Pricing built around your program.
Every deployment is custom, with no limit on seats. One platform, scoped to your organization.
- 0capabilities across the platform
- < 6weeks from contract to go-live
- 1business day to a scoped proposal
What's included
Every capability. One deployment.
Pricing varies by deployment scope, organization size, frameworks, and support tier.
01Risk management
- Risk register with full audit trail
- Ophidia AI risk scoring and pattern recognition
- Monte Carlo simulation for quantitative exposure
- Risk appetite and tolerance thresholds
- Residual vs. inherent risk tracking
- Escalation workflows and sign-off chains
02Control management
- Centralized control library
- Automated evidence collection and scheduling
- Control testing with pass / fail / exception states
- Evidence versioning and tamper-evident storage
- Control-to-risk and control-to-asset linkage
- Gap analysis and remediation tracking
03Asset management
- Full asset inventory with ownership assignment
- Customizable metadata fields and taxonomies
- Asset lifecycle management
- Linkage to controls, risks, and compliance obligations
- Bulk import and API-driven registry updates
04Compliance
- Framework mapping: ISO 27001, NIST CSF, DORA, SOC 2
- Obligation register and due-date tracking
- Regulatory change management
- Audit-ready evidence packaging
- Board and regulator reporting templates
05Ophidia AI
- On-premise inference: no data leaves your environment
- Explainable outputs with lineage metadata
- Risk rating suggestions based on historical data
- Anomaly detection across control evidence
- Continuous learning from your assessment cycles
06Deployment and integration
- On-premise or private cloud deployment
- REST API for custom integrations
- LDAP, Active Directory, SAML 2.0, OIDC support
- Role-based access control with MFA enforcement
- Air-gapped deployment option for sensitive environments
32 capabilities across six areas.
How it's priced
Four variables. One number.
We scope these with you on one call, then send a single number. No per-seat math, no surprise add-ons.
- 01
Deployment scope
Number of business units, legal entities, or geographies running Cerpent.
- 02
Organization size
Total employee count across the organization.
- 03
Frameworks
Number of regulatory frameworks and custom control sets configured.
- 04
Support tier
From standard email support to a dedicated CSM with SLA guarantees.
One number, sent within one business day.
Get pricingPricing FAQs
Before you ask.
Anything we haven't covered, put it in the form below.
By the four variables above: deployment scope, organization size, frameworks, and support tier. There is no limit on seats. We scope the deployment with you and send one number.
Billing is annual. Payment terms are set out in your proposal.
Yes. We run pilots deployed in your environment with implementation support. Length, scope and commercial terms are agreed with each customer.
Every deployment includes installation and configuration, integration setup as defined in the statement of work, and initial user training. Larger or more complex programs are scoped separately in the statement of work.
Headcount and scope are reassessed at each annual renewal, with no automatic mid-term price change for growth. Additional modules, entities or support coverage can be added during the term by agreement.
You retain full ownership of your data. Upon cancellation, we provide a complete data export in standard formats (CSV, JSON, PDF). Data is retained for 90 days post-cancellation for reactivation purposes, then securely deleted.
Tell us about your program.
We'll come back within one business day with a scoped proposal.
- No long pitch. We ask the right questions up front.
- A proposal sized to your entities, headcount and frameworks.
- Pilots are available. We agree scope and terms with you.