How is CertiField priced?

Per system with unlimited users, rather than per seat. RMF is a team sport — an ISSO, an assessor, a program manager and three engineers all need to be in the record, and charging per head is a good way to make sure some of them are not. Pricing scales with the scope of the program.

Why is pricing not listed publicly?

Scope varies enormously between programs — the number of systems, the baseline, how much existing authorization state has to be imported. Posting a single number would be misleading in most directions. Tell us the shape of your program and we will turn a straightforward number around quickly.

We are already authorized. Is this priced differently?

No, but it is often the better value. Importing an existing authorization from eMASS and keeping it current is less work than building one, and it is the case where the alternative — an annual scramble — has the clearest cost.

Do you price for primes with many systems?

Yes. The Portfolio scope covers multi-system roll-ups across a prime or a portfolio, including shared role definitions across systems.

Can we run it disconnected?

Yes. AI can run against a local model or be disabled entirely, and STIG catalog updates move by exported bundle. Talk to us about deployment before pricing, because it affects the shape of the engagement.

Pricing

Priced per system. Unlimited users.

RMF is not a single-operator job. Bring your ISSO, your assessor, your program manager and your engineers into one record without negotiating seats first.

Ref: $-01
Kind: Included

Every system includes the whole product.

There is no tier where change impact analysis or provenance is the upsell. Those are the product.

Unlimited users
FIPS 199 categorization and 800-53 Rev 5 baselines
Per-control implementation and assessment
Evidence bound to controls and assessments
Architecture modeling and change impact
SSP, SAR, POA&M and authorization package generation
OSCAL import and export
eMASS round-trip import and export
DISA STIG catalog sync and applicability ranking
CI, scanner and SBOM ingest
Two-way Jira sync
Continuous monitoring, drift and evidence continuity

Ref: $-02
Kind: Scope

Scoped to the shape of your program.

Single system

One authorization boundary — a program working toward or sustaining a single ATO.

Let's scope it

per system · unlimited users

The full platform
Unlimited users
eMASS and OSCAL export

Request pricing

Active program

A program where change lands faster than the package can absorb it.

Let's scope it

per system · unlimited users

Everything in Single system
Change impact and reassessment scoping
Priority onboarding

Request pricing

Portfolio

Multiple systems across a prime or portfolio, with shared roles and reporting.

Let's scope it

per system · unlimited users

Everything in Active program
Multi-system roll-ups
Security reviews and support

Request pricing

Ref: $-03
Kind: FAQ

Pricing questions.

How is CertiField priced?: Per system with unlimited users, rather than per seat. RMF is a team sport — an ISSO, an assessor, a program manager and three engineers all need to be in the record, and charging per head is a good way to make sure some of them are not. Pricing scales with the scope of the program.
Why is pricing not listed publicly?: Scope varies enormously between programs — the number of systems, the baseline, how much existing authorization state has to be imported. Posting a single number would be misleading in most directions. Tell us the shape of your program and we will turn a straightforward number around quickly.
We are already authorized. Is this priced differently?: No, but it is often the better value. Importing an existing authorization from eMASS and keeping it current is less work than building one, and it is the case where the alternative — an annual scramble — has the clearest cost.
Do you price for primes with many systems?: Yes. The Portfolio scope covers multi-system roll-ups across a prime or a portfolio, including shared role definitions across systems.
Can we run it disconnected?: Yes. AI can run against a local model or be disabled entirely, and STIG catalog updates move by exported bundle. Talk to us about deployment before pricing, because it affects the shape of the engagement.

Anything not answered here — email info@certifield.software.

Next step

See what your RMF process looks like when the package keeps up with the system.

Request a demo Explore the product