> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pharussecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Billing
> The 14-day free trial, subscribing to Starter or Core, add-ons, extra product families, invoices, and what Free keeps when a subscription ends.
**Plans:** Starter and Core are bought here; Plus is set up together with Pharus. **Who:** owners. Admins and members can open **Settings → Billing** but not change it.
Pharus is priced per product family, never per seat. Every company starts with a 14-day free trial, and an owner subscribes under **Settings → Billing**. Prices are in NOK, excl. VAT, and a year costs ten months. Card payments, billing details and invoices are handled on Stripe's secure pages.
## Prices
| Plan | Monthly | Yearly | Product families |
| - | - | - | - |
| Starter | 1 900 NOK / month | 19 000 NOK / year | 1, or up to 3 with extra ones |
| Core | 6 500 NOK / month | 65 000 NOK / year | Up to 5, or up to 10 with extra ones |
| Plus | 14 000 NOK / month | 140 000 NOK / year | Unlimited. By agreement |
All prices excl. VAT. What each plan includes: [Plans](/plans).
## The free trial
Every new company gets 14 days free from the moment it is created. No card is asked for.
* The trial has every software feature, both add-ons included, and no limit on product families.
* It doesn't include the services that are people's time: partner review of every filing and expert help included on every incident.
* The banner and the **Subscription** card on **Settings → Billing** show the days left. Owners get an email 3 days before the trial ends.
To keep monitoring running after the trial, an owner chooses a plan before it ends. If nobody does, the workspace moves to [Free](#when-the-trial-or-the-subscription-ends).
## Subscribe to Starter or Core
Under **Plans**, choose **Monthly** or **Yearly**.
Under **Add-ons**, tick the ones to include. They go into checkout with the plan, unless the plan already includes them.
Stripe's checkout page opens. Enter the card and billing address, and the VAT number if the company hasn't saved one.
The **Subscription** card shows the plan. If it says "Stripe hasn't confirmed the change yet", reload the page in a minute.
**When you pay first.** Subscribing during the trial charges nothing before the trial ends: the **Subscription** card shows the date as **First payment**. After the trial has ended, the first payment is taken at checkout.
**Product families.** A plan must cover the company's active product families, with extra ones where it sells them. Checkout adds the extra product families the active ones need. If more are active than a plan can take, archive some under **Settings → Product families** first. See [Product families](/monitoring/product-families).
### Plus
Plus includes hands-on help with CRA reporting and is set up together with you, paid by card or invoice. Select **Talk to us** on the Plus card, or use the [contact page](https://www.pharussecurity.com/en/contact). Have the company's **Workspace ID** ready: it is at the bottom of **Settings → Billing**.
## Add-ons
| Add-on | Price, excl. VAT | Sold on | Included in |
| - | - | - | - |
| DORA triage | 3 000 NOK / month, or 30 000 NOK / year | Starter and Core | Plus |
| Annex VII technical file | 1 500 NOK / month, or 15 000 NOK / year | Starter | Core and Plus |
An add-on is billed with your plan, on the same interval. See [DORA](/incidents/dora) and [Technical file](/reports/technical-file).
* **Add** charges the rest of the current period at once, to the card on file, and the add-on then renews with your plan.
* **Remove** ends the add-on at once, not at the end of the period. The unused part is credited to your account and taken off your next invoices. What you have already recorded stays readable.
If the card is declined, nothing changes: update it under **Manage payment and invoices** and try again. If you subscribed during the trial, adding an add-on charges nothing before the trial ends.
## Extra product families
When the plan's own product families aren't enough, add extra ones under **Extra product families** on **Settings → Billing**.
| Plan | Price per extra family, excl. VAT | Extra families | Families in all |
| - | - | - | - |
| Starter | 1 900 NOK / month, or 19 000 NOK / year | Up to 2 | 3 |
| Core | 1 500 NOK / month, or 15 000 NOK / year | Up to 5 | 10 |
**Add one** and **Remove one** settle like add-ons: one more is charged for the rest of the period at once, one fewer is credited at once. You can't remove an extra family that is in use: archive a product family first. Plus has no limit.
## Switch plan or billing period
On a plan card, select **Switch to Core**, **Switch to Starter**, **Switch to yearly** or **Switch to monthly**. The difference for the rest of the period is settled at once: charged to the card on file, or credited when the new price is lower. Without add-ons or extra families you confirm the switch on Stripe's page, which shows the amount. If you subscribed during the trial, nothing is charged before the trial ends.
* The plan card lists what turns off on the new plan. What you have already recorded stays readable.
* Add-ons stay and move to the new interval at their current price. An add-on the new plan includes, such as the technical file when you switch from Starter to Core, ends and its unused part is credited.
* Extra product families stay on the same plan. On a switch to the other plan, Pharus sets the number your active families need.
* To move to or from Plus, talk to Pharus.
## Payment and invoices
After the company's first checkout, **Payment and invoices** on **Settings → Billing** has a **Manage payment and invoices** button. It opens Stripe's Billing Portal, where you change the card and the billing details, see and download invoices, and cancel the subscription.
Cancelling takes effect at the end of the current period: the **Subscription** card shows **Ends** with the date, everything keeps working until then, and the workspace then moves to Free. See the [terms](https://www.pharussecurity.com/en/terms) for what applies to the period already paid.
If a payment fails, the card shows **Payment failed**. Stripe retries the payment, and the workspace stays open meanwhile. Update the payment method in the Billing Portal to keep it open.
## VAT number and invoice email
Both are under **Settings → Company → Invoice details**, where owners and admins can change them. See [Companies](/workspace/companies#invoice-details).
* **VAT number.** In Norway, tick **Registered in the Norwegian VAT Register**, and invoices show the organisation number followed by MVA. In other EU and EEA countries, enter the **VAT number**. The Billing Portal doesn't change it. If no number is saved, checkout asks for one, and the number you give there becomes the company's.
* **Invoice email.** Each invoice is emailed with its PDF attached to this address, often an accounting system's inbox: an invoice paid by card once it is paid, an invoice to pay as soon as it is issued. Without an invoice email, Pharus sends none; the invoices are in the Billing Portal.
## Expert review fees
On Starter and Core, and during the trial, asking a partner consultant to review an incident costs from 5 000 NOK excl. VAT per incident. The owner or admin who asks accepts the fee in the request, and Pharus bills it when the request is sent: to the card on the company's subscription, or by invoice. Plus includes expert help. See [Expert help](/incidents/expert-review).
## When the trial or the subscription ends
When the trial ends without a subscription, or a subscription ends, the workspace moves to **Free**. Nothing is deleted, and owners get an email.
**What keeps working**
* Vulnerability reports still arrive through your disclosure page, security.txt and email, and you can answer and triage them in the [disclosure inbox](/disclosure/inbox).
* Owners and admins can change the disclosure settings and the company details.
* Published advisories stay up.
* You can read and export everything. Pages already sent keep escalating until someone acknowledges them.
* Owners and admins can still invite, change and remove members.
**What pauses**
* Monitoring: no new matches, alerts or weekly digests.
* The CRA clocks and SRP packs. Everything else is read-only.
* CI uploads of SBOMs are refused (HTTP 402) until a subscription is active.
The CRA Art. 14 deadlines don't pause when Pharus does. If an incident is open when the trial or the subscription ends, its reports are still due on time.
To open the workspace again, an owner selects **Start a subscription** in the banner, or subscribes under **Settings → Billing**.
Pharus keeps a Free workspace while it is in use. One that nobody signs in to for 12 months is deleted, and the owners get a reminder 30 and 7 days before. See [Data and deletion](/workspace/data-and-deletion#automatic-deletion).
A workspace an owner closed is different: it stops taking vulnerability reports. See [Close a workspace](/workspace/data-and-deletion#close-a-workspace).
## Related
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.