Plans and Pricing | CyberHQ.ai

Monthly Annual Save 15%

See Starter

US$4.25 / user per month tax exclusive US$3.70 / user per month tax exclusive

For organizations in discovery mode starting to map their AI footprint.

What’s included:

Shadow AI discovery, Platform Catalog, and approval workflow

Actor classification and agentic session detection

AI Discovery of agents, MCP servers, and AI tools

Coverage module and coverage gap detection

Insights: AI Maturity Ladder, time saved, department heatmap

Command Center, REST API, RBAC, and audit log

Act Professional

US$6.85 / user per month tax exclusive US$5.95 / user per month tax exclusive

For security teams with an active operations requirement.

Starter plus:

DLP rules and alert policies on AI prompts and pastes

Monitor-only and soft-block enforcement

Behavioural anomaly detection and the AI Security Score

Inbox triage, playbooks, and remediation tasks

Auto-remediation with approval, Daily Briefing, Risk Advisor

Basic attestation and Statement of Applicability export

Webhooks, SOAR endpoints, Jira and ServiceNow

Endpoint sensor, vendor risk intelligence, and Threat Intel

Prove Ultimate

Speak to us

For formal AI governance audits, autonomous agents, or board reporting.

Professional plus:

ISO 42001, NIST AI RMF, EU AI Act, MITRE ATLAS

Three-lines-of-defense chain, auditor portal, signed evidence

Exposure Chains with estimated Annualized Loss Expectancy

AI-agent governance: inventory, delegation trails, suspension

Endpoint sensor, vendor risk intelligence, Threat Intel

Request blocking and automatic remediation, switched on by you

Iris assistant, Chain Inspector, and Forensics

SSO (SAML or OIDC) and IdP connectors

40 +

AI providers monitored on a continuously expanding watchlist

< 30 mins

to full deployment, no proxy or SSL inspection required

< 48 hours

to first meaningful DLP finding

frameworks: ISO 42001, NIST AI RMF, EU AI Act, & MITRE ATLAS

Features	StarterSee	ProfessionalAct	UltimateProve
See: discover and understand AI use
Shadow AI discovery	Included. Platform Catalog and approval workflow.	Same as Starter.	Same as Starter.
Human or agent classification	Included. Every session classed as interactive, supervised agentic, or autonomous.	Same as Starter.	Same as Starter.
AI agent and MCP discovery	Included. Agents, MCP servers, and AI tools.	Same as Starter.	Same as Starter.
Coverage gap detection	Included. Prioritized remediation queue for users without the extension or sensor.	Same as Starter.	Same as Starter.
AI productivity analytics	Included. AI Maturity Ladder, time saved, department heatmap.	Same as Starter.	Same as Starter.
Command Center and API	Included. Command Center, REST API, RBAC, and audit log.	Same as Starter.	Same as Starter.
Act: control and respond
DLP on AI prompts and pastes	–	Included. Rules and alert policies, with monitor-only and soft-block enforcement.	Same as Professional, plus request blocking and automatic remediation, switched on by you.
Behavioral anomaly detection	–	Included. Per-user baselines with plain-English explanations.	Same as Professional.
AI Security Score	–	Included. One 0 to 100 posture score with PDF export.	Same as Professional.
Triage and response	–	Included. Inbox, playbooks, remediation tasks, and auto-remediation with approval.	Same as Professional.
Integrations	–	Included. Webhooks, SOAR endpoints, Jira, and ServiceNow.	Same as Professional.
Endpoint sensor	–	Included. Desktop apps, CLI tools, and background services. macOS 14+, Windows in progress.	Same as Professional.
Vendor risk and Threat Intel	–	Included. Provider residency, training, and retention practices.	Same as Professional.
Attestation	–	Included. Basic attestation and Statement of Applicability export.	Same as Professional.
Prove: evidence and governance
AI framework evidence	–	–	Included. ISO 42001, NIST AI RMF, EU AI Act, and MITRE ATLAS.
Auditor portal	–	–	Included. Three-lines-of-defense chain and signed evidence.
Risk quantification	–	–	Included. Exposure Chains with estimated Annualized Loss Expectancy.
AI-agent governance	–	–	Included. Inventory, capability maps, delegation trails, and suspension.
Iris, Chain Inspector, Forensics	–	–	Included. Iris assistant, Chain Inspector, and Forensics.
Single sign-on	–	–	Included. SAML or OIDC and IdP connectors.

How does pricing work?

You pay per user, per month, and choose from three tiers: Starter, Professional and Ultimate. Plans are billed annually in AUD, GBP or USD. Some plans can be billed monthly instead, at a slightly higher rate. The minimum is 25 users.

Can I start on one tier and upgrade later?

Yes. Many organisations start on Starter or Professional to get visibility and control first. They move to Ultimate once their AI compliance requirements are formalised, for example ahead of an ISO 42001 certification or EU AI Act obligations.

Which tier is right for my organisation?

Choose Starter if you need to see how AI is being used across your organisation, from shadow AI to data-loss risks. Professional is for teams ready to act on what they find, with alert triage, custom DLP rules, incident response and the AI Security Score. Ultimate is the best fit if you need to prove compliance and enforce policy at scale, including attestation against ISO 42001, NIST AI RMF and the EU AI Act, AI-agent governance and hard enforcement blocking.

What does deployment involve?

Very little. The Chrome/Edge extension rolls out through your existing MDM (Google Workspace, Jamf or Intune) or a self-service enrolment wizard. An optional endpoint sensor covers desktop AI apps and command-line tools on macOS, Windows and Linux. You don't need a proxy, SSL certificates or any network re-routing, and it works alongside your existing CASB or SWG.

Does Avertro offer volume discounts?

Yes. Per-user pricing goes down automatically as your user count grows, starting at 51 users. If you require, a large amount of users, contact us for a custom quote.

What is an AI Security Command platform?

An AI Security Command Platform gives a business a continuous, evidence-backed picture of how AI is actually being used across the organization, from first shadow AI discovery through data protection, agent oversight, and audit-ready compliance. CyberHQ.ai is built to sit alongside your existing security stack, not replace it, and to answer three questions on an ongoing basis: how is AI being used right now, what does that usage expose you to, and can you prove you have control.