Per product family. Never per seat.
Bring the whole engineering team. Prices excl. VAT; pay for a year and two months are free. Every workspace starts with 14 days of everything, no card.
Launch price Pharus is new. The first 10 companies that subscribe pay 30% less for their first 24 months, on any plan, with add-ons and extra product families. After that, the list price applies.
1 product family · up to 3 with extras
Try Starter for 14 daysUp to 5 product families · up to 10 with extras
Try Core for 14 daysUnlimited families
Talk to us| Compare the plans | Starter€179/ moor €1 790 / year, save €358Launch price: €125 / mo for the first 24 months€1 790/ year | Core€629/ moor €6 290 / year, save €1 258Launch price: €440 / mo for the first 24 months€6 290/ year | Plus€1 350/ moor €13 500 / year, save €2 700Launch price: €945 / mo for the first 24 months€13 500/ year |
|---|---|---|---|
| Product families | 1, up to 3 with extras | Up to 5, up to 10 with extras | Unlimited |
| On-call rota, SMS paging and escalation | Not included | Included | Included |
| Slack, Teams and webhook alerts | Not included | Included | Included |
| Tickets in Azure DevOps, Jira and GitHub | Not included | Included | Included |
| CRA, GDPR, digitalsikkerhetsloven and NIS2 triage | CRA only | Included | Included |
| Board report and annual drill | Not included | Included | Included |
| Annex VII technical file | Add-on, €149 / mo | Included | Included |
| DORA triage | Not available | Add-on, €289 / mo | Included |
| Review before submission | From €479 per incident | From €479 per incident | 4 incidents a year, then from €479 |
| Try Starter for 14 days | Try Core for 14 days | Talk to us |
Every plan has the CRA clocks and Art. 14(7) routing, SRP packs, SBOM matching against KEV and EUVD, VEX from your scanners and suppliers, advisories, user notices and support periods, opt-in AI assistance, and the decision record with approvals.
Free · €0 / mo
Vulnerability intake
Disclosure page and report form. security.txt and a hosted CVD policy. Inbox with replies and triage. Starts with 14 days of everything.
Start freeWhat is a product family? Products that share the same software or firmware line and the same SBOM count as one family, even when they are sold as different models, sizes or variants. A product with its own software stack is its own family. Not sure? Ask us before you choose a plan. How to count your product families
Starter is paid by card. Core and Plus on a yearly plan can be paid by invoice, with 14 days to pay. Invoice (EHF on request). Get a written quote for your number
Billed in NOK. EUR shown for guidance at NOK 10.4/EUR.
Compare every feature
| Every plan | Starter | Core | Plus |
|---|---|---|---|
| CRA clocks and Art. 14(7) routing | Included | Included | Included |
| SRP packs | Included | Included | Included |
| SBOM matching against KEV and EUVD | Included | Included | Included |
| VEX from your scanners and suppliers | Included | Included | Included |
| Advisories, user notices, support periods | Included | Included | Included |
| Decision record and approvals | Included | Included | Included |
Add-ons
- Annex VII technical fileOn Starter. Included in Core and Plus.€149 / mo€1 490 / year
- DORA triageFor entities supervised by Finanstilsynet, on Core. Included in Plus.€289 / mo€2 890 / year
- Extra product family on StarterUp to 2 on top of Starter’s one.€119 / mo€1 190 / year
- Extra product family on CoreUp to 5 on top of Core’s five. Plus has no limit.€149 / mo€1 490 / year
- Review before submissionWe review your drafts before you file, for a fixed one-off fee per incident. On every paid plan. Plus includes 4 incidents per 12 months.from €479 / incident
How to count your product families
Pharus is priced per product family, so the number of families sets the price. Only active families count.
- List the products with digital elements that you sell.
- Group products that run the same software or firmware line and the same SBOM into one family. Different models, sizes and variants of that line stay one family.
- Leave versions out of the count. A family holds every version and release line of its product, each with its own SBOM, so a new release adds no family.
- Count a product with its own software stack as its own family.
The test: a family has one active SBOM per product version. If two products on the same version need different SBOMs, they are two families.
Examples
- One firmware, sold as Gateway G3, G3 Pro and G3 Mini: 1 family.
- Gateway G3 on versions 4.1 and 4.2, both still supported: 1 family.
- Gateway G3 and Sensor S1, each with its own firmware: 2 families.
Not sure? Ask us before you choose a plan. The 14-day trial has no limit on product families, so you can also add them and see.
What each number costs
The cheapest plan that covers the number, excluding VAT. Add-ons and review before submission cost extra.
| Families | Plan | Per month, NOK | Per year, NOK |
|---|---|---|---|
| 1 | Starter | 1 900≈ €179 | 19 000≈ €1 790 |
| 2 | Starter + 1 extra | 3 100≈ €298 | 31 000≈ €2 980 |
| 3 | Starter + 2 extra | 4 300≈ €417 | 43 000≈ €4 170 |
| 4 | Core | 6 500≈ €629 | 65 000≈ €6 290 |
| 5 | Core | 6 500≈ €629 | 65 000≈ €6 290 |
| 6 | Core + 1 extra | 8 000≈ €778 | 80 000≈ €7 780 |
| 7 | Core + 2 extra | 9 500≈ €927 | 95 000≈ €9 270 |
| 8 | Core + 3 extra | 11 000≈ €1 076 | 110 000≈ €10 760 |
| 9 | Core + 4 extra | 12 500≈ €1 225 | 125 000≈ €12 250 |
| 10 | Plus | 14 000≈ €1 350 | 140 000≈ €13 500 |
| 11+ | Plus | 14 000≈ €1 350 | 140 000≈ €13 500 |
At 10 families, Core with 5 extra families costs the same in NOK as Plus, so the table shows Plus.
Starter covers the CRA only. The on-call rota and SMS paging, alerts, tickets, and GDPR, digitalsikkerhetsloven and NIS2 triage start on Core. If you need them, Core is the cheapest plan for one to three families too.
Billed in NOK. EUR shown for guidance at NOK 10.4/EUR.
Know where it goes.
Article 14 has applied since 11 September 2026. The first early warning is due 24 hours after you become aware; settle the route before then.
Book a walkthrough
30 minutes with your own SBOM. We match it live and map your Art. 14(7) route.
We only use your email to arrange the walkthrough. See our privacy notice.
