Garrison secures the infrastructure. Corps connects that work to your audit, with founder-led SOC 2 consulting included. Your team reviews and approves every change.
$500/mo $6,000/year equivalent
Harden AWS, turn findings into reviewable fixes, and maintain your security documentation.
$25,000/year Total bundle price, including Garrison and SOC 2 consulting
Everything in Garrison, plus the policy coverage, control-mapped evidence, and expert guidance behind SOC 2 preparation.
Start free in the app with no credit card required, then talk to us about the bundle that fits.
Garrison already captures security findings and remediation history. Corps adds SOC 2 control mapping, a broader policy suite, and people who help you prepare for the audit.
Corps is $19,000/year above Garrison's $6,000 annual equivalent. That difference includes the SOC 2 consulting and audit layer; it is not a second Garrison subscription or a separate consultant bill.
Consulting supports your team's decisions and preparation. It does not replace the independent auditor or guarantee an audit outcome. Agree on engagement scope and support expectations before starting.
| Capability | Garrison | Corps |
|---|---|---|
| Hardened IaC: new builds and conversions | Included | Included |
| Reclaimer, Architect, and Plumber | Included | Included |
| Snippy Private preview | Early access on request | Early access on request |
| Remediation PRs, drift, and CI/CD security gates | Included | Included |
| SAST / DAST and OWASP Top 10 mapping | Included | Included |
| AWS findings and CIS AWS benchmark checks | Included | Included |
| Infrastructure cost optimization proposals | Included | Included |
| Security documentation and Living Trust Center | Included | Included, plus audit layer |
| Founder-led SOC 2 consulting | Not included | Included in $25,000/year |
| Full SOC 2 policy suite | Not included | Included |
| SOC 2 control-mapped evidence and auditor handoff | Not included | Included |
| Questionnaire and audit response support | Not included | Included |
| Partner penetration testing and reports | Roadmap | Roadmap |
Security records in both bundles. The full SOC 2 policy and evidence layer in Corps. Documentation updates are proposed for your team's approval as infrastructure changes.
| Deliverable | Garrison | Corps |
|---|---|---|
| Findings report, Reclaim Score, and remediation log | Included | Included |
| Access control, encryption, and incident response policies | Included | Included in full suite |
| Architecture and data-flow documentation | Included | Included |
| Security posture summary | Included | Included |
| Full ten-policy SOC 2 suite | Not included | Included |
| Control-mapped evidence library and approval trail | PR history | SOC 2 mapping and export |
| Access review records, logging and monitoring evidence | Not in audit package | Included in audit package |
| Security questionnaire answers and auditor handoff materials | Not included | Included |
A proposed extension for Garrison or Corps: investigate suspected threats, explain containment options, and execute a supported response only after your team's approval.
In development. Not available in current subscriptions. Pilot scope and pricing will be agreed separately; existing bundle prices do not include this planned add-on.
Supported environments, response playbooks, usage, and support expectations will be defined before a pilot. This is not a 24/7 staffed incident-response service.
Explore planned Assisted ResponseRequest a scan through our contact form. We coordinate access and scope with you to establish the share of resources under IaC, findings, and top exposures.
Request a Reclaim Score scanNo. Founder-led SOC 2 consulting and audit preparation are included in the $25,000/year Corps bundle, alongside Garrison. Confirm your engagement scope and support expectations with us.
Before starting, agree on AWS accounts, repositories, onboarding and IaC conversion work, scan cadence, execution limits, and support expectations. Confirm independent audit and any third-party service costs separately.
No. Agent capabilities and the Living Trust Center are part of the bundles above. Reclaimer does not require credit packs.
Your team. Agents draft pull requests; your engineers review and merge through your deployment workflow. Evidence is captured from that work, and documentation updates are proposed for approval.
Corps supports the SOC 2 audit layer today: 165 of the 171 bundled checks map to the Trust Services Criteria, and all 61 criteria are pre-seeded so gaps are visible from the start. CIS AWS, NIST 800-53, and ISO 27001 mappings are available as coverage views, covering 40, 68 and 153 checks respectively. Those views are not full compliance programs, consulting engagements, or certification. Broader CIS framework programs, NIST, HIPAA, FedRAMP, and StateRAMP are on the roadmap. CIS AWS infrastructure benchmark checks in Garrison are distinct from a full compliance framework program.
No. Corps supports audit preparation; an independent auditor determines the outcome. Readiness depends on scope and starting posture. Cost optimization opportunities depend on your environment.
No. Partner-delivered penetration testing and its reports are on the roadmap for both bundles.