Managed Compliance Retainer

Predictable pricing.
Audit-ready outcomes.

Pick a plan based on the features you need, not the size of your fleet. Each tier includes a fair-use device cap; grow into the next tier when you outgrow your features, not when you add a router. Onboarding is a one-time fee — after that, you pay for continuous automation, not hourly consulting.

Monthly Annual Save up to 15%

Starter

Compliance scanning for a single site or small fleet.

$500 /mo

No onboarding fee — self-serve setup

Fair use up to 25 devices

All 25+ compliance frameworks (CIS, NIST, HIPAA, SOC 2, PCI DSS, ISO 27001, FedRAMP & more)
Weekly drift detection & alerting
Monthly compliance report (PDF)
Config snapshots & diffs
EOL / EOS advisory feed
Golden image baseline enforcement
Email support — 48h response

Get started

Built for MSPs from day one

Tenant impersonation, per-tenant data isolation, slug-based onboarding, and a partner portal — the only network compliance tool designed for multi-tenant managed service delivery, not retrofitted for it.

MSP Partner

Resell to your clients with white-label branding and shared revenue.

$4,000 /mo base + 15% rev share

+ $2,500 one-time onboarding (per MSP, not per tenant)

Multi-tenant · unlimited customers

Everything in Pro, applied per-tenant
MSP multi-tenant mode — dashboards, per-client evidence exports, switch between tenants in one click
White-label branding option — your logo, your colors
Partner portal with co-branded sales materials
Volume discounts that scale with your client count
15% revenue share on customer growth — your MSP grows, we grow
Dedicated MSP success engineer
Priority support — 24h response, 24/7 for tenant outages

Become an MSP Partner →

Already managing 5+ client tenants? The MSP Partner tier typically breaks even at 4–5 customers and becomes profitable from there. Talk to us about co-sell motions and volume terms.

Cost comparison

Less than one compliance hire — with more coverage.

A mid-level network compliance engineer runs $90,000–$120,000/yr in salary alone, before benefits, tooling, and training. That's one person, with one framework at a time, and no automated remediation.

Our Pro plan covers up to 200 devices in normal use, runs continuously, and delivers audit evidence on demand — for a fraction of that cost. Every framework is included at every tier; we don't gate compliance behind pricing.

In-house compliance engineer

$90k–$120k/yr

Manual audit evidence pulls
One compliance focus at a time
No automation without additional tooling budget
PTO, turnover, onboarding lag

Coleman Integrated — Pro

$30k/yr

Automated evidence, audit-ready on demand
All 25+ frameworks covered simultaneously
Remediation scripts included
Scales with your fleet, not your headcount

ROI Calculator

See your numbers

Adjust your device count to see estimated annual cost and savings versus hiring in-house.

Managed devices: 100

51,000+

Recommended plan

Pro

Annual retainer cost

$30,000/yr

vs. in-house hire

$75,000 saved

Compared to a mid-level compliance engineer at $105k/yr (salary midpoint, excluding benefits and tooling). Onboarding fee not included.

Get started with Pro →

Full feature comparison

	Starter	Pro	Enterprise
Device & Platform Coverage
Managed devices (fair use)	Up to 25	Up to 200	Unlimited
Cisco IOS-XE / IOS-XR	✓	✓	✓
Fortinet FortiOS	✓	✓	✓
Palo Alto PAN-OS	✓	✓	✓
Meraki / Cloud-managed	✓	✓	✓
Hybrid cloud network (AWS NSG, Azure NSG, GCP firewall)	—	—	✓
Juniper / Arista / Aruba CX / MikroTik / Check Point	✓	✓	✓
Compliance Frameworks
Framework mapping (SOC 2, NIST, CIS, HIPAA, PCI DSS, ISO 27001, FedRAMP…)	Scoped to your regulatory obligations during onboarding — not gated by tier
Automation & Monitoring
Golden image enforcement	✓	✓	✓
Drift detection cadence	Weekly	Daily	Continuous
Config snapshots & diffs	✓	✓	✓
Automated remediation scripts	—	✓	✓
PSIRT advisory-to-device mapping	—	✓	✓
EOL/EOS tracking	✓	✓	✓
Custom automation workflows	—	10/yr	Unlimited
SIEM / ticketing integrations	—	✓	✓
ServiceNow E-Bonding (bidirectional ticket sync)	—	✓	✓
One-click remediation push to devices (ncollect push)	—	✓	✓
Firewall policy analysis (ACL audit, unused rules, hit-count delta)	—	✓	✓
Baseline locking (SOC 2 CC8.1)	—	✓	✓
Multi-site fleet monitoring & heartbeat alerts	✓	✓	✓
AI-generated remediation scripts, drift narratives & risk assessments (AIOps)	—	—	✓
Reporting & Visibility
Live compliance dashboard	—	✓	✓
Monthly compliance report (PDF)	✓	✓	✓
Weekly digest & executive summary	—	✓	✓
On-demand audit export package	—	—	✓
Support
Email support	48h	24h priority	24/7 — 2h SLA
Dedicated success engineer	—	—	✓

Common questions

What counts as a "managed device"?

Any network device we actively scan, baseline, and monitor — routers, switches, firewalls, access points, and load balancers across your supported platforms. Passive assets (printers, IoT endpoints) do not count toward your device total.

What does "fair use" mean for device limits?

Each tier includes a device count that covers typical-use deployments — 25 on Starter, 200 on Pro, unlimited on Enterprise. We don't auto-bill overages or cut off your scans if you go a little over. Instead, if your fleet grows past the fair-use range, we'll proactively reach out to discuss right-sizing your plan together. The pricing model is feature-driven, not device-meter-driven.

What's included in onboarding?

Onboarding covers network discovery and device inventory, golden image definition, framework mapping to your specific environment, pipeline deployment, and a kickoff review session. Most environments are fully onboarded within 2–3 weeks. Starter is self-serve with documentation only — no onboarding fee.

Can I start on Starter and upgrade later?

Yes. Upgrades take effect at the next billing cycle. We'll re-scope your onboarding configuration to enable the new tier's features — no additional onboarding fee for upgrades.

I'm an MSP — should I use the MSP Partner tier?

If you're managing 5 or more client tenants, yes. The MSP Partner tier includes multi-tenant mode, white-label branding, a partner portal with co-branded sales materials, and 15% revenue share on customer growth. The base $4,000/mo typically breaks even at 4–5 client tenants and becomes net-profitable from there. For 1–2 customers, the standard Pro tier may make more sense — let's talk and we'll model it out.

Do you support hybrid or multi-vendor environments?

Yes — every plan supports Cisco IOS / IOS-XE / NX-OS / ASA, FortiOS, PAN-OS, Juniper Junos, Arista EOS, Aruba CX, MikroTik, and Check Point. Hybrid cloud network controls (AWS NSG, Azure NSG, GCP firewall) are included from the Enterprise tier and up.

How does annual billing work?

Annual plans are billed upfront for 12 months at a discounted rate — 10% off Starter, 15% off Pro and Enterprise. Onboarding fees apply once regardless of billing term. Annual contracts include a 30-day cancellation window at renewal.

We're preparing for a SOC 2 audit — which plan do we need?

SOC 2 Type II evidence requires continuous monitoring and timestamped configuration history. Starter covers the baseline framework mapping, but most SOC 2 engagements benefit from the daily scans, live dashboard, automated remediation, and baseline locking (SOC 2 CC8.1) in Pro. We'll map your specific control requirements during onboarding and recommend the right fit.

Do you offer project-based work outside of retainers?

Yes, for scoped engagements like one-time audits, network redesigns, or automation builds. Reach out via the contact form and describe your project — we'll respond with a scoping estimate within 1 business day.

Not sure which plan fits?

Book a free 30-minute scoping call. We'll inventory your environment, identify your framework obligations, and recommend the right starting point — no commitment required.

Book a scoping call