Scytale ISO 27001 Cost: The Listing That Bundles a Framework
Scytale lists a Software Platform dimension from $7,500 on AWS Marketplace, and that dimension bundles one framework. It is the only one of the five major platform listings where a single-framework ISO 27001 programme maps onto a single published line rather than two. It is also the most heavily hedged listing of the five, worded as “starting price (get quote)”, and it names no employee band at all.
Updated July 2026. AWS Marketplace list prices checked July 2026.
What Scytale publishes on AWS Marketplace
Three named dimensions, each with its own list price on a 12-month contract. AWS publishes them as independent line items and publishes no combined figure.
| Published dimension | List price | Unit as stated on the listing |
|---|---|---|
| Software Platform | from $7,500 | bundles one framework, per 12-month contract |
| Additional Framework | from $2,100 | per 12-month contract |
| Consulting | from $4,000 | per 12-month contract |
The listing qualifies its own pricing, verbatim: “starting price (get quote)” Two hedges in four words: a starting price, and an instruction to ask. Every figure above is written as “from” for that reason.
Read off Scytale's AWS Marketplace listing, checked July 2026. List prices on that surface, not a quote. AWS shows no price-effective date.
The ISO 27001 line specifically
The platform dimension bundles one framework, so an ISO 27001-only programme sits at the platform figure.
That structure removes the arithmetic that the other four listings force on you. There is no platform-plus-framework sum to compute here and no sum we need to label as our own: if ISO 27001 is your one framework, the Software Platform figure is the whole of Scytale's published pricing for it. The Additional Framework dimension from $2,100 is what a second framework starts at, not what your first one costs.
The band that is not there
Every other listing in this comparison tells you who its entry figure is for. Vanta names 1-20 employees on its entry package. Secureframe and Sprinto both publish theirs for up to 100 employees. Drata states capacity for a 100 FTE org against its platform fee. Scytale states nothing.
A published figure with no published band is a weaker piece of information than it looks, because the band is what connects a price to an organisation. Vanta's entry package is worth less to a 200-person company than Scytale's figure appears to be, but at least a 200-person company can tell instantly that Vanta's figure is not for them. Scytale's figure never tells you that. It reads as though it might apply to you at any size, and the listing's own wording, a starting price with a get-quote instruction, is the only thing pushing back.
So the honest reading is narrow. Scytale publishes the point at which its pricing starts. It does not publish who that starting point is for, and there is no headcount at which the published figure can be said to describe you. That is a question for Scytale, and the listing says as much.
What the listing does not tell you
Who the figures are for
No employee band, no FTE capacity, no organisation size against any of the three dimensions. Alone among the five listings, Scytale's publishes prices without publishing who they price.
What you would actually pay
The listing tells you to get a quote, and AWS Marketplace private offers are the mechanism: a price negotiated with the vendor and transacted through the same Marketplace contract, which can sit either side of list.
The certification audit
Not the software line, and not the consulting line either. The certificate comes from an accredited certification body after Stage 1 and Stage 2, quoted per engagement. See what drives the audit quote.
Consulting on the listing is not the audit
Scytale is the only one of the five that publishes a consulting dimension, from $4,000 per 12-month contract. It sits next to the software line and it is worth being clear about what it cannot be. Certification is issued by an accredited certification body, and that body has to be independent of the organisation it certifies. Help preparing for an audit and the audit itself are separate purchases from separate suppliers, and no consulting line on any Marketplace listing changes that.
The audit is quoted against audit time, and audit time is driven by inputs that have nothing to do with which platform or consultant you bought:
Number of persons doing work under the organisation's control, within the ISMS scope
The primary input. ISO/IEC 27006-1:2024 counts people doing work under the organisation's control within the ISMS scope regardless of whether they are members of the organisation, so contractors and freelancers inside the scope count toward the total.
ISMS scope
What the certificate actually covers: which services, systems, teams and locations sit inside the boundary. A tightly drawn scope is the single largest lever a buyer controls.
Full treatment on the audit cost page. For how platform, consultant and in-house effort trade off against each other, see DIY vs consultant vs platform.
Scytale against the other four, on published entry price
All five platforms publish list prices on AWS Marketplace. Their lowest published platform dimensions line up like this. Read the band column alongside the price: these dimensions cover different headcounts and different bundles, so this compares what each vendor publishes rather than the products themselves.
| Platform | Lowest published platform dimension | List price | Band as stated |
|---|---|---|---|
| Secureframe | Access the Secureframe Platform | $7,500 | up to 100 employees, per 12-month contract |
| Sprinto | Starter Platform | from $7,500 | up to 100 employees, per 12-month contract |
| Scytale | Software Platform | from $7,500 | bundles one framework, per 12-month contract |
| Vanta | Essentials Package | from $14,000 | 1-20 employees, per 12-month contract |
| Drata | Platform Fee | $25,000 | capacity for a 100 FTE org, per 12-month contract |
Scytale ties with Secureframe and Sprinto at the bottom of the published platform figures, below Vanta's $14,000 entry package and well below Drata's $25,000 platform fee.
On the published surface Scytale's figure covers more than the other two it ties with, because it bundles a framework where Secureframe and Sprinto both price the first framework as a separate dimension. Set against that, it is the only figure in the tie with no stated band and the only one carrying a get-quote instruction, so it is also the least anchored. More included, less specified: that is the trade, and the listing does not resolve it for you.
Per-vendor detail: Vanta, Drata, Secureframe, Sprinto.