Rail Core (BYOL)
£999 one-time (Founders Lifetime)
Includes
- rail + verifier + proof artifacts
- BYOL mappings
- Windows-only
Purchase tiers
Evidence-first software distribution with deterministic artifacts and local verification.
Founders Cohort: 50 seats or 60 days (whichever comes first). Prices increase after cohort.
Fulfillment & delivery
- Fulfillment: email-only within 48 hours.
- Duo tiers: bundles are fixed as listed below. March–April bonus: claim one additional library by email (one-time).
- No calls required.
EU Readiness Duo
£2,950 / year
Includes
- Vendor Security (80 controls)
- ISO 27001 (93 controls)
March–April bonus: any Duo includes one additional library of your choice (one-time claim via email).
Need a tailored subset or a bespoke library variant? Email us — we can ship a versioned library pack.
US Trust Duo
£2,950 / year
Includes
- Vendor Security (80 controls)
- SOC 2 Readiness (100 controls)
March–April bonus: any Duo includes one additional library of your choice (one-time claim via email).
Need a tailored subset or a bespoke library variant? Email us — we can ship a versioned library pack.
IR Snapshot Duo
£2,450 / year
Includes
- Vendor Security (80 controls)
- DFIR Incident Response (84 controls)
March–April bonus: any Duo includes one additional library of your choice (one-time claim via email).
Need a tailored subset or a bespoke library variant? Email us — we can ship a versioned library pack.
Pro Full Suite
£3,950 / year
Founders price: £3,950/yr until 30 Apr 2026. Then £4,950/yr.
Includes
- Vendor Security (80 controls)
- ISO 27001 (93 controls)
- NIST CSF (80 controls)
- SOC 2 Readiness (100 controls)
- DFIR Incident Response (84 controls)
Versions monitored
Libraries remain pinned to the baselines below; standards updates are tracked and introduced through versioned releases.
- ISO 27001 is pinned to ISO/IEC 27001:2022 Annex A (93 controls). Control references use 5.1..8.34. We track ISO/IEC 27001:2022/Amd 1:2024 for requirement-level updates; Annex A remains 93.
- Vendor Security is pinned to CIS Controls v8 at control-family level (CIS-1..CIS-18), with 80 controls in this library revision.
- SOC 2 is pinned to AICPA TSC 2017 with Revised Points of Focus 2022 (100 controls).
- NIST is pinned to NIST CSF 1.1 (80 controls).
- DFIR is pinned to DFIR Readiness Baseline v1 with Respond/Recover crosswalk (84 controls).
Support Civitas
If you want to support independent evidence-first work.
Delivery: self-serve purchase. Download instructions delivered by email. Support: async email-only (24–48h). No calls.