Transparent pricing · AUD excl. GST

Compliance at
MSP scale

One platform. Every client. Essential Eight, ISO 27001, APRA CPS 234 and 20+ frameworks — automated.

Month-to-month billing Cancel anytime Export everything, anytime No proprietary lock-in
Recommended: Growth — the smallest plan that fits your client count today, with room to grow.
Starter
$599/mo
For MSPs getting started with security compliance. Up to 10 clients.
Start 14-day trial
Included
Up to 10 clients
Essential Eight & 20-framework audits
Automated AWS + M365 audits
Risk register
Remediation playbooks
On-prem agent
AI vCISO reports
Dark web monitoring
Phishing simulation
Growth
$999/mo
For MSPs with an active compliance practice. Up to 25 clients.
Start 14-day trial
Everything in Starter, plus
Up to 25 clients
AI vCISO reports
Client Health Score
Insurance Posture auto-fill
Regulatory alerts
Staff Risk Scoring
Evidence Packages
Dark web monitoring
White-label client portal
Enterprise
$3,999/mo
For large MSPs and MSSPs managing compliance at scale. Unlimited clients.
Talk to us
Everything in Professional, plus
Unlimited clients
Awareness training & Copilot governance
Custom SLA & dedicated success manager
SSO / SAML
Full API access
Data residency options
Volume pricing available

Add-ons

Available on Growth and above. Cancel any add-on independently.

AI Governance

AI inventory, risk classification, ISO 42001 and NIST AI RMF compliance mapping, and vendor attestations. Built for MSPs helping clients govern AI tool usage before regulators ask.

$299
/mo

Service Desk

Unified ticketing, client request portal, SLA tracking, CSAT surveys, and quote-to-invoice workflow. Embedded inside Graften — no separate helpdesk platform, no base fee.

$49/seat
/mo (1–3 seats) · drops to $29/seat at 11+ · or $399/mo Unlimited

Common questions

What counts as a "client"?
One end-customer organisation. You can connect multiple M365 tenants, AWS accounts, or on-prem agents to a single client. Graften itself doesn't count against your limit.
Is there a free trial?
Yes — all paid plans include a 14-day full-access trial. No credit card required to start.
Is pricing in AUD?
Yes, all prices are in AUD and exclude GST. Australian customers have 10% GST added at checkout. For NZ or UK billing, contact hello@graften.io.
Can I switch plans?
Upgrades take effect immediately, prorated. Downgrades take effect at the end of the current billing period.
What happens to my data if I cancel?
Data is retained for 30 days after cancellation. You can export audit history, risk registers and compliance reports at any time.
What frameworks does Graften cover?
Essential Eight, ISO 27001, APRA CPS 234 & 230, NIST CSF, SOC 2, HIPAA, CMMC, Cyber Essentials, NDB, Privacy Act 1988, NZ Privacy Act, NZISM, GDPR, MAS TRM, PDPA, PIPEDA and more. See docs.graften.io.
Where is my data hosted?
All AU data is hosted on AWS ap-southeast-2 (Sydney). Enterprise plans include data residency options for NZ and UK clients.
Do you offer volume discounts?
Enterprise plans include volume pricing for large MSPs and MSSPs. Email hello@graften.io to discuss.

Start your free trial today

14 days, full access. Set up your first client in under 5 minutes.

Get started free →
No credit card required · Cancel any time · Not sure where you stand? Take the 30-second Essential Eight self-check →