Priced to your program, not per checkbox.
One platform for compliance, pentesting, and AI governance. Pick the scope that fits, and add frameworks without switching tools.
Startup
Your first framework, fast.
Custom
Billed annually
- One framework (SOC 2 or ISO 27001)
- All native integrations
- Continuous monitoring
- Trust Center
- Compliance agent
Growth
RecommendedMultiple frameworks, pentest included.
Custom
Billed annually
- Unlimited frameworks on one control set
- Penetration testing included
- AI governance & AI System Register
- Questionnaire automation
- Custom roles and RBAC
- Priority support
Enterprise
Scale, controls, and assurance.
Custom
Billed annually
- Everything in Growth
- Custom and in-house frameworks
- Scheduled pentests
- Audit logging
- Dedicated support and onboarding
- Security review and DPA
Pricing questions, answered.
How is Varman priced?
Pricing is based on the frameworks you run and your company size. Book a demo and we will scope a plan to your program, with no per-seat surprises.
Is penetration testing really included?
Yes, on Growth and Enterprise. Pentests run on demand or on a schedule, and findings flow into your evidence and remediation tasks.
Can I run more than one framework?
Growth and Enterprise support unlimited frameworks on a single control set, so the controls you satisfy count toward every framework that references them.
Do you cover AI governance?
Yes. The AI System Register, EU AI Act risk tiers, and ISO 42001 with AI policy templates are built in on Growth and above.
How long does onboarding take?
Integrations are self-serve, so you can connect your stack and see live posture as soon as credentials are in. Enterprise includes dedicated onboarding.