Simple, transparent pricing

Every plan bundles your Digital Resilience assessment, GDPR Compliance assessment, and compliance audits — no add-ons, no hidden extras.

Fortify Portal

Each tier bundles the assessments and audits your organisation needs — no add-ons required. Priced per organisation, with a per-user seat on top.

Save ~17% · 12-month commitment

Foundation

Freeforever

Best for: Solo founders and micro-businesses checking where they stand for the first time.

  • 1 user
  • 5 Ask Alex messages / month
  • Free Digital Resilience snapshot
  • Free GDPR Compliance check
  • 30-day roadmap view
  • Public Trust Center page
Get started free

Essential

£149/ month

1 user included · +£50 / additional user / month

Best for: Small teams putting their first real compliance foundations in place.

  • Digital Resilience Essential Diagnostic (£500 value)
  • GDPR "doing the basics right?" review (£500 value)
  • 1 compliance audit included
  • Expert review available on request
  • Evidence uploads & full 30/60/90-day roadmap
  • 20 Ask Alex messages / month
  • Public Trust Center page
Start Essential
Most popular

Strategic

£349/ month

1 user included · +£75 / additional user / month

Best for: Growing SMEs facing client due-diligence, CE+/ISO, or scaling risk.

  • Digital Resilience Strategic Diagnostic (£2,500 value)
  • GDPR "safe to grow?" review (£1,500 value)
  • 2 compliance audits + expert review of every result
  • Follow-on session included per assessment
  • Policy engine (10 active) + AI patch suggestions
  • Incident log, playbooks & vendor management
  • 200 Ask Alex messages / month
  • Trust Center with custom branding
Start Strategic

Advanced

£649/ month

1 user included · +£100 / additional user / month

Best for: Regulated or investor-facing firms needing continuous, audit-ready compliance.

  • Digital Resilience Advanced Diagnostic (£5,000 value)
  • GDPR "investor & audit ready" review (£3,000 value)
  • All compliance audits + expert review of every result
  • Diagnostic and implementation sessions included
  • Unlimited policies, AI patch suggestions & Ask Alex
  • Regulation change briefings + AI dependency analysis
  • Unified Action Plan & ZIP evidence export
  • Trust Center with custom branding & domain
Start Advanced

Compare all features

25 features across 5 categories

FeatureFoundationFreeEssential£149/moStrategic£349/moAdvanced£649/mo
Assessments
Digital Resilience assessmentFree snapshot · 5 sectionsEssential Diagnostic · 6 sectionsStrategic Diagnostic · 9 sectionsAdvanced Diagnostic · 10 sections
GDPR assessmentAre we exposed? · 5 sectionsAre we doing the basics right? · 6 sectionsAre we safe to grow? · 8 sectionsAre we investor and audit ready? · 10 sections
Results auto-saved to portal
Compliance audits—1 included2 includedAll 4 included
Expert involvement
Expert review of assessment results—On requestEvery resultEvery result
Follow-on sessions——1 per assessmentDiagnostic + implementation
AI assistant
Ask Alex messages5 / month20 / month200 / monthUnlimited

Common questions

How does per-user pricing work?
Every paid plan includes 1 user in the price shown — there's no charge for that first seat. Add teammates for a flat fee per plan: for example, a 5-person Essential team is £149 org base + 4 × £50 = £349/month.
What's included in a "compliance audit"?
A full guided audit against a named framework — Cyber Essentials Plus, ISO 27001, NHS DSPT, DORA, or Business Continuity — run by Fortify's AI auditor, with evidence tracking and, on Strategic and Advanced, expert review of every result. The number of audits included scales with your plan, and you choose which framework(s) apply to your business.
What are "AI patch suggestions"?
When Fortify spots a gap in one of your published policies, it can draft a suggested edit to close it. You review and approve before anything changes — nothing is published automatically. Strategic includes 10 a month; Advanced is unlimited.
What's the "Policy engine"?
A guided tool for drafting, publishing, and version-controlling your compliance policies — data protection, incident response, acceptable use, and more — directly in the portal, instead of managing separate documents.
What's the "Trust Center"?
A public page you can link from your own website showing your security and compliance posture — certifications, security practices, vulnerability disclosure process, and more — so prospects and customers don't need to ask. Available on every plan. Strategic adds your own logo and colours; Advanced adds your own subdomain, e.g. trust.yourcompany.com.

Every plan includes

Conversational AI

Alex guides you through a natural conversation — no forms, no jargon.

Personalised reports

Every assessment is specific to your business, not a generic checklist.

Your data stays yours

Never used to train AI models, never sold, never shared.

Secure by design

HTTPS throughout, session tokens, no account required for the free tier.

Not ready to subscribe?

Start with a free policy template

Real, usable GDPR, incident response, and Cyber Essentials policy documents — no account required.

Browse free templates →