The security platform that runs your whole program.
Frameworks, risk, vendors, policies, findings, and SOC — together in one workspace, run the way security actually gets run.
14 days · No credit card · SOC free during trial
Security Posture
NorthwindOne platform. Built for the way security actually gets run.
One workspace for the whole program.
Policies, vendor management, risk register, framework assessments, vulnerability scans, and managed SOC — all in the same tenant. Shared identity, shared audit trail, shared reporting.
Everything is connected.
Frameworks map to controls. Controls map to evidence and policies. Risks link to mitigation tasks. Findings flow into one queue. Update one node and the graph stays current — including your board report.
Built for one team or one hundred.
Run your own program in a single tenant, or run programs for every client you protect. Multi-tenant from day one, with isolated client workspaces, role-based access, per-tenant module control, and fleet dashboards.
Frameworks Library
Browse compliance frameworks and spin up assessments.
Six modules. One tenant. One audit trail.
Everything a modern security program needs in one workspace — without bolt-on integrations or duct-taped CSVs.
Policies
Author, approve, publish, and track acknowledgment for every security policy your program needs.
Vendor management
Build your vendor inventory, run real security reviews, and stop being surprised by renewals.
Risk management
A real risk register and framework assessments, with controls that link to the evidence behind them.
Deep dive↓Vulnerability management
Continuous scans across hosts and apps, deduplicated and ranked by real-world risk.
Deep dive↓Frameworks & compliance
Map controls once to ISO 27001, SOC 2, HIPAA, and GDPR. Evidence once, audit forever.
Deep dive↓Managed SOC
24/7 detection and response, triaged by SubRosa analysts, in the same workspace as everything else.
Deep dive↓More than a feature list.
A risk register that does something.
Real likelihood × impact scoring, controls linked to the evidence backing them up, and mitigation work that lands on someone's desk with a due date — not a spreadsheet that goes stale between audits.
- →Risk register with likelihood × impact scoring
- →Framework assessments: ISO 27001:2022 and GDPR, more in flight
- →Controls linked to risks, evidence, and policies
- →Mitigation tasks with owners and due dates
Risk Register
NorthwindEnable KMS on production DB backups
R-001 · Owner MR · Due Friday
Map once. Audit forever.
Controls map to frameworks, evidence, and policies in one graph. Update a control once and everything connected to it stays current — including your audit trail and board report. ISO 27001:2022 and GDPR ship today; SOC 2, HIPAA, NIST CSF, and CIS are in flight.
- →One controls graph shared across every framework
- →Evidence collected once, reused everywhere it applies
- →Assessment progress tracked control by control
- →Tamper-evident audit log behind every change
Frameworks Library
Browse compliance frameworks and spin up assessments.
CC6.1 · Access control policy
Synced to every mapped framework
Find it. Fix it. Prove it's fixed.
External scans against your IPs, ports, and web applications, deduplicated into a findings inbox your team actually finishes. Every finding gets an owner, a due date, and a retest — and SubRosa pentest findings land in the same queue.
- →External scans against IPs, ports, and web applications
- →Findings inbox with CVSS-scored severity
- →Owner assignment, due dates, and retest workflow
- →SubRosa pentest findings land in the same queue
Vulnerability Dashboard
▶ New scanStored XSS · /admin/users
CVSS 9.1 · found by web pentest
Always watching. Never a black box.
24/7 detection across Office 365, Entra ID, Defender, and your endpoints — triaged by SubRosa analysts before it reaches you, and escalated with full context. Every event, telemetry trend, and incident lives in the same workspace as the rest of your program.
- →24/7 detection across Office 365, Entra ID, Defender, and endpoints
- →Triaged by SubRosa analysts before it reaches you
- →Escalations arrive with the full event timeline
- →Every event and incident in the same workspace
Security Operations
Feed status · 24hImpossible-travel sign-in · Entra ID
Triaged by SubRosa · escalated to you
Ten clients or a hundred. One pane of glass.
Multi-tenant from day one. A fleet dashboard that shows health across every client tenant, per-tenant module control, and SubRosa running SOC for the clients who need it — without you staffing 24/7.
- →Fleet dashboard. Health across every client tenant: findings, incidents, risk, vendor coverage, overdue tasks.
- →Per-tenant module control. Policies for one client, the full stack plus SOC for another. Configured per tenant.
- →Managed SOC integration. SubRosa runs SOC for the tenants who need it. You stay in the loop without staffing 24/7.
- →White-label ready. Your clients see views designed for them — under your brand.
Client fleet
5 tenants · 2 need attentionPer-tenant isolation · tamper-evident audit log · role-based access
The other options, and what Sable changes.
You don't have to bolt on vendor management, vulnerability scanning, or SOC.
Sable is one tenant, one bill, one set of users. The whole program lives together, not glued through Zapier and CSVs.
A hardened multi-tenant platform — granular access controls, a tamper-evident audit trail, and ready-made framework libraries — already in production.
You don't write the platform; you run your security program on it. The hard parts are already shipped and battle-tested by SubRosa's team.
Modern stack, modern UX. Per-client billing built in.
Your analysts and your clients see views designed for the work they actually do, not a 2014-era console nobody wants to log into.
Plays nicely with the tools your team already runs on.
Native connectors across identity, endpoint, cloud, observability, and operations — built for the stack you already have, not one you have to migrate to.
Don't see your tool? Tell us what you run and we'll route it to product.
Pick the plan that fits. Upgrade as you grow.
Every plan starts with a 14-day free trial — no credit card, every module except Managed SOC. Annual billing gets two months free.
Starter
Solo operator or very small team running the basics.
or $4,000/yr — 2 months free
Start 14-day trial- ✓1 active framework
- ✓Up to 25 vendors
- ✓Policy library
- ✓Findings management
- ✓1 user
Team
Small teams formalizing risk and controls into a real program.
or $7,000/yr — 2 months free
Start 14-day trial- ✓Everything in Starter
- ✓2 active frameworks
- ✓Up to 75 vendors
- ✓Risk & controls tracking
- ✓Up to 3 users
Growth
Growing security or GRC team that needs the full GRC stack.
or $12,000/yr — 2 months free
Start 14-day trial- ✓Everything in Team
- ✓Unlimited frameworks
- ✓Unlimited vendors
- ✓Full risk + controls
- ✓Engagement scoping
- ✓Up to 5 users
Scale
Mid-market and enterprise programs with custom needs.
Contact sales for pricing
Talk to sales- ✓Everything in Growth
- ✓SOC integration
- ✓MSP multi-tenant
- ✓Custom controls
- ✓SSO
- ✓Dedicated success
Running security for many clients?
Multi-tenant from day one — fleet dashboard across every client, per-tenant module control, white-label ready, Managed SOC provisioned per tenant. Custom per-tenant pricing.
Trial & billing questions, answered.
No. The 14-day trial requires no credit card and no demo call. Create an account and start using the platform immediately.
Start your 14-day trial. No card. No call.
Spin up your workspace and run every module except Managed SOC free for 14 days. Add SOC and the services team whenever you're ready.