Portal plans, per product line
Compliance monitoring
Watch
US$290 a month per product line
No setup fee · minimum 3 months
Choose it when
- You already sell, and a rule change or an expired certificate could stop the next shipment.
- Buyers keep asking for documents you answered last year.
Included
- Rules watched every day for every country you sell in
- Your product checked every month, dated in your report
- Certification expiry calendar
- Your existing buyer answers and evidence kept current
- Monthly report in your language
Priced separately
Vulnerability assessment
Respond
US$990 a month per product line
US$990 setup · minimum 6 months
Choose it when
- Researchers, customers or a buyer's IT team can report a flaw any day, and nobody on your side owns the answer.
- You sell in the EU: since September 11, 2026, actively exploited flaws must be reported within 24 hours.
- New flaws turn up in the components you ship every week.
Included
- A public address for vulnerability reports
- Reports received 24/7, weekends included: an engineer on call starts triage and drafts the EU 24-hour early warning for you to submit
- Triage with your engineers, CVE coordination and advisories
- EU Cyber Resilience Act 24-hour, 72-hour and 14-day reports prepared for you to submit
- Watch on known flaws in your components (SBOM)
- 2 fix credits a month: small fixes an agent drafts and an engineer approves
- One new buyer questionnaire a quarter
Priced separately
Data privacy
Operate
US$590 a month per product line
US$990 setup · minimum 3 months
Choose it when
- A buyer asks where the data goes, and today the answer is a cloud abroad.
- Your engineers abroad need access, and the buyer wants every access logged.
- Users send privacy requests, and the law gives you 30 days to answer.
Included
- Everything in Watch
- Product data hosted in Canadian and US data centers: a private slice or a private AI server
- Data map: one diagram and table of every data flow, kept current
- Access from abroad separated and logged
- Privacy notices for each market from counsel-reviewed templates
- Privacy and data requests answered within 30 days
- One new buyer questionnaire a quarter
Priced separately
All three services
Secure
US$3,490 a month per product line
US$3,200 setup · minimum 12 months
Choose it when
- Buyer contracts ask for patch timelines, a named incident contact and yearly tests (lab tests quoted at cost).
- You run a fleet in the field, where one bad update reaches every device.
- You must show security evidence to regulators: EU CRA, FDA 524B, FCC.
- You want one accountable team instead of three vendors.
Included
- Everything in Respond (vulnerabilities) and Operate (data privacy)
- Up to two new buyer questionnaires a month
- Data passport for the product line, built in the setup and refreshed twice a year
- A named security lead and a monthly 45-minute call
- A buyer-ready report every quarter
- 6 fix credits a month for small fixes; bigger work quoted first
- A scan of every release and device monitoring, up to 2,000 devices
- Incident plan and a yearly drill
- Evidence file for buyers and regulators: EU CRA, FDA 524B, FCC
- A first answer within one business day
Priced separately
Fix credits on connected products: one credit is one small fix, up to about 30 minutes of engineer time on firmware, app or cloud code. An agent drafts it, an engineer approves it, and it reaches you as a pull request you sign. Credits come every month and roll over for two months. Bigger fixes are quoted first. Not sure what you need first? The free exposure review tells you, with a fixed price, before you sign anything.
