ScalePad Automation Solution Handbook cover
ScalePad’s Automation Solution Handbook
Discover why MSPs consider Lifecycle Manager and Backup Radar as the most valuable apps in their stack. 
Learn More

ControlMap Pricing

End-to-End Compliance Built for MSPs

Automated compliance to deliver end-to-end vCISO services from assessment to audit.

Free to start

$
0
/month

Prospect and prove value across your entire client base.

Ideal For: MSPs looking to open doors, win new business, and start client compliance conversations without cost or commitment.

Sign up
With Free, you can:
  • Prospect for unlimited clients
  • Assess gaps against your selected framework (choose from 10) for all clients
  • Deliver 10 policies, 10 risks and 10 evidence items per client
  • Create a professional report that captures each client’s full compliance progress
  • Access 1 admin user and a ControlMap-branded client portal
  • Unlock ScalePad integrations
  • Ready to launch vCISO services? Upgrade to Essentials or Pro in one click; your work from Free moves with you
Limited-time pricing*

Essentials to monetize

$
99
/client/month*

Deliver vCISO services across multiple frameworks.

Ideal For: MSPs ready to formalize their vCISO program and secure high-value recurring revenue contracts.

Deliver compliance assessments as a service.
Everything in Free, plus:
  • Run structured compliance reviews and assess clients against any of our 60+ frameworks
  • Deliver unlimited policies, risks, and evidence items per client
  • Share unlimited professional, board-ready compliance reports that make your value clear
  • Gain access to a library of MSP-level integrations to monitor compliance checks
  • Get access to an unlimited number of admin users
  • Once you’re ready to add a trust portal and audit support, migrate seamlessly to Pro
*Offer ends September 30, 2025. 
Subject to Terms & Conditions
 Most popular

Pro to master

$
299
/client/month

Scale advanced compliance with audit, trust and automation.

Ideal For: MSPs serving regulated industries or clients requiring continuous audit readiness.

Everything in Essentials, plus:
  • Manage multiple frameworks (including crosswalk assessments) across multiple clients with centralized oversight
  • Save time with automated evidence and risk management
  • Evaluate your clients’ vendor risk
  • Provide clear compliance transparency through advanced trust reporting
  • Gain access to a huge library of integrations including client-side integrations
  • Automate evidence gathering from multiple platforms for continuous compliance
  • Access CMMC/NIST-specific tools such as SSP and SPRS
  • Publish a trust portal and complete internal/external audit support to demonstrate security and compliance posture

Compare plans and pricing

Free
Essentials
Pro
Frameworks
Frameworks
1 (10 options)
1 of 60+ included
Unlimited
Assessments (including Crosswalks)
Assessments
(incl. crosswalks)
Policies & Templates
Policies & Templates
10 documents
Unlimited
Unlimited
Evidence Management
Evidence Management
10 evidence items
Unlimited
Unlimited
(incl. bulk refreshing/editing)
Risk Register
Risk Register
10 risks
Unlimited
Unlimited (incl. advanced risk)
Reporting
Reporting
1 report
Unlimited
Unlimited + automation
Compliance Dashboards
Compliance Dashboards
Limited
Integrations
Integrations
1 ScalePad integration
MSP-level integrations
Client-side integrations
User Management (Admin)
User Management (Admin)
1 admin user
Unlimited users
Unlimited users
Asset Management
Asset Management
Audit Readiness/Evidence Collection
Audit Readiness/Evidence Collection
Controls
Controls
My Compliance Portal
My Compliance Portal
Trust Portal
Trust Portal
CMMC/NIST SSP & SPRS Tools
CMMC/NIST SSP & SPRS Tools
White-labelling/Brand Client Portal
White-labelling/Brand Client Portal
Vendor Management
Vendor Management
Audit Templates & Audit Readiness
Internal/Third-party Audit Support
Internal and external audits
Custom Controls

ControlMap FAQ

Learn more about jumpstarting your compliance program.

How long does it take to become compliant with ControlMap?
For CISOs and CIOs looking to become SOC 2 compliant quickly, ControlMap’s compliance automation software will speed up the process. While every situation is unique, our clients can be ready for a security audit in just a few weeks. Every MSP has its own journey, and we are here to support you all the way through the process.
Can I use my own auditor or do you have one?

Yes, you can use your own auditor. If you need to be connected with an auditor for your security audit, we work with and support a community of auditors and can refer you to our network. Contact our sales team for more information.

What integrations is ControlMap compatible with?

ControlMap integrates with over 40 common tools. Some of the most popular integrations include AWS CIS Controls, Azure, Google Cloud, Google Workspace, OneLogin, Okta, and Microsoft Office 365. Within the ScalePad suite, ControlMap integrates with Lifecycle Manager. For a full list, visit the integrations page.

What frameworks does ControlMap support?

ControlMap supports over 50 regional, international, and industry-focused frameworks. SOC 2, ISO 27001, HIPAA, and GDPR are just the start. See the full list here.

Where is my data hosted?

ControlMap supports hosting data in the United States, European Union, or Australia region. Partners choose their desired region after purchase.

Is GovCloud hosting possible?

Yes, Partners have the option of hosting data on GovCloud. You can choose this option during checkout. 

Do you have NFR (not for resale) accounts?

We currently don't offer NFR accounts.

Does each client need their own tenant?

Yes, each client that starting their path to compliance will require their own tenant. Packages start from 1 tenant, and more can be added as your MSP and clients require.

Explore the ScalePad Suite

Lifecycle Manager logo
Manage the asset lifecycle and generate revenue with Scalepad services.
Lifecycle Insight Logo
Give clients the QBR they deserve with tools that make prep and presentation simple.
Backup Radar
Monitor all your client backups from one place to reduce human error and increase visibility.
Cogniton360 logo
Dig deep into your ConnectWise data for business insights that can point you in the right direction.
Standardize your quote-to-cash system with software built for the MSP industry.
crossmenuchevron-down