{
 "schema_version": "1.0",
 "id": "mycroft",
 "name": "Mycroft",
 "research_status": "researched",
 "vendor_domain": "mycroft.io",
 "category": "Security",
 "task": "Security, backup & privacy",
 "summary": "Security and compliance platform plus managed service for companies without a security department: a GRC platform mapped to CMMC, FedRAMP, SOC 2, ISO 27001, HIPAA and GDPR, bundled with cloud and application security, device management, third-party risk and awareness training, and backed by a Risk Operations Center staffed by its own experts around the clock. 150+ native integrations across AWS, Azure, GCP and the major code hosts. Three packages — Platform, Scale, Managed — and none of them is publicly priced. Mycroft Technologies Inc.; not the Mycroft AI voice assistant.",
 "best_for": "companies chasing an attestation they cannot staff for — CMMC or FedRAMP to keep bidding on defence and public-sector work, SOC 2 or ISO 27001 to get through enterprise procurement — that would rather buy the platform, the security stack and the people who operate it on one contract than assemble a GRC tool, a pen tester, a vCISO and a monitoring vendor separately and hold them together themselves",
 "skip_if": "you already have a security team and only need the evidence-collection and control-monitoring layer, because the managed half is most of what you would be paying for; or you need to compare cost before capability, because nothing here is priced anywhere and every tier ends in a sales conversation",
 "honest_knock": "The pricing page is a feature list with the prices taken out, and that is a choice rather than an oversight — Mycroft publishes what is in each package down to the individual capability, then stops short of the one line you came for. It matters more here than it would elsewhere, because what Mycroft sells is not a seat of software: it is a platform bundled with a managed service, secure enclaves, infrastructure and identity management, an audit coordinated on your behalf and, at the top, a dedicated CISO. That is a services contract, and services contracts scope on your environment, so the number genuinely will differ per company. It also means you cannot sanity-check the cost against doing it yourself until you have sat through a demo. The second thing to weigh is how much of the evidence is the vendor talking. What you can verify from outside is a handful of named case studies — SmashSend, Weave, Wisedocs, Unified — and the quotes inside them; there is no published customer count and no independent review base to read. The team is not thin: the CEO holds a CISA, the engineering co-founder a CISSP, and the product co-founder co-founded PartnerStack. But a young company promising CMMC and FedRAMP outcomes is asking for trust on a timeline where being wrong is expensive. Ask what happens if the assessment does not pass, and ask it before the second call.",
 "pricing": {
  "status": "quote_only",
  "entry_price": null,
  "entry_price_terms": null,
  "from_price_usd_month": null,
  "plans": [
   {
    "name": "Platform",
    "price": "no published price",
    "includes": "Full GRC platform for SOC 2, ISO 27001, GDPR, HIPAA; CNAPP; security/AI/privacy training; 24/7 monitoring; Trust Center; basic Agentic AI workflows"
   },
   {
    "name": "Scale",
    "price": "no published price",
    "includes": "Adds penetration testing, continuous third-party risk management, customer success manager, expanded AI workflows"
   },
   {
    "name": "Managed",
    "price": "no published price",
    "includes": "Adds customised frameworks, customised AI workflows, dedicated CISO as success manager"
   }
  ],
  "plans_source": "summarised from pricing.notes; every plan name and amount appears verbatim in those notes",
  "notes": "(read 4 September 2026 on www.mycroft.io/pricing) Mycroft has no public pricing: three packages, and not one number between them. Platform is the entry tier and the only one whose button says Get started rather than something sales-shaped; it bundles the full GRC platform for SOC 2, ISO 27001, GDPR, HIPAA and more, a Cloud Native Application Protection Platform, security, AI and privacy awareness training, 24/7/365 threat intelligence and monitoring, a Trust Center, and what Mycroft calls basic Agentic AI workflows. Scale says Book a demo and adds penetration testing, continuous third-party risk management, a customer success manager and expanded AI workflows. Managed says Talk to sales and adds customised frameworks, customised AI workflows and a dedicated CISO who doubles as your success manager. What the page never does is price any of it: no monthly figure, no per-seat rate, no starting-from, no annual floor, not even for the tier you are invited to start by yourself. We looked past the pricing page before writing that down, because the claim is usually wrong. The FAQ page, the product pages, the CMMC-as-a-Service page and the machine-readable llms.txt all describe the packages in detail and none of them names an amount; the sitemap holds no second pricing page; and the raw HTML of /pricing carries no hidden figure either. So the tiers tell you exactly what you get and leave what you pay entirely to a call. Checked again 11 October 2026 on www.mycroft.io/pricing and www.mycroft.io/llms.txt: the same three packages with the same contents, and still no amount anywhere.",
  "verified_at": "2026-10-11",
  "source_url": "https://www.mycroft.io/pricing"
 },
 "free_plan": false,
 "free_plan_evidence": null,
 "cost_traps": [
  {
   "id": "quote_only",
   "label": "Quote-only pricing",
   "evidence": "No published price: none of the three tiers (Platform, Scale, Managed) shows a figure anywhere on the site, including the self-serve entry tier (read 4 Sep 2026)",
   "verified_at": "2026-10-11",
   "source_url": "https://www.mycroft.io/pricing"
  }
 ],
 "compare_with": {
  "name": "a self-serve compliance-automation platform",
  "why": "the honest comparison is not feature against feature but model against model. Tools like Vanta, Drata or Secureframe sell you the software that watches your controls and collects the evidence — you still supply the people who fix what it finds, and you still hire the pen tester and the auditor separately. Mycroft sells the software with the people attached: the Risk Operations Center, the remediation, the enclaves, the audit coordination and, on the top tier, a named CISO. If you have the engineers and only want the paperwork automated, the self-serve platform is the cheaper shape and its price is easier to find. Mycroft earns its place when the gap is expertise rather than tooling, and when CMMC or FedRAMP — the frameworks it leads with, and the ones where a generic SOC 2 tool helps least — is what stands between you and the contract"
 },
 "links": {
  "record": "https://aibuildermarketplace.com/api/v1/products/mycroft.json",
  "review": "https://officesoftwaremarketplace.com/mycroft-review.html",
  "marketplace": "https://aibuildermarketplace.com/marketplace/mycroft/",
  "vendor_site": "https://mycroft.io"
 },
 "purchase": {
  "seller": "the vendor",
  "how": "AIBuilder Marketplace does not sell this software. Sign up, start a trial or buy on the vendor's site.",
  "handoff_url": "https://try.mycroft.io/tlfhcxheacia",
  "affiliate": true,
  "disclosure": "Where purchase.affiliate is true, purchase.handoff_url is an affiliate link: AIBuilder Marketplace may earn a commission at no extra cost to the buyer. Commission never changes what a record says, and products are not ranked by commission. Where it is false the link is the vendor's plain site."
 },
 "provenance": {
  "research": "hand-researched dossier, read on the vendor's own pages",
  "researched_since": "2026-07",
  "method": "https://aibuildermarketplace.com/how-we-review/",
  "license": "CC BY 4.0. Credit 'AIBuilder Marketplace' with a link to https://aibuildermarketplace.com/atlas/.",
  "note": "A rebuild is not a new measurement: pricing.verified_at is the date that matters."
 },
 "cost": {
  "status": "not_yet",
  "engine": "https://aibuildermarketplace.com/agents/#cost",
  "rules": null,
  "growth": null
 },
 "unknowns": [
  "Pricing status is 'quote_only': no single public entry price.",
  "Contract terms (cancellation, data export, data location, minimum seats) are not researched as separate fields; pricing.notes mentions them only where the vendor's pricing page does.",
  "No computable price rules yet: cost at a given team size cannot be calculated for this product.",
  "Not tested hands-on by us: what the product does comes from the vendor's pages and our reading of them."
 ],
 "task_evidence": null,
 "open_questions": [
  {
   "question_id": "mycroft:public_price",
   "key": "public_price",
   "question": "Can you publish a price, or a starting price, for the plans that are quote-only?",
   "status": "open"
  },
  {
   "question_id": "mycroft:cancellation_terms",
   "key": "cancellation_terms",
   "question": "Can a customer cancel at any time, and what happens to an annual plan that is cancelled mid-term?",
   "status": "open"
  },
  {
   "question_id": "mycroft:data_export",
   "key": "data_export",
   "question": "Which data can a customer export, in which formats, on which plans?",
   "status": "open"
  },
  {
   "question_id": "mycroft:data_location",
   "key": "data_location",
   "question": "Where is customer data stored, and can a customer choose the region?",
   "status": "open"
  },
  {
   "question_id": "mycroft:minimum_seats",
   "key": "minimum_seats",
   "question": "Is there a minimum number of seats or users on any plan?",
   "status": "open"
  }
 ],
 "vendor_answers": [],
 "agent_channels": {
  "vendor_mcp": null,
  "agent_checkout": {
   "status": "not_found",
   "detail": "No explicit support for purchases by AI agents on the vendor's own pages.",
   "checked_at": "2026-10-07",
   "method": "homepage, /pricing and the pricing page we cite, read as plain HTML (no JavaScript) and searched for explicit support of purchases by AI agents: Agentic Commerce Protocol, Instant Checkout, Agent Payments Protocol, buy in ChatGPT, agentic checkout"
  }
 },
 "offers": [
  {
   "offer_id": "mycroft-reader-offer",
   "version": "607f1a805a",
   "offer_type": "price_discount",
   "benefit": "20% off any Mycroft purchase",
   "verification_status": "vendor_confirmed",
   "expires_at": null,
   "record": "https://aibuildermarketplace.com/api/v1/offers.json#mycroft-reader-offer"
  }
 ]
}