> ## Documentation Index > Fetch the complete documentation index at: https://docs.pharussecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # Plans and features > What Free, Starter, Core and Plus include, what the 14-day trial covers, and the add-ons you can buy on top. Pharus is priced per product family, never per seat: bring the whole engineering team. Prices are in NOK, excluding VAT. A year costs ten months. The current prices are also on the [pricing page](https://www.pharussecurity.com/en#pricing). | Plan | Monthly | Yearly | Product families | | - | - | - | - | | **Free** | 0 NOK | 0 NOK | Vulnerability intake only | | **Starter** | 1 900 NOK | 19 000 NOK | 1, up to 3 with extras | | **Core** | 6 500 NOK | 65 000 NOK | 5, up to 10 with extras | | **Plus** | 14 000 NOK | 140 000 NOK | No limit | Starter and Core are self-serve: a workspace owner subscribes under **Settings → Billing**. Plus includes hands-on work from people, so it is set up together with us: [get in touch](https://www.pharussecurity.com/en/contact). ## What each plan includes Starter is the baseline. Each plan includes everything in the one before it. | Feature | Free | Starter | Core | Plus | | - | :-: | :-: | :-: | :-: | | [Disclosure page, report form, security.txt and hosted policy](/disclosure/disclosure-page) | ✓ | ✓ | ✓ | ✓ | | [Disclosure inbox](/disclosure/inbox) with replies and a triage log | ✓ | ✓ | ✓ | ✓ | | [SBOM ingest](/monitoring/sboms) and [matching against KEV and EUVD](/monitoring/vulnerabilities) | | ✓ | ✓ | ✓ | | [Weekly exposure digest](/monitoring/weekly-digest) | | ✓ | ✓ | ✓ | | [Incidents](/incidents/overview) with the [CRA clocks](/incidents/clocks) from awareness | | ✓ | ✓ | ✓ | | [Art. 14(7) routing](/incidents/routing) and [SRP paste packs](/incidents/srp-pack) | | ✓ | ✓ | ✓ | | [CSAF/VEX advisories](/disclosure/advisories) on your public advisory page | | ✓ | ✓ | ✓ | | [Inform users](/incidents/inform-users), [support periods](/monitoring/support-periods), [upstream reports](/incidents/report-upstream) | | ✓ | ✓ | ✓ | | [Audit trail](/reports/audit-trail) and [data export](/workspace/data-and-deletion) | ✓ | ✓ | ✓ | ✓ | | [Decision record and approvals](/incidents/decision-record) | | | ✓ | ✓ | | [On-call rota](/on-call/rota) and [escalation](/on-call/paging) | | | ✓ | ✓ | | [GDPR and digitalsikkerhetsloven triage](/incidents/norwegian-notices) next to the CRA | | | ✓ | ✓ | | [Quarterly board report](/reports/board-report) and [annual drill](/incidents/drills) | | | ✓ | ✓ | | [Annex VII technical documentation](/reports/technical-file) | | Add-on | ✓ | ✓ | | [Slack, Teams and webhook alerts](/notifications/overview) | | | ✓ | ✓ | | [DORA triage](/incidents/dora) | | Add-on | Add-on | ✓ | | [Partner review](/incidents/expert-review) of every filing, expert help included | | | | ✓ | On Free, the inbox, the disclosure settings and the company details stay editable, and published advisories stay public. Everything else is read-only, but stays readable and can be exported. ## The 14-day trial Every new workspace starts with 14 days of every software feature, Plus features included, with no card and no limit on product families. The trial doesn't include the services that are people's time: the partner review and the included expert help. If an owner subscribes during the trial, the first payment is taken when the 14 days are up. If the trial ends without a subscription, the workspace moves to Free. One person can own only one unpaid trial at a time. See [billing](/workspace/billing). ## Free Free keeps vulnerability intake running: researchers can still report through your disclosure page, security.txt and by email, and you can answer them from the inbox. Monitoring pauses (no matching, alerts or digests), CI uploads are refused, and the CRA clocks and SRP packs stop; declaring an incident from a report needs a subscription. Nothing is deleted. An owner can subscribe at any time under **Settings → Billing**, and everything opens again. A Free workspace that nobody signs in to for 12 months is deleted, after warnings by email. See [data and deletion](/workspace/data-and-deletion). ## Add-ons Add-ons are features from a bigger plan, bought one by one under **Settings → Billing**. They are billed with the plan, monthly or yearly. | Add-on | On | Monthly | Yearly | | - | - | - | - | | [Annex VII technical file](/reports/technical-file) | Starter (included in Core and Plus) | 1 500 NOK | 15 000 NOK | | [DORA triage](/incidents/dora) | Starter and Core (included in Plus) | 3 000 NOK | 30 000 NOK | | Extra product family | Starter, up to 2 | 1 900 NOK each | 19 000 NOK each | | Extra product family | Core, up to 5 | 1 500 NOK each | 15 000 NOK each | At Starter's cap, Core costs about the same; at Core's cap, the total equals Plus. Past that, the bigger plan is the better buy. ## Expert help On Starter, Core and during the trial, an owner or admin can ask a partner consultant to review an incident's drafts before the deadline, from 5 000 NOK excl. VAT per incident. Plus includes it, and opens a partner review by itself once there is something to file. See [expert help](/incidents/expert-review). ## Related Subscribe, switch plan, add-ons, VAT and invoices. What counts as a product family, and how limits work. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.