Free
1 chip SDK, 1 product
£0forever
No card needed
Take the readiness check (Free plan)- CRA 24-hour readiness check
- Exploitation alerts for one chip SDK and one product
Pricing
A product security team for less than one engineer-day a month.
Monthly plans in GBP, excluding VAT. Start free, no card needed.
- All report drafts
- Deadline clocks
- Audit log
- ENISA form checklist
- EU/UK hosting
Find your plan · 3 questions
Read-only connectors, machine-readable advisories
Human review of every decision, filing for you
Answer above and we’ll point you to a plan. Not ready to pay? The Free plan needs no card.
Plans
Starter
1–3 product lines
£149/ month
Excl. VAT · billed monthly
Apply as a design partner (Starter plan)- Build and SBOM ingest
- Affected / not affected decisions, with reasons
- All report drafts: 24h, 72h, 14-day, customer advisory
- Deadline clocks from the moment of awareness
- Hash-chained audit log
- Field-by-field ENISA form checklist
Fleet-ready
Growth
Up to 15 product lines
£499/ month
Excl. VAT · billed monthly
Apply as a design partner (Growth plan)Everything in Starter, plus
- Fleet telemetry connectors (read-only)
- CSAF advisories and VEX
- Jira and GitHub integration
- Hosted customer advisory pages
Coming soon
Managed
Your outsourced PSIRT
from£1,500/ month
Excl. VAT · billed monthly
Register interest (Managed plan)Everything in Growth, plus
- 24/7 human review of every decision
- We file on your instruction as your Assigned Representative on ENISA’s platform
Prices are per month and exclude VAT. The Managed plan isn’t available yet and its price may change. Design partners pay £99/month for the first 6 months.
Compare
Every plan, side by side.
Paid plans include every report draft. Growth adds your fleet and machine-readable advisories.
| Plan | Free£0 | Starter£149 / mo | Growth£499 / mo | Managedfrom £1,500 / moComing soon |
|---|---|---|---|---|
| Coverage | ||||
| Product lines | 1 product | 1–3 | Up to 15 | Talk to us |
| CRA 24-hour readiness check | Included | Included | Included | Included |
| Exploitation alerts | 1 chip SDK | Included | Included | Included |
| Build and SBOM ingest | Not included | Included | Included | Included |
| Decisions and reports | ||||
| Affected / not affected decisions, with reasons | Not included | Included | Included | Included |
| 24h, 72h and 14-day report drafts | Not included | Included | Included | Included |
| Customer advisory draft | Not included | Included | Included | Included |
| Deadline clocks from awareness | Not included | Included | Included | Included |
| Field-by-field ENISA form checklist | Not included | Included | Included | Included |
| Hash-chained audit log | Not included | Included | Included | Included |
| Fleet and integrations | ||||
| Fleet telemetry connectors (read-only) | Not included | Not included | Included | Included |
| CSAF advisories and VEX | Not included | Not included | Included | Included |
| Jira and GitHub integration | Not included | Not included | Included | Included |
| Hosted customer advisory pages | Not included | Not included | Included | Included |
| Service | ||||
| 24/7 human review of every decision | Not included | Not included | Not included | Included |
| Who files with ENISA | Not included | You | You | We do, on your instruction |
FAQ
Questions we expect.
Straight answers on filing, data and what happens when we’re wrong.
Something not covered?
Email info@warnbell.com and we’ll get back to you.
Who files the reports?
You do. Reports go through ENISA’s Single Reporting Platform from your own EU Login account. Warnbell gives you the finished drafts and a field-by-field checklist that matches the platform’s forms, so filing takes minutes. There is no API to automate it ENISA SRP FAQ (source, opens in a new tab).
On the Managed plan (coming soon), you can nominate us as an Assigned Representative on the platform: a user role that lets named people submit notifications for a manufacturer ENISA FAQ, Q9 (source, opens in a new tab). We would then file on your written instruction, after you have approved the report. It is not a certification or an approval from ENISA or the EU, and it is not the same as an “authorised representative” under Article 18 of the CRA Reg. (EU) 2024/2847 (source, opens in a new tab). You remain the manufacturer and stay responsible for your reports.
Do you need our telemetry?
No. Build or SBOM data is enough to decide whether you’re affected and to draft every report. On the Growth plan you can add read-only fleet connectors (MQTT, AWS IoT Device Defender, Azure IoT Hub, Memfault). They add evidence, such as crash loops or bursts of failed logins on affected versions, but nothing depends on them.
Where is our data hosted?
In the EU and the UK. We only take what each decision needs, connectors are read-only, and a data processing agreement is available. See Security & trust.
What if you get it wrong?
You approve every report before it’s filed, and every claim in a draft links to the evidence behind it, so a reviewer can check any sentence in one click. When the AI isn’t confident, it answers “needs a human” rather than guessing. Every decision and edit is kept in a hash-chained audit log.
What counts as a product line?
A family of devices that share one firmware codebase, for example a camera range sold as several models. If you’re not sure how your range counts, ask us before you pay anything.
What is the design-partner offer?
5 places at £99/month for the first 6 months, in exchange for regular feedback while we build. Apply here.
Design-partner programme
Become one of five design partners.
Help shape Warnbell while it’s being built. You get the product early at £99/month, and the founder on the other end of the line. We get your honest feedback.
Design partner pass
Nº 01–05
£99/ month
- Term
- First 6 months
- Includes
- Growth plan, as it ships
- Direct line
- To the founder
- In return
- Honest feedback
Places open