Pricing

Pay only for what you need

A base platform + add-on modules. No hidden features. AI costs are included in every plan.

Monthly
Annual -20%
SMEs & startups
Essential
To structure your GRC approach
1 000€
per month, excl. VAT
1 entityUnlimited assets50 AI/month5 users
  • Asset inventory + CIA classification
  • Unlimited risk register
  • Interactive 4x4 matrix + AI/Expert dual scoring
  • AI risk scenarios — 50 analyses/month
  • Audit & compliance — 3 frameworks (ISO 27001, NIS2, GDPR)
  • Action plans + AI recommendations
  • Information security policies (3-level pyramid)
  • Professional PDF + XLSX export
  • DMS — 10 GB of documents
  • 5 users included
  • Email support (48h)
Start — 14-day trial

No commitment, free cancellation

Mid-market — Most popular
Standard
The complete platform for cyber teams
2 500€
per month, excl. VAT
5 entitiesUnlimitedUnlimited AI15 users
  • Everything in Essential +
  • 5 multi-tenant entities
  • Unlimited AI scenarios
  • All frameworks (+ HDS, DORA, LPM/OIV)
  • ISP — project security (DICP classification)
  • Phishing simulation (Phishia) — unlimited campaigns
  • CTI — dark web monitoring + real-time alerts
  • OSINT — digital exposure
  • Cyber insurance — policy & claims tracking
  • Audit log & full history
  • Executive PPTX export for board
  • Google & Microsoft SSO + mobile app
  • DMS — 50 GB + versioning
  • 15 users included
  • Priority chat support (24h)
Request a demo

30-min demo with a Galea expert

Enterprise & MSP
Advanced
Custom deployment, guaranteed SLA
On request
Personalised quote within 24h
Unlimited entitiesOn-premiseREST APIUnlimited users
  • Everything in Standard +
  • Unlimited entities & users
  • TPRM — unlimited supplier risk management
  • On-premise / private cloud deployment
  • REST API + webhooks (OpenAPI)
  • SIEM / SOAR / ITSM integrations
  • Unlimited custom frameworks
  • 99.9% SLA guaranteed contractually
  • Dedicated account manager
  • On-site training & onboarding
Request a quote

Response within 24h

Add-on modules

Complement your plan with the services you need

Activatable on Essential and Standard plans. All included in the Advanced plan.

CTI ProAdvanced Cyber Threat Intelligence
+450€/month

Real-time dark web monitoring, credential leak detection, premium Threat Intel feeds, sector-specific alerts. Beyond CVEs — tracking attack campaigns targeting your sector.

Dark webCredential leaksThreat IntelSector alertsMonthly reports
EssentialStandardAdvanced included
Full OSINTYour organisation's digital exposure
+300€/month

Scan of your digital footprint: exposed subdomains, open ports, disclosed data, underground forum mentions. Monthly exposure report with external risk score.

Subdomains & portsDisclosed dataUnderground forumsExposure score
EssentialStandardAdvanced included
Phishia — Phishing simulation Also available at phishia.fr
+300€/month

Simulated phishing campaigns, team scoring, automatic awareness training. Native Galea integration: results feed directly into your risk register.

Unlimited campaigns50+ templatesTeam scoringAuto trainingRisk integration

Also available standalone at phishia.fr from €150/month.

EssentialStandardAdvanced included
TPRM — Supplier risksThird-party risk management
+390€/month

ISO 27001 / NIS2 questionnaires sent automatically to your subcontractors. Supplier scoring, incident alerts, supply chain risk report. Up to 20 third parties included.

Auto questionnairesSupplier scoringIncident alerts20 third parties
EssentialStandardAdvanced included
Cyber insuranceAutomated subscription files
+150€/month

Generate subscription files for your broker: maturity report, incident history, measures in place, residual risk. Format accepted by leading cyber insurance underwriters.

Subscription fileMaturity reportResidual riskInsurer format
EssentialStandardAdvanced included
Custom frameworkYour own internal or sector-specific standards
+120€/framework

Import or create your own compliance frameworks. Built-in controls editor, CSV/Excel import, automatic scoring. Ideal for sector-specific, contractual or internal standards.

Controls editorCSV/Excel importAuto scoring
EssentialStandardAdvanced unlimited
Usage-based

Additional options

■
Additional entity

Multi-tenant beyond the plan quota

+180€/month
■
Additional user

Beyond the included users per plan

+45€/user/month
■
Intensive AI pack

+500 additional AI analyses / month

+150€/month
■
Additional DMS storage

Extra space for document management

+30€/50 GB/month
■
Additional TPRM suppliers

Pack of 20 additional third parties

+120€/20 third parties/month
■
On-site onboarding & training

4-hour session with a Galea expert

2 900€one-off

Our pricing philosophy — full transparency

An ISO 27005 scenario generated by our sovereign AI engine costs us €0.05 to €0.10 in API calls. For 100 analyses/month, that is less than €10 in AI costs per client. These costs are fully absorbed in your plan — no surcharge, no usage-based billing. Our main cost drivers: sovereign infrastructure (databases and France hosting) and CTI feeds (dark web, premium Threat Intel), which is why the CTI Pro module is priced separately. You only pay for what you actually use.

FAQ

Frequently asked questions

Are AI costs really included in the plan?
Yes, without exception. Our sovereign AI calls are included in your plan. An ISO 27005 scenario generated costs us €0.05–0.10 — we do not pass these costs on to you. The Essential plan offers 50 analyses/month; the Standard plan is unlimited because real usage remains predictable.
Why is CTI Pro a separate module?
Unlike generative AI, Threat Intelligence feeds (dark web, premium Threat Intel, data brokers) have high fixed costs: €200 to €500/month in data licences. That is why we offer it as a separate module rather than having all clients subsidise this cost.
What is the difference between Galea and Phishia?
Galea is the GRC platform (risks, compliance, assets, CTI). Phishia specialises in phishing simulation — available as a Galea module (+€300/month) or standalone at phishia.fr (€150/month). As a Galea module, results integrate directly into your risk register.
Where is my data hosted?
100% in France (certified sovereign datacenter), GDPR-compliant. Our sovereign AI calls use European infrastructure. The Enterprise plan can be deployed on-premise at your site.
Discounts for consulting firms / MSPs?
Yes. Consulting firms and MSPs managing multiple clients benefit from a partner programme with special rates and white-labelling tools. Contact contact@phishia.fr.

Not sure which plan to choose?

A Galea expert will help you identify the optimal plan in 20 minutes.

Talk to an expert
Free trial — No credit card

Ready to secure your organisation?

Join the companies that trust Galea to drive their cyber-résilience. 30-minute demo.

Request a free demo See pricing

Already a customer? Go to the platform