Welcome to Compliance Labs

Compliance Labs connects software vendors with organizations seeking cybersecurity compliance solutions.
Our testing services boost credibility by evaluating and showcasing your software.

Select your plan to get listed as a vendor

Get Listed

Ideal for vendors beginning
their compliance journey.
$ 0 /month, forever

  • Features:

    • Access to compliance-relevant software solutions and their Compliance Assurance Evaluation (CAE) reports.
    • Browse 50 evaluated solutions, selected to cover every software category. Your own listing is always fully accessible.
    • Submit 1 software for a baseline CAE report. Compliance Labs reviews public documentation and maps capabilities and software contribution as stated to the regulations and frameworks in scope.
    • Compliance Labs maps your software to up to three regulations and frameworks from a standard set, including PCI DSS, HIPAA, GDPR, NIST CSF, NIST SP 800-53, and MITRE ATT&CK, with no selective scoping.
    • Benchmarking: capabilities and regulatory mapping compared to competing vendors, plus sector insights.
    • Annual regulatory notice: you are informed when a regulation in your scope changes and your listing may be affected.
    • Listing health summary twice a year: what your public documentation supports, and where examined evidence would extend your coverage.
    • One RFP-ready extract of your listing per year, clearly marked Vendor-Stated, for use in buyer responses.
Get started

Get Proven

Ideal for vendors actively
pursuing compliance.
$ 549 /month, billed annually

  • Everything in Get Listed, plus:

    • Access to 1000+ compliance-relevant software solutions and their Compliance Assurance Evaluation (CAE) reports.
    • Submit 1 software for a full CAE report. Compliance Labs reviews your proprietary documentation (technical manuals, installation guides, configuration references) plus SBOM, internal documentation and audit reports, and independently confirms capabilities and software contribution as examined across the regulations and frameworks in scope.
    • Coverage extended to up to 10 regulations and frameworks aligned with your target markets, drawn from a library of 40+.
    • Report refreshed twice a year, covering new regulations, capability changes, security vulnerabilities and MITRE updates.
    • Quarterly regulatory alerts when regulations change with impact on your evaluation.
    • Compliance Labs Examined badge on your listing, kept live for twelve months.
    • Pre-audit evidence pack: your CAE report formatted for QSA, ISO and DORA assessor requests.
    • Annual analyst briefing: one session with a Compliance Labs analyst on your regulatory position.
    • Unlimited RFP-ready extracts of your listing.
Get started

Get Scale

Designed for vendors deeply
engaged in compliance practices.
$ Custom pricing

  • Everything in Get Proven, plus:

    • Submit 1 software for an Evidence Effectiveness Evaluation (EEE) report. The EEE extends the documentary examination to direct testing. Compliance Labs independently tests your software and verifies its capabilities and contribution, providing the technical evidence expected by assessors such as QSA, ISO and DORA, in a structured audit dossier included in the EEE report.
    • Dedicated compliance analyst: one point of contact across evaluation, regulatory changes and audit preparation.
    • Monthly performance report covering evaluation results and compliance posture.
    • Full access to exclusive resources: tools, guides, templates, and policies. Accelerate compliance work with ready-to-use materials.
Contact sales

Find the right plan for your compliance journey

FeaturesStarterGrowthEnterprise
Access to compliance-relevant software solutions
Submit 1 software
Regulatory frameworks included135
Benchmark software features
Save, export, and share vendor lists
Compliance Assurance Evaluation-
Evidence Effectiveness Evaluation--
Full access to compliance testing reports-
Dedicated performance dashboard-
Analyst support via email-
Monthly regulatory alerts-
Unlimited resources: guides, templates, policies--
Direct sharing of compliance reports--
Dedicated compliance analyst--

Already have an account? Log in

Not a vendor? Sign up as a member

Select the fields to be shown. Others will be hidden. Drag and drop to rearrange the order.
  • Vendor
  • Category
  • CL Tier
  • Short description
  • Website
  • What it is
  • Best for
  • Does NOT do
  • CL verdict
  • Regulatory coverage
  • Frameworks tested
  • Capabilities
  • MITRE ATT&CK
  • Strengths
  • Cautions
  • Anti-hype claims
  • Operational metrics
  • Evidence pack
Compare
Compare ×
View comparison Continue browsing software