Quantify
Cyber risk becomes one number your whole organization understands, right alongside financial and operational risk.
Sirisoft × TrendAI · Cyber Risk Advisory
Cyber Risk is Corporate Risk.
Know your number before it costs you.
CRA turns the cyber risk hidden across your tools into one clear number that drops every quarter, with an advisor who translates it into business impact.
You've invested in security tools. But can you answer one question?
“Are we safe, and is it getting better?”
From an IT problem to a number your business can manage.
CRA elevates cyber from "an IT issue" to a corporate risk you manage with a single number, just like financial or operational risk.
Cost-aware
Know before it becomes a cost: breach, downtime, regulatory fines. Act ahead of the loss.
Provable
A number that falls every quarter is proof you're actually controlling the risk.
Know Your Number
One number that speaks to everyone, from the board to the front line.
Board / CFO
Govern corporate risk. Plug cyber into ERM and the board agenda with a single number, prove ROI, and know before it becomes a cost.
CISO / IT Director
Know what to fix first. Blind spots closed, actions prioritized, alert noise reduced, with an advisor guiding every cycle.
IT Operations
Act now. A clear remediation roadmap, a view of what's urgent, and follow-up every cycle.
CRA Packages
Know Your Risk. Reduce Your Exposure. Build Resilience.
A free, no-risk entry that grows into an annual subscription, priced all-in
(services + licence + phishing).
Cyber Risk Snapshot
One-off · no access required
Free
- Free attack-surface scan that shows what hackers see
- 1-page Cyber Risk snapshot, ready to share
- No deployment, no access needed
CRA Essentials
Quarterly reviews
from ฿650K/ year
- Complete security setup: risk dashboard, vulnerability & phishing readiness
- Quarterly risk review with our advisors
- Executive Risk Report every quarter
- We track your fixes until they're done
CRA Professional
Monthly reviews
from ฿750K/ year
- Everything in Essentials
- Monthly risk review with our advisors
- Monthly executive report + direct advisor line
- Priority response, built for regulated / CII
CRA Enterprise
Fully managed
Custom
- Everything in Professional
- On-demand advisory, anytime
- Your own dedicated advisory lead
- Fully managed, outcome-led scope
What You Get
What you get with each package
Scroll horizontally to compare every CRA package.
| What you get | Free Assessment | Essentials · Quarterly | Professional · Monthly | Enterprise · Managed |
|---|---|---|---|---|
| Getting You Protected · First 30 Days | ||||
| Free attack-surface scan that shows what hackers see | included | included | included | included |
| Dedicated onboarding: protected in 30 days | not included | included | included | included |
| Your live Cyber Risk Score dashboard | not included | included | included | included |
| Full security activation: monitoring, vulnerability & phishing readiness | not included | included | included | included |
| Ongoing Risk Advisory · Year-Round | ||||
| Risk reviews with our advisors | not included | Quarterly | Monthly | Monthly + on-demand |
| Executive Risk Report every cycle | 1-page | included | included | included |
| We track fixes until they're done | not included | included | included | included |
| Direct line to your advisory lead | not included | not included | included | Dedicated |
| Total Year-1 investment (up to 200 users) | Free | ฿650,000 / yr | ฿750,000 / yr | Custom |
Indicative all-in figures · priced by organisation size · validated before quoting.
From occasional checks to continuous risk management.
One-off audit / pentest
Continuous every cycle. You see the trend, not a snapshot that's stale on arrival.
Raw dashboard / tool
An analyst translates it into prioritized actions. You don't read it alone.
MDR / SOC
Focused on strategic risk and executive reporting, not incident response. Complementary, not overlapping.
Reasons to choose Cyber Risk Advisory
Free, no-risk entry
External scan with no access and no commitment. Removes the "what's the catch?"
Land & expand
Start at the smallest tier; the Risk Index proves value, then grow up the ladder.
Bundled, but flexible
One annual price covers services, licence & phishing. Need something custom? We'll scope it together.
Compliance urgency
Tied to the Cybersecurity Act 2025 deadline, a clear reason to buy this fiscal year.
Easy for the TrendAI base
No-Agent onboarding for existing TrendAI customers, so it's fast and cheap to start.
Backed by TrendAI
Enterprise-grade detection from TrendAI, delivered and advised by Sirisoft.
Free Board Summary Report
Cyber risk is Corporate Risk.
Know your number before it costs you.
- See your real risk score in one read
- Benchmark against peers and industry
- Get clear, prioritized next actions
Drop your contact and we'll send your personalized report.