PLANS / ONE REVIEW PROCESS / SHARED RESOURCE LIMITS
Start free.
Expand when it fits.
Retirement reviews, declared version evidence, owned work and estate reports on both plans. Explore Azure/AWS configuration and account-notice workflows with fictional data before connecting an account.
Free evaluation
£0
1 real estate · 100 shared resources · up to 25 team members
CSV review, retirement actions, owners and internal dates, evidence history, estate reports, workspace roles and authenticator MFA. Declared API/runtime evidence, scoped lifecycle work and the fictional configuration preview are included.
No card or Azure connection needed. Built-in fictional samples do not use your real estate/resource allowance.
Create free workspace →Founding team plan
£99.00/month
50 real estates · 10,000 shared resources · up to 25 team members
Everything in the free evaluation, with higher limits, cross-estate retirement campaigns, milestones, execution checklists, monthly internal review packs, communication drafts and ticket handoffs.
The Freshdesk connector is implemented; authorised live-account validation remains outstanding. Other service-desk providers use manual ticket CSVs.
£99 is the total monthly price; Arctic Parade LTD is not currently VAT registered. The first ten paying founding customers keep £99/month for their first 12 months. Monthly billing, with no annual commitment. Founding places apply when a paid subscription is confirmed.
View subscription →Compare what is included
| Capability | Free evaluation | Founding team |
|---|---|---|
| Real estates | 1 | 50 |
| Shared inventory/configuration resources | 100 | 10,000 |
| CSV review, retirement actions and estate reports | Included | Included |
| Owners, internal dates and evidence history | Included | Included |
| Declared API/runtime versions and scoped lifecycle work | Included | Included |
| CSV version evidence and expiring administrator risk acceptance | Included | Included |
| Authenticator MFA and workspace roles | Included | Included |
| Team members | Up to 25 | Up to 25 |
| Fictional configuration scenarios, baseline approvals and finding history | Preview included | Preview included |
| AWS security-group SSH/RDP review with fictional scenarios | Preview included | Preview included |
| S3 Block Public Access review for explicitly approved buckets | Preview included | Preview included |
| RDS public-access review for explicitly approved DB instances | Preview included | Preview included |
| Account-scoped AWS Health notice review for approved resources | Preview included | Preview included |
| Scoped AWS provider-version lifecycle review | Preview included | Preview included |
| Reported expiry for explicitly approved Amazon-issued ACM certificates | Preview included | Preview included |
| Logging flag for explicitly approved CloudTrail home-region trails | Preview included | Preview included |
| Sensitive AWS security-group permission broadening | Preview included | Preview included |
| RDS automated backup retention against an approved minimum | Preview included | Preview included |
| Cross-estate retirement campaigns and milestones | Paid plan | Included |
| Execution checklists and monthly internal review packs | Paid plan | Included |
| Ticket CSVs and communication drafts | Paid plan | Included |
| Freshdesk connector | Paid plan | Implemented; live validation pending |
| Azure configuration collection | Not enabled | Not enabled |
| AWS configuration collection | Not enabled | Not enabled |
Fictional samples do not use real estate/resource allowances. Inventory and configuration share the allowance: the same identified resource in an estate counts once. Retained configuration identities continue to count until the estate is removed.
What the preview includes—and what a result means
Azure includes NSG SSH/RDP rule candidates (effective reachability unassessed), sensitive NSG broadening, App Service HTTPS/TLS/access restrictions, Storage access/TLS/network changes, Key Vault network/expiry metadata, public-IP attachment changes, explicit diagnostic requirements and supported VM backup review.
AWS includes security-group candidates/broadening, explicit S3 Block Public Access, RDS public-access/retention, CloudTrail logging, Amazon-issued ACM expiry, selected provider-version schedules and AWS Health account notices. This does not establish public object access, log delivery, effective reachability or successful recovery. Explicit account/region/resource scopes and family limits apply.
Declared API/runtime evidence is supplied by your team. Provider-observed versions use a separate collection path. Missing, unsupported or stale evidence stays unknown. RDS minor/patch support and broader compatibility are unassessed. Real Azure/AWS configuration collection remains subject to platform availability and separate administrator consent; authorised account validation is outstanding. Health API access additionally requires an eligible AWS support plan.
Read complete scopes and limitations →Know the boundaries before subscribing
Retirement matching starts with the published Microsoft catalogue and your inventory. A match needs human review; an empty queue is not an all-clear. Azure, AWS, Google Cloud, DigitalOcean and Freshdesk adapters still require authorised live validation. Generic multi-provider inventory does not imply complete retirement or security coverage.
Microsoft SSO, customer-specific workspace permissions and external customer approval links are unavailable. Workspace members can see every estate in their workspace.
See the product workflow → · Example estate report → · Security →