What does each vendor publish?
Vanta lists four plans (Essentials, Plus, Professional, Enterprise) with questionnaire allowances of 25 and 144 per year on Plus and Professional. Drata lists Foundation (up to 50 FTEs, one pre-mapped framework), GRC Advanced and GRC Enterprise. Sprinto publishes Foundation's contents in detail, including 20 AI questionnaires per year, and a Growth tier. Scytale lists startup bundles (Build Starter, Build DFY, Build Stronger) and Scale and Enterprise plans for security teams, with consulting and a pen test in the DFY and Stronger bundles. Comp AI says it does not hide a rate card but presents it on a 20-minute call, and names frameworks, company size, timeline and audit and security needs as price drivers. Delve links no pricing page.
How can you compare without prices?
Write down what you need in the units vendors use: frameworks now and next, headcount, questionnaires per year, whether you need an audit and a pen test, and whether you want expert services. Then ask every vendor to quote the same bundle, with year-two terms.
What hides in a bundle?
Bundles can include services that are add-ons elsewhere: Scytale's Build DFY lists LaunchReady Consulting and a black box web app pen test; its Build Stronger lists StayReady Consulting and a gray box pen test. Vanta's Essentials includes access to expert partners, which is access, not the partner's fee. Compare what is included, not only the headline.
What about guarantees?
Comp AI states a money-back guarantee on its pricing form. Ask any vendor that offers a guarantee what the conditions are and whether they apply to the audit or only to the software.
What should a quote request include?
Send each vendor the same short brief: the frameworks you need now, the ones you expect within 12 to 24 months, your headcount today and next year, questionnaires received per year, whether you need an audit arranged, whether you need a pen test, and whether you want a dedicated expert or are happy with support channels. Ask for the price of each item separately and as a bundle, the renewal terms, and what happens to price when you cross a headcount or framework limit. With the same brief to all six, the quotes become comparable even though none of the vendors publishes a price list.