For corporations and groups of companies
Enterprise / Group
More than 1,000 employees or more than 3 companies: all frameworks and modules, service level agreement and a personal contact.
Complete packages
Four packages that build on each other, plus the Praxis package for medical and dental practices. Each contains Complass Core with permissions, security, teamwork, help and training, plus the baseline protection. Frameworks and modules can be added at any time.
Prices per month, size S, net, annual payment. Compare all packages
For medical and dental practices
Practice
Typical situationYour practice has to implement the IT security guideline under Section 390 SGB V. Fixed content, for practices with up to 5 persons.
- IT security guidelineUnder Section 390 SGB V (KBV or KZBV) with all requirements for your practice size.
- IT inventoryFor up to 50 devices and programs.
- Emergency planFor outages of practice software, telematics infrastructure and internet.
- Training in the portalWith certificate of participation.
- up to 5 persons
- 3 users
- Auditor accesses free of charge, up to 5 per audit
- 2 GB
Configure Practice
from €79 per month
For companies that want to meet a specific obligation
Start
Typical situationYou have to implement a framework, for example NIS2 or ISO 27001, and do not want to start with spreadsheets, folders and email threads.
- Know where you standGuided gap analysis with an action plan for your framework.
- Evidence in one placeExportable for audit or authority.
- Report incidents on timeUnder the GDPR and, with the respective framework, under NIS2 and the CRA.
- Management kept informedDeadlines, key figures and management report.
- 1 framework
- 3 users
- Auditor accesses free of charge, up to 5 per audit
- 5 GB
For companies with several obligations and management that is accountable
Business
Everything in Start, plus:
Typical situationSeveral frameworks run in parallel, management is liable and wants to see the status itself, and an IT or site outage must not stop operations.
- Risks under controlAssess, treat and track them, linked to your measures.
- Cockpit for managementUnder Section 38 BSIG: what it has to approve and monitor.
- Prepared for outagesBusiness impact analysis, continuity plans and exercises.
- Email reports to management in preparation
- 2 frameworks
- 10 users
- Auditor accesses free of charge, up to 5 per audit
- 25 GB
For companies with plants, products or a supply chain that must be demonstrably secure
Professional
Everything in Business, plus:
Typical situationYou run IT and OT, make connected products or depend on suppliers. Customers and auditors want evidence, and your data should work with other systems.
- All modules includedAssets up to 1,000, zones and conduits, vulnerabilities, MITRE ATT&CK for IT and OT.
- Supply chain in viewUp to 100 suppliers with questionnaires.
- Connected to your systemsAPI, webhooks, connectors and access reviews.
- Priority supportYour requests are handled with priority.
Also included: Privacy operations
Added at no extra charge once available: Trust Center for your customers coming soon · AI fill-in assistant with 300 suggestions per month coming soon
- 4 frameworks
- 25 users
- Auditor accesses free of charge, up to 5 per audit
- 50 GB
For larger organisations with many people, frameworks and suppliers
Premium
Everything in Professional, plus:
Typical situationMany people take part, several frameworks interlock, and your inventory of assets and suppliers is large.
- All frameworks includedImplement once, demonstrate many times: one measure for several frameworks.
- 50 usersPermissions per person and area, time-limited if needed.
- 0 auditor accessesTime-limited and only for the evidence you release, without using a user seat.
- 2,500 assetsIT and OT in one inventory.
- 250 suppliersWith questionnaires.
- 100 GB for evidenceExportable for audit or authority.
Added at no extra charge once available: Trust Center for your customers coming soon · AI fill-in assistant with 500 suggestions per month coming soon
For companies that want to cover a single obligation
Individual packages
One topic with a fixed scope instead of a complete package: GDPR, whistleblower protection and the AI Act, on their own or combined, plus the Practice package for medical and dental practices.
Compare packages
Values for size S (up to 50 employees). In M and L, users, storage and quantities grow; the configurator shows every value for your size. Practice has a fixed scope without sizes and without add-ons.
Show the comparison table
| Feature | Practice | Start | Business | Professional | Premium |
|---|---|---|---|---|---|
| Price per month, size S, annual | €79 | from €179 | from €449 | from €890 | from €1,490 |
| Frameworks included | 1 (fixed) | 1 | 2 | 4 | all |
| Users | 3 | 3 | 10 | 25 | 50 |
| Auditor accesses | free of charge, up to 5 per audit | free of charge, up to 5 per audit | free of charge, up to 5 per audit | free of charge, up to 5 per audit | free of charge, up to 5 per audit |
| Storage for evidence | 2 GB | 5 GB | 25 GB | 50 GB | 100 GB |
| In every package | |||||
| Complass Core, incident management, management cockpit, domain check stage 1, training in the portal, PowerPoint reports, company colours, and counters and app badge, baseline protection under GDPR and AI Act and Whistleblower protection (HinSchG) | included | included | included | included | included |
| Modules and features | |||||
| Risk management | not available | available as add-on | included | included | included |
| Business continuity management (BCM) | included | available as add-on | included | included | included |
| Asset management and zones | included up to 50 | available as add-on | available as add-on | included up to 1,000 | included up to 2,500 |
| Vulnerabilities and attack techniques (incl. SBOM, CRA product file, MITRE ATT&CK) | not available | available as add-on | available as add-on | included | included |
| Supplier Management | not available | available as add-on | available as add-on | included up to 100 | included up to 250 |
| Privacy operations | not available | available as add-on | available as add-on | included | included |
| AI fill-in assistant coming soon | not available | available as add-on | available as add-on | included 300 per month | included 500 per month |
| Trust Center coming soon | not available | not available | available as add-on | included | included |
| Microsoft Teams connection | not available | not available | included | included | included |
| Slack connection | not available | not available | included | included | included |
| Jira connection | not available | available as add-on | available as add-on | included | included |
| ServiceNow connection coming soon | not available | available as add-on | available as add-on | included | included |
| Asset connectors coming soon | not available | available as add-on | available as add-on | included | included |
| Access reviews | not available | available as add-on | available as add-on | included | included |
| Certification management coming soon | not available | available as add-on | available as add-on | included | included |
| API and webhooks | not available | not available | not available | included | included |
| Priority support | not available | not available | not available | included | included |
| Configure Practice | Configure Start | Configure Business | Configure Professional | Configure Premium | |
Features marked “coming soon” cannot be used yet; they are added at no extra charge once available. All prices for businesses, net plus VAT, with annual payment; monthly payment +15 %. As of 16 October 2026.
Beta connectors: Qualys, Rapid7, Okta, Splunk, Microsoft Sentinel and device compliance from Intune are available as a beta where your package includes connectors. They are free during the beta and come without a service commitment (SLA); your administrators switch them on deliberately. Read-only until the test against the real system has passed: Microsoft Intune, Qualys VMDR, Rapid7 InsightVM, Okta, Splunk, Microsoft Sentinel.
Security in every package: how we assess against OWASP ASVS 5.0.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.