Invest in cybersecurity clarity that pays for itself.
Derive connects your cybersecurity controls, data, and decisions into one measurable system - helping you cut waste, prove ROI, and drive smarter protection where it matters most.
“CRQ is about managing risk, not just quantifying it…intelligence and integrations lower CRQ’s level of effort.”
- Forrester, Q2 2025 CRQ Report
“Advanced cyber-risk quantification platforms consolidate telemetry signals and continuously update your risk posture through data science-based algorithms.”
- TechCrunch

Pricing for every maturity level
Choose between foundational self-service or expert-led support
Derive Subscription
Scalable SaaS with unlimited assessments and seats.
Peer Risk Benchmarks
Unmatched dataset embedded directly in Derive, providing market context instantly.
Built-in Security and Trust
Architected from the ground up for enterprise governance, privacy, and auditability.
Program Support
Let us help you build a sustainable, data-driven cyber risk and operations program.
Assessment and Operations Enablement
Expert guidance and staff augmentation available to help execute risk operations.
Essentials Foundation Complete
Foundation
Essentials
Full access to the cybersecurity risk and operations platform
Build
Stand up and run a quantified, risk-driven program in Derive
Accelerate
Combine Derive with expert-led delivery for maximum impact
Complete
$4,400/month
~$11,200/month
Includes ~15% off support fees

See how Derive turns cyber risk into clear action
Get a firsthand look at how Derive helps teams prioritize, track, and reduce cyber risk in real time - all backed by real data and measurable results.