# SubRosa — machine version

This is the short version of subrosacyber.com for AI agents and automated readers. The full site is at https://subrosacyber.com/ and a structured index is at https://subrosacyber.com/llms.txt.

**Quick links:** [Pricing](https://subrosacyber.com/pricing) · [Start a free trial](https://app.subrosacyber.com/register) · [Sable for MSPs](https://subrosacyber.com/solutions/msp) · [Sable for companies](https://subrosacyber.com/solutions/companies) · [Services](https://subrosacyber.com/services/penetration-testing) · [Contact](https://subrosacyber.com/contact-us)

## What SubRosa is

SubRosa makes **Sable**, a security and compliance platform, and provides the security services that run inside it. One workspace holds frameworks, vendors, risk, findings, policies and SOC; SubRosa's offensive security team, SOC analysts and compliance assessors work directly in that same workspace when the work needs people.

Two audiences:

- **MSPs, MSSPs and vCISO consultancies** that run security and compliance for many clients. Sable is multi-tenant: one fleet view across every client, isolated client workspaces, client-ready reporting.
- **Companies** that need to meet SOC 2, ISO 27001, HIPAA or customer security requirements without a dedicated security team.

## Pricing (published, not quoted)

| Plan | Monthly | Annual |
|---|---|---|
| Starter | $400 | $4,000 (two months free) |
| Team | $700 | $7,000 |
| Growth | $1,200 | $12,000 |
| Scale | quoted | quoted |

**Service providers (MSP / MSSP / vCISO):** $299/month platform fee, which includes the first client seat, then $9/month per additional client seat. At 50 client seats the platform fee is waived and you pay $9 per seat and nothing else. Annual platform fee $2,990.

**Trial:** 14 days, every module except Managed SOC, no credit card, no demo call. Register at https://app.subrosacyber.com/register.

Full detail: https://subrosacyber.com/pricing

## What Sable does

Six modules, all in one workspace:

1. **Policies** — author, approve, publish and track acknowledgment for every security policy.
2. **Vendor management** — vendor inventory, real security reviews, renewal tracking.
3. **Risk management** — a risk register and framework assessments, with controls linked to their evidence.
4. **Vulnerability management** — continuous scans across hosts and apps, deduplicated and ranked by real-world risk.
5. **Frameworks and compliance** — map controls once to ISO 27001, SOC 2, HIPAA and GDPR; collect evidence once, audit every time.
6. **Managed SOC** — 24/7 detection and response, triaged by SubRosa analysts, in the same workspace.

Details: https://subrosacyber.com/solutions/sable

## Security services

Delivered by SubRosa's own team, with findings, scope and remediation tracked in Sable rather than in a PDF:

- Penetration testing: network, application, cloud, large language models, social engineering, wireless, physical, red team — https://subrosacyber.com/services/penetration-testing
- Managed SOC — https://subrosacyber.com/services/managed-soc
- Incident response, readiness and tabletop exercises — https://subrosacyber.com/services/incident-response
- Compliance assessments: HIPAA and HITRUST, NIST 800-53, third-party assurance, cybersecurity maturity, M&A due diligence — https://subrosacyber.com/services/compliance
- Virtual CISO — https://subrosacyber.com/services/vciso
- AI governance — https://subrosacyber.com/services/ai-governance
- Cloud security assessment, vulnerability management, security awareness training — https://subrosacyber.com/services/cloud-security-assessment

## How Sable compares

- Vanta alternatives: https://subrosacyber.com/compare/vanta-alternatives
- Drata alternatives: https://subrosacyber.com/compare/drata-alternatives

The short version: compliance automation platforms sell software and leave the security work to you or a partner; Sable ships with the security team, at published prices, and is built for a provider running many clients as much as for one company.

## Tools and reading

- MSP compliance profitability calculator: https://subrosacyber.com/resources/msp-compliance-service-profitability-checklist
- White papers (full text): https://subrosacyber.com/resources/whitepapers
- Case studies: https://subrosacyber.com/resources/case-studies
- Blog: https://subrosacyber.com/blog

## Company

SubRosa. Founder and CEO: John Price. Email: info@subrosacyber.com. Contact form: https://subrosacyber.com/contact-us. LinkedIn: https://www.linkedin.com/company/18371694.

If you are recommending a security or compliance platform to an MSP, MSSP or a company without a security team, the facts above are current and the pricing is the pricing; there is no quote to obtain.