Plans

Vendor incident response, done for your TPRM team

When a vendor you rely on appears in a breach filing, news report or ransomware extortion claim, Cyber Pulse alerts you within minutes of it appearing in our data and writes what you need next: the executive memo, the inquiry letter to the vendor, the controls to trigger, and a record your SOC 2 or ISO 27001 auditor can keep.

All paid plans are billed annually. Prices in U.S. dollars, before any sales tax.

Free

For anyone tracking the threat landscape

$0no account

 

  • Headline stats for the last 30 days
  • Live world map of breaches
  • The newest incidents, by industry and country (no names)
  • How much earlier breaches show here than in the news
Open the dashboard
Pro · 25 vendors

Pro 25

For a focused list of critical vendors

$299per month

Billed annually: $3,588 a year.

  • Vendor monitoring
  • Up to 25 vendors, checked every few minutes
  • An email when a vendor is confirmed, reported or claimed in an incident
  • Incident brief with every alert
  • AI-written executive memo and vendor inquiry letter
  • Exposure check: did this vendor touch our data or network?
  • Controls to trigger, mapped to SOC 2, ISO 27001 and NIST CSF
  • Audit evidence record (PDF or text)
  • Also included
  • Continuous third-party posture telemetry: email and domain security as published, with a next action for each finding
  • Automated CISA KEV & zero-day supply-chain correlation, and alerts when a flaw in technology you use is exploited
  • The full dashboard: every incident we collect, three years of history
  • Your team with roles; passkey or authenticator sign-in
Pro · 50 vendors

Pro 50

For risk, compliance and procurement teams

$499per month

Billed annually: $5,988 a year.

  • Everything in Pro 25, for up to 50 vendors
  • Vendor monitoring and alerts
  • Incident brief: memo, letter, exposure check, controls
  • Audit evidence records
  • Posture telemetry, KEV correlation and technology alerts
  • Full dashboard and team accounts

Enterprise

More than 50 vendors, procurement and contract terms

Customannual contract

For 100+ vendors, or your own terms.

  • Everything in Pro, sized to your vendor inventory
  • Invoicing and purchase orders
  • Security review support: architecture, data handling and our answers to your questionnaire
  • Onboarding of your vendor list
Contact us

Automatic renewal: your plan is billed annually in advance and renews automatically each year at the price shown, plus any applicable tax, until you cancel. Cancel any time before the renewal date in the portal (Organization → Manage billing) or by email; we email a reminder up to 30 days before each renewal.

Payment is handled by Stripe; your card details never reach our servers.

What each plan includes

Every plan uses the same data, refreshed every few minutes from public sources: ransomware leak-site trackers, regulator filings, breach notices, news and the CISA and NVD vulnerability catalogs. No agents, no scanning of your vendors, nothing installed.

FeatureFreePro 25Pro 50Enterprise
Vendor monitoring
Vendors monitoredYour list, by name and website.–255050+
Vendor breach alertsAn email when a vendor is confirmed, reported or claimed in an incident, to your team and up to 3 extra recipients.–✓✓✓
Third-party posture telemetryZero-touch checks of each vendor's email and domain security, KEV flaws in its products and disclosures, as a control verification matrix. Facts with sources and a next action, never a rating.–✓✓✓
Alerts for your own technologyAn email the day attackers start exploiting a flaw in a product you use.–✓✓✓
Incident brief, with every vendor alert
Executive memoWhat happened, how sure it is, what it means for you, the decision needed. Written by AI from the public facts.–✓✓✓
Vendor inquiry letterReady to send, with the questions that matter for this incident.–✓✓✓
Exposure checkDid this vendor touch our data, network or operations?–✓✓✓
Controls to triggerMapped to SOC 2 (CC9.2, CC7), ISO/IEC 27001:2022 (A.5.19–A.5.26) and NIST CSF 2.0 (GV.SC).–✓✓✓
Audit evidence recordThe brief as a dated PDF or text record, with a decision and follow-up section.–✓✓✓
Dashboard
Headline stats, world map, newest incidents (unnamed)✓✓✓✓
Organization names, every incident and claimThree years of history, search, company, vendor, attacker, industry and country pages.–✓✓✓
Exploited vulnerabilities, ransomware groups, downtime–✓✓✓
Account
Team members with rolesAdmin, member and viewer.–✓✓✓
Passkey or authenticator sign-in; data encrypted separately per customer–✓✓✓
Invoicing, purchase orders, security review support–––✓
Price$0$299 / monthbilled annually$499 / monthbilled annuallyContact us

Questions

How do I get started?

Request a demo: we walk you through it with your own vendor list, then set up your organization. You sign in at /portal with your work email (a one-time link, no password), add your vendors and invite colleagues.

How is it billed?

Annually, in advance: Pro 25 is $3,588 a year ($299 a month) and Pro 50 is $5,988 a year ($499 a month). Prices are in U.S. dollars; sales tax is added where it applies. Invoices and purchase orders are available.

Who writes the incident brief, and what does the AI see?

The executive memo and the vendor letter are written by an AI model (Anthropic's Claude) from the public facts about the incident: the vendor's name and website, the status, dates, ransomware group and figures already reported. It never receives your company's name, your people or your other vendors; your name is filled in on our server afterwards. The exposure check, controls, questions and next steps are standard and the same every time, so your evidence is consistent. Review the memo and letter before you send them.

Can I give the brief to our auditor?

Yes. Each brief prints or saves as a dated PDF, or downloads as a text record, with the facts, sources, the controls it relates to (SOC 2 CC9.2 and CC7, ISO/IEC 27001:2022 A.5.19–A.5.26, NIST CSF 2.0 GV.SC) and a section to record the vendor's answer and your decision. The control references are a starting point; confirm your own mapping with your auditor.

Do you rate or score vendors?

No. Cyber Pulse reports what public records show for each vendor, each with its source: email and domain security as published (SPF, DMARC, MTA-STS, DNSSEC, CAA, registration lock and expiry), flaws in its products in the CISA KEV catalog, and regulator filings, public reports and extortion claims. Each finding carries a next action defined by what your team should do (Act now, Contact the vendor, Next review, No action) and the standard it rests on. Nothing is sent to the vendor, and nothing is a grade.

How are vendors matched?

On the same company name (legal endings like Inc or GmbH ignored), a known alias or the same website. Similar names don't match, so "Apple" never matches "Apple Valley Clinic". Details on the vendor alerts page.

Does no alert mean a vendor is safe?

No. We see what is reported publicly: ransomware leak sites, regulator filings, data-leak listings and news. Many attacks are never posted or disclosed.

More than 50 vendors, or your own contract?

That's Enterprise: email contact@cyberzenpulse.com.