v3ndor.io
Pricing
Pricing
Priced by the inventory you actually manage.
We don't publish a fixed price list because a fixed list would mislead — the value of the platform scales with the third-party inventory it manages, and that varies by an order of magnitude between a 40-vendor mid-market team and a 1,500-vendor enterprise. This page lays out the four levers we use to build a quote so you can position your organization before the conversation.
The four pricing levers
Predictable inputs, predictable price.
Every quote is a function of these four. We share the unit math during the first sales call so there's nothing opaque about how the number was built.
Vendor inventory size
The single biggest driver. Most platform value lands when the inventory crosses ~50 active vendors; below that, a spreadsheet still works.
Operator seat count
Auditor-role + vendor-role seats don't count toward this number — only operator (write-access) users. Your write-access headcount is the right benchmark.
Framework templates in use
The pre-built questionnaire template library — 13 frameworks today, including SOC 2 + ISO 27001, NIST CSF 2.0, NIST 800-171, NIST 800-53, PCI-DSS v4.0, HIPAA, FedRAMP Moderate, GDPR, CCPA, ISO 27701, CIS v8, GLBA and NYDFS Part 500 — is included. Custom templates are a separate line item.
Integration footprint
OIDC SSO + email digests + CSV are included. SCIM provisioning and webhook event forwarding are tiered by volume.
Tier framework
Three positioning tiers. Pick the one your inventory maps to.
Every tier ships the full platform. Differences are scale, support cadence, and contract terms — not feature gates. Security defaults (SSO, audit log, encryption, tenant isolation) are at-tier-zero and never paywalled.
Starter
Up to ~75 vendors. Single security/GRC owner. SOC 2 Type I underway or fresh.
- All 13 framework templates included
- OIDC SSO (Google, Microsoft, generic)
- CSV import + export
- Email digests + Slack webhook
- Email-based support, weekday hours
- Annual contract, prorated trial credit
GrowthMost common
75–500 vendors. Dedicated GRC team. SOC 2 Type II + ISO 27001 in flight.
- Everything in Starter, plus:
- SCIM 2.0 user provisioning
- Event forwarding to your SIEM (Splunk, Datadog, Sentinel)
- Custom questionnaire templates
- Quarterly business reviews
- DPA + BAA available pre-contract
Enterprise
500+ vendors. Multi-tenant program. SOC 2 + ISO 27001 + sector-specific frameworks (HIPAA / PCI-DSS / FedRAMP).
- Everything in Growth, plus:
- Customer-managed encryption keys (BYOK)
- Dedicated CSM + technical onboarding
- Multi-region tenant data residency
- Custom SLA, named on-call
- Multi-year contract pricing
Frequently asked
The five questions every buyer asks first.
- Is there a free trial?
- Yes — every Growth + Enterprise prospect gets a 30-day evaluation tenant with a sample CSV and your IdP wired during onboarding. Starter prospects get the same evaluation tenant; we just shorten the onboarding to a single session.
- Are security features ever paywalled?
- No. SSO, audit logging, encryption, tenant isolation, and least-privilege roles are at-tier-zero defaults. The tier framework gates scale (seat count, vendor count) and operational features (SCIM, SIEM event forwarding, BYOK) — never the baseline security controls.
- Do you charge per seat?
- Operator seats only — the read-only roles (auditor, vendor-portal) are unmetered. Practically: your operator (write-access) headcount is the seat count, not the audit team you bring in for SOC 2 fieldwork.
- What contract length is required?
- Annual is the default. Multi-year contracts unlock pricing improvements in Enterprise. Month-to-month is available case-by-case during proofs-of-concept but isn't the standard motion.
- How does the quote get built?
- One discovery call (30 min) to map your inventory + framework footprint to the right tier, then a written quote within 48 hours. The unit math is shared in the call so you see exactly how the number was built.
Ready to map your inventory to a tier?
Request access for a 30-day evaluation tenant. We'll scope the right tier during the first call + send a written quote within 48 hours.