Pricing
Simple pricing for
serious compliance.
Start free with the CLI. Upgrade when you need the compliance ledger. Billed per assessed entity — unlimited users, unlimited cloud accounts.
Free CLI
For engineers running PCI scans locally or in CI. Free and read-only.
$0
forever · no signup
- Unlimited AWS scans
- Terminal, JSON, and text output
- All collectors (IAM, KMS, VPC, CloudTrail, and more)
- Remediation guidance
- Read-only — runs locally, no signup
Team
For self-assessment (SAQ-D / A-EP).
$5,400/yr
$450/mo billed annually · $499/mo monthly
per assessed entity · unlimited users
per assessed entity · unlimited users
- Full compliance ledger — every PCI DSS requirement
- Evidence freshness tracking & carry-forward
- SAQ export (SAQ-D / A-EP)
- Full portability export — your data is always yours
- Unlimited users, unlimited cloud accounts
- CLI integration for auto-collection
- Email support
Assessment
Everything in Team, plus QSA mode for a QSA-led assessment.
$12,000/yr
billed annually
per assessed entity · unlimited users
per assessed entity · unlimited users
- Everything in Team, plus:
- QSA reviewer portal
- PCI DSS v4.0.1 export (qsa_v401)
- Year-over-year carry-forward diff
- Priority support
Enterprise
For multi-entity organizations and Level 1 merchants.
From $25K/yr
custom annual contract
per assessed entity · unlimited users
per assessed entity · unlimited users
- Everything in Assessment
- Multi-entity support with rollups across orgs
- Custom SLA
- Security review & procurement support
- Invoice billing & custom terms
- A direct line to the team — we partner with a small number of enterprise customers to build what their PCI program needs
Compare Plans
Feature comparison
| Feature | Free CLI | Team | Assessment | Enterprise |
|---|---|---|---|---|
| Compliance Ledger | ||||
| All PCI DSS requirements | — | ✓ | ✓ | ✓ |
| Evidence collection guides | — | ✓ | ✓ | ✓ |
| Manual evidence upload | — | ✓ | ✓ | ✓ |
| Evidence freshness tracking | — | ✓ | ✓ | ✓ |
| Carry-forward | — | ✓ | ✓ | ✓ |
| Year-over-year carry-forward diff | — | — | ✓ | ✓ |
| Audit trail | — | ✓ | ✓ | ✓ |
| Pre-flight check before export | — | ✓ | ✓ | ✓ |
| Assessment Mode | ||||
| Self-assessment (SAQ-D / A-EP) | — | ✓ | ✓ | ✓ |
| QSA mode | — | — | ✓ | ✓ |
| QSA reviewer portal | — | — | ✓ | ✓ |
| Evidence Collection | ||||
| CLI cloud scanning (read-only) | ✓ | ✓ | ✓ | ✓ |
| Scan upload to ledger | — | ✓ | ✓ | ✓ |
| Evidence narratives (populated draft) | — | ✓ | ✓ | ✓ |
| Export & Sharing | ||||
| Terminal / JSON output | ✓ | ✓ | ✓ | ✓ |
| SAQ export | — | ✓ | ✓ | ✓ |
| PCI DSS v4.0.1 export (qsa_v401) | — | — | ✓ | ✓ |
| Full portability export | — | ✓ | ✓ | ✓ |
| Share package via emailed link | — | ✓ | ✓ | ✓ |
| Team & Access | ||||
| Users | 1 | Unlimited | Unlimited | Unlimited |
| Cloud accounts | Unlimited | Unlimited | Unlimited | Unlimited |
| Role-based access | — | ✓ | ✓ | ✓ |
| Multi-entity rollups | — | — | — | ✓ |
| Support & Contract | ||||
| Documentation | ✓ | ✓ | ✓ | ✓ |
| Email support | — | ✓ | ✓ | ✓ |
| Priority support | — | — | ✓ | ✓ |
| Custom SLA & invoice billing | — | — | — | ✓ |
Do the math
The cheapest line in your PCI budget
Ankos isn't what drives your assessment costs. Here's what does.
A single QSA engagement
$25–120K/yr
One assessment. Higher for Level 1 merchants and complex environments.
Prep, per cycle
~120 hrs
Roughly $10K in loaded engineering time gathering and organizing evidence — before a QSA sends an invoice.
Ankos Assessment
$12,000/yr
A fraction of one QSA engagement: reviewer portal, PCI DSS v4.0.1 export, and year-over-year carry-forward diff. Per assessed entity, unlimited users.
60 Days
Try everything. No credit card.
Full access — including QSA mode — for 60 days. Pick a plan when you're ready.
⚡ During your trial
- Full access to the compliance ledger
- Every PCI DSS requirement, populated as a draft head start
- Unlimited scan uploads
- Evidence freshness tracking and carry-forward
- QSA reviewer portal and PCI DSS v4.0.1 export (qsa_v401)
- SAQ export for self-assessment
- Unlimited users, unlimited cloud accounts
🕒 After your trial
- Choose Team or Assessment to keep full access
- If you don't upgrade, your ledger becomes read-only
- No new uploads or cycle creation until you upgrade
- Portability export stays available — your data is always yours
- CLI keeps working locally with no limits — unlimited scans
- Upgrade anytime to resume full access
Questions
Pricing FAQ
Are there per-user charges?
No. Paid plans are billed per assessed entity — your organization — not per user. Every paid tier includes unlimited users and unlimited cloud accounts, with no per-seat charges. Team is $499/month or $5,400/year ($450/mo billed annually); Assessment is $12,000/year, billed annually.
What's the difference between Team and Assessment?
Team ($499/mo or $5,400/yr) is for self-assessment — SAQ-D and SAQ A-EP — with the full compliance ledger, evidence freshness tracking, carry-forward, SAQ export, and full portability export. Assessment ($12,000/yr, billed annually) adds QSA mode: a QSA reviewer portal, the PCI DSS v4.0.1 export (qsa_v401), year-over-year carry-forward diff, and priority support. Ankos organizes and presents your evidence as a populated draft — your QSA makes the final determination.
What happens after the free trial?
The 60-day trial gives you full access, including QSA mode. When it ends, pick Team or Assessment to keep going. If you don't upgrade, your historical ledger becomes read-only — no new uploads or cycle creation — but your portability export stays available and the CLI keeps working locally with no limits (unlimited scans, terminal and JSON output, remediation guidance).
Can I change plans?
Yes, you can upgrade or change your plan at any time. Changes take effect immediately and billing is prorated.
Is there a money-back guarantee?
The 60-day free trial is our guarantee. You get full access to every feature — including QSA mode — for two months before paying anything. No credit card required to start.
Can I use Ankos for multiple organizations?
Pricing is per assessed entity, so each organization needs its own subscription (Team, Assessment, or Enterprise) with its own compliance ledger and evidence history. If you manage several entities under one roof, Enterprise adds multi-entity rollups — talk to us.
What's included in Enterprise?
Everything in Assessment, plus multi-entity rollups, a custom SLA, invoice billing, and procurement/security-review support — from $25,000/year. Enterprise is also where we work with a small number of customers as design partners — if your PCI program needs something specific (SIEM export, multi-entity rollups, custom SLAs, and the like), talk to us and we'll scope it together.
Do you partner with QSA firms?
Yes — and we're actively recruiting our launch partners right now. The early QSA firms who help shape Ankos's export and assessment workflows get preferred commercial terms, reference status, and inclusion in client lead-routing as our marketing pipeline grows. The partner experience itself — branded share pages, onboarding for your client engagements — is something we're building alongside these first firms, so you help define it. Email partners@ankos.dev to start a conversation.
Do you offer nonprofit or special pricing?
We evaluate nonprofit and special pricing requests on a case-by-case basis. Contact us and we'll work something out.
Ready to stop managing PCI in spreadsheets?
Start your 60-day free trial. No credit card required.