Cyber readiness
at SMB pricing.
Unlimited self-run tabletop exercises, AI facilitator, auto-generated AARs, continuous readiness scoring. Built for the audiences that can’t justify a five-figure engagement — small business, county and municipal government, small water and energy operators, ISC2 chapter members, nonprofits.
Month-to-month · cancel anytime · no implementation fees
Built for the people the consulting market forgets.
We’d rather have 200 SMB / gov / critical-infra teams running monthly exercises than 20 enterprises running once a year. This tier is how we make that economically possible.
Cyber readiness without the consulting bill
You can't spend $7,500 on a tabletop. You probably can't spend $750. But you can spend $99/month — and you can write it off as software, not consulting.
A SaaS line item beats a consulting PO
Procurement loves recurring SaaS. $99/month goes through IT operations. A $7,500 consulting engagement goes through council. We know which one ships faster.
OT-aware tabletops at SMB pricing
Regional water utilities, small electric co-ops, regional airports — you have the same regulatory pressure as the IOUs and Class I carriers. Cyber readiness shouldn't cost six figures because of where you sit on the org chart.
What you get for $99/month.
Same platform as the facilitated engagements. The difference: you run the exercises, the AI facilitator does the heavy lifting, the platform writes the reports.
Unlimited self-run exercises
Pick a scenario, gather your team, hit start. The AI facilitator runs the inject cadence. No scheduling.
Full scenario library
Eight production-grade scenarios. Healthcare ransomware, OT compromise, BEC, supply chain, CMMC audit, insider threat, more.
Auto-generated AARs
After every exercise: findings, observations, action items, board-ready summary — built from your team's actual decisions.
Continuous readiness scoring
Eight-dimension score against NIST 800-61 with trend tracking. Watch it climb as you close gaps.
Up to 10 team members
Invite your full IR team to the platform. Everyone sees the same readiness picture. No per-seat upcharge.
Cancel anytime
Month-to-month. No annual commitment. We'd rather earn next month than lock you in.
Or $1,188/year billed monthly. Cancel anytime — no annual lock-in, no contract, no setup fees.
Subscribe — $99/monthWant to see the full pricing menu? Compare all tiers.
Questions we hear a lot.
How is this different from your $7,500 Foundation engagement?
Foundation includes a live facilitator (typically Scotty) who designs a custom scenario for you, runs the exercise, and writes the report. Community Membership is the platform without the facilitator — you pick a library scenario, run it yourself, and the platform generates the report. Same outputs, your time instead of ours.
Can our cyber insurance carrier accept this as evidence of testing?
Yes for most carriers. The auto-generated AAR documents the exercise date, participants, scenario, decisions made, gaps identified, and remediation actions — the same evidence carriers ask for from a facilitated engagement. We've had Community-tier AARs accepted at renewal.
Will this satisfy CMMC, HIPAA, or NERC CIP testing requirements?
For the "documented incident response plan testing" line item in those frameworks — yes. For full assessor-ready evidence packages (CMMC L2 audit, OCR investigation, NERC CIP-008-7), you'll want a facilitated engagement (Foundation tier and up) because assessors expect an external facilitator signature. Community is great for the quarterly internal cadence between formal audits.
What's the upgrade path?
When your team outgrows self-run — typically once you have a board asking for executive crisis simulation, or your insurance broker requires a third-party-facilitated annual exercise — drop the subscription and book Foundation ($7,500), Operational ($15,000), or Enterprise ($35,000) as a one-time engagement. Or step up to an annual advisory retainer ($48K-$156K) for a dedicated facilitator. Subscription fees from the prior 90 days credit toward the upgrade.
Can ISC2 chapter members get a group rate?
Yes — chapter officers can email us at info@afteraction.dev for group pricing across chapter members. Typical chapter deal is the first three subscriptions at half-price for the first quarter as a member benefit.
Is there a free tier?
Yes. Run our free ransomware readiness check (2 minutes) and play any of the 8 interactive scenario demos at /scenarios. No credit card. The Community Membership unlocks unlimited exercises with proper AARs and readiness tracking; the free tier is for sizing the platform.
Stop putting cyber readiness on the “next year” list.
Run your first exercise this week. Get the AAR in your inbox the same day. Track your readiness score over time. $99 a month.
Get started — $99/month