Sentinel
One framework, watched properly.
$199/yr
billed annually
- 1 compliance framework
- Up to 25 monitored users
- 20 integrations
- Automated evidence collection
Pricing · billed annually
For the Team That Wants One Price, Paid Once a Year
Three plans, named for the places a flame is kept. Choose by the number of frameworks you carry and the number of people inside the perimeter. Every plan includes read-only connectors and the auditor portal.
01 The plans
Sentinel, Bastion, Citadel
Each is billed annually in US dollars. Pick the one that matches the standards you answer to today; the record builds itself from the first connection.
Bastion
For teams carrying several frameworks at once.
$279/yr
billed annually
- Up to 3 frameworks
- 150 monitored users
- Vendor risk questionnaires
- Access review workflows
Citadel — recommended plan
For organisations that answer to many auditors.
$560/yr
billed annually
- Unlimited frameworks
- Unlimited users
- Custom control libraries
- SSO and SCIM
- Dedicated compliance advisor
Prices are in US dollars per year, billed annually. Each plan includes read-only connectors and the auditor portal.
02 The ledger
Every Line, Side by Side
Read across a row to see exactly where one plan ends and the next begins.
| Included | Sentinel | Bastion | Citadel |
|---|---|---|---|
| Annual price | $199 | $279 | $560 |
| Compliance frameworks | 1 | Up to 3 | Unlimited |
| Monitored users | Up to 25 | 150 | Unlimited |
| Integrations | 20 | Full library | Full library |
| Automated evidence collection | |||
| Vendor risk questionnaires | — | ||
| Access review workflows | — | ||
| Custom control libraries | — | — | |
| SSO and SCIM | — | — | |
| Dedicated compliance advisor | — | — |
Read-only connectors and the auditor portal come with every plan.
03 Choosing
Which Flame Are You Keeping?
You carry one standard
A single SOC 2 report is what the next customer asked for, and a team of up to twenty-five keeps the scope small. Sentinel tests that one framework around the clock and files the evidence as it is produced.
Sentinel · $199/yrYou answer to two or three
SOC 2 for buyers, ISO 27001 for procurement, HIPAA for the health accounts. Bastion adds vendor questionnaires and access reviews, so one tested control counts toward every standard.
Bastion · $279/yrYou answer to everyone
Many auditors, many teams, a control library of your own. Citadel lifts every limit, adds SSO and SCIM, and gives you an advisor who knows your scope.
Citadel · $560/yrThe Recommended Plan Is the One With No Ceiling
Unlimited frameworks, unlimited users and an advisor on call, for $560 a year.
04 On every plan
The Same Instruments, Whatever You Pay
The plans differ in reach, not in rigour. Controls are tested continuously, evidence is filed by Vestal, and your auditor reads the result in a scoped, read-only portal where every view is logged.
05 Billing, plainly
What Is Billed, and When
The short version: one invoice a year, in dollars, for the plan you chose.
What am I billed for?
One annual charge for the plan you select: $199 for Sentinel, $279 for Bastion or $560 for Citadel. Read-only connectors and the auditor portal are part of every plan, so nothing is added on top.
When does the charge happen?
At the start of your annual term, and again on the same date each year. Vestal sends an invoice to your billing contact ahead of every renewal.
How do I cancel?
From the billing page of your workspace, an owner can switch off renewal at any time. The plan stays active, and your records stay readable, until the end of the term already paid for.
Can I move to a different plan?
Yes. If you add a second or third framework, or outgrow 25 or 150 monitored users, change plan from the billing page; the new plan applies from your next term.
What happens to my evidence if I leave?
Export your framework-mapped reports and the hash-chained audit log before the term ends. The history you export is the history that occurred.
Pay Once a Year. Be Ready Every Day.
Sentinel from $199, Bastion at $279, Citadel at $560 — each billed annually, each ready to start testing on connection.