditor users | Unlimited | Unlimited | Unlimited | Unlimited |
| Assessment | ||||
| Framework template library | All | All | All | All |
| Custom questionnaire authoring | — | — | ✓ | ✓ |
| Unique vendor portal URLs | ✓ | ✓ | ✓ | ✓ |
| Evidence collection & requests | ✓ | ✓ | ✓ | ✓ |
| Compliance score & trend | ✓ | ✓ | ✓ | ✓ |
| Annual review automation | — | ✓ | ✓ | ✓ |
| Reports & sharing | ||||
| PDF reports | Watermarked | Branded | Branded | White-label |
| Active secure report portals | — | 3 | Unlimited | Unlimited |
| Custom portal domain | — | — | — | ✓ |
| AI & automation | ||||
| Vexia AI — report draft | Preview | — | ✓ | ✓ |
| Security & admin | ||||
| MFA, tenant isolation, audit trail | ✓ | ✓ | ✓ | ✓ |
| SSO / SAML | — | — | ✓ | ✓ |
| SCIM provisioning | — | — | — | ✓ |
| Audit-log retention | 30 days | 1 year | 3 years | Custom |
| Support | Docs | Priority + onboarding | TAM + SLA | |
Vexia IQ · Application security & assurance
Priced by internal seats, registered applications, and assessments per year. Every plan includes all 14 assessment types, the evidence repository, the traceability chain, findings tracking, and the application security score.
Trial
The full Growth feature set with a sample application loaded.
Start free trialStarter
For a first application security & audit program.
Choose StarterGrowth
For a running program across a portfolio of applications and auditors.
Choose GrowthEnterprise
Unlimited scale plus your own frameworks and controls.
Talk to sales| Vexia IQ | Trial | Starter | Growth | Enterprise |
|---|---|---|---|---|
| Capacity | ||||
| Internal seats | 3 | 5 | 20 | Unlimited |
| Registered applications | 3 | 10 | 50 | Unlimited |
| Assessments / year | 5 | 25 | 150 | Unlimited |
| Evidence storage | 5 GB | 50 GB | 500 GB | Custom |
| Invited vendor & auditor users | Unlimited | Unlimited | Unlimited | Unlimited |
| Assessment & audit | ||||
| Assessment types | All 14 | All 14 | All 14 | All 14 |
| Evidence repository & traceability chain | ✓ | ✓ | ✓ | ✓ |
| Findings & remediation tracking | ✓ | ✓ | ✓ | ✓ |
| Control sets | Core frameworks | Core frameworks | + custom | + private library |
| Custom assessment workflows | — | — | ✓ | ✓ |
| Ticketing integration | — | — | One-way | Two-way sync |
| Continuous assurance scheduling | — | ✓ | ✓ | ✓ |
| Score & reporting | ||||
| Application security score | ✓ | ✓ | ✓ | ✓ |
| Portfolio trend dashboards | — | — | ✓ | Executive |
| Active secure assessment portals | — | 3 | Unlimited | Unlimited |
| Vexia AI | ||||
| Report drafting | Preview | — | ✓ | ✓ |
| Risk prediction | — | — | ✓ | ✓ |
| Remediation recommendations | — | — | ✓ | ✓ |
| Security & admin | ||||
| MFA, tenant isolation, audit trail | ✓ | ✓ | ✓ | ✓ |
| SSO / SAML | — | — | ✓ | ✓ |
| SCIM provisioning | — | — | — | ✓ |
| Audit-log retention | 30 days | 1 year | 3 years | Custom |
| Support | Docs | Priority + onboarding | TAM + SLA + security review | |
Run both products. Vendor Attest and Vexia IQ on one workspace, one bill — save 20% on the combined Starter or Growth subscription, with a single SSO and audit trail across both.
Get the bundleAdd-ons
Capacity packs and services attach to any paid plan. Priced per month unless noted.
+25 vendors under management for Vendor Attest — $80/mo.
+10 registered applications for Vexia IQ — $100/mo.
+50 assessments / year for Vexia IQ — $120/mo.
+250 GB across the workspace — $40/mo.
We build and load a framework or control set to your spec — from $1,200 one-time.
An authorized test by Qcramai Security, findings delivered straight into Vexia IQ — per engagement.
Pricing FAQ
Any record that is active — not archived — during a billing month. Archive a vendor or retire an application and it stops counting toward your limit.
No. Access through a unique vendor URL or a secure assessment portal is unlimited and included on every plan, including the trial. You only pay for internal seats.
The full Growth feature set with sample data loaded and no credit card. At the end you pick a plan, or the workspace moves to read-only until you do.
Limits are soft. You’re prompted to add a capacity pack or move up a plan — nothing is deleted or blocked retroactively.
Yes, any time. Upgrades apply immediately and are prorated; downgrades take effect at the next renewal.
None of the fundamentals. MFA, per-tenant data isolation, encryption, and the full audit trail are on every plan — the trial included. SSO/SAML starts at Growth; SCIM is Enterprise.
Annual billing (versus monthly at +20%), the 20% multi-product bundle, and non-profit pricing. Talk to sales for volume terms.
Spin up a 14-day trial of either product, or tell us about your program and we’ll map it to a plan.