Pay-per-assessment pricing
NISTnow is pay per assessment, with no subscription and no lock-in. You pay once, when you are ready to unlock a report.
Each assessment scores a set of controls, the specific security practices of the NIST Cybersecurity Framework 2.0 (NIST CSF). The framework groups them into six Functions, its top-level areas.
Free before you pay
After you submit, the overall and per-Function scores are free. The roadmap and the full PDF report unlock on payment.
| Assessment | Price | Controls | Time | What it covers |
|---|---|---|---|---|
| NISTquick | $250 | 44 controls | About 90 minutes | A focused assessment of 44 controls drawn from all six Functions of the framework. A first read in one sitting: roughly where the business stands, and where to look next. |
| Full NIST CSF 2.0 | $500your first full assessment $750each one after that | 106 controls | About three hours | A complete self-guided assessment across all six Functions of the framework: Govern, Identify, Protect, Detect, Respond, and Recover. The fuller picture, with a broader roadmap. |
| Upgrade from NISTquick | +$250if it is your first full assessment +$500if you already have one | Adds 62 controls | About 90 minutes more | Already done a NISTquick? Turn it into the full assessment. Your 44 answers carry over, you answer the other 62 controls, and you pay only the difference. You keep the NISTquick report you bought. |
You can save and come back at any time.
Full assessment pricing
Full assessment pricing is per organization. Your organization’s first full assessment is $500. Once your organization has a full report, each new full assessment is $750. Upgrading from NISTquick comes to the same totals: $250 for NISTquick plus the difference: +$250 toward a first full assessment, or +$500 toward a later one.
Prices are in U.S. dollars. Sales tax is added at checkout where it applies.
Pricing for several organizations
Portfolio mode is for holding companies and advisors who run assessments for several organizations under one account. Each organization’s assessment and report stay separate from the others. Each assessment is priced the same way, so each organization’s first full assessment is $500.
Refunds
For a refund, contact NISTnow through the Contact page or at info@nistnow.com.
What every assessment includes
- Guided assessment with an explanation and per-level guidance for every control
- An executive summary of where you stand, written for an owner or a board
- Strengths and priorities for each of the six NIST CSF 2.0 Functions
- A prioritized roadmap of what to do now, next, and later, with practical steps for each control
- Tool suggestions matched to the platforms you already run
- A handoff section for when you are ready for a full formal assessment
- Full report as a PDF, built on each download
To see these sections in a finished report, read the sample report for a fictional online retailer.
Choosing an assessment
NISTquick suits a first read in one sitting. The full assessment suits the point where a customer, an insurer, or a board needs all six Functions covered.
Wondering how this compares to a full formal assessment? The FAQ covers it.
Where your business stands
The free health check is ten questions in the browser, with no account, and it shows up to three areas to look at first.