The options small firms actually weigh
SafeBase (Drata)
A trust-center platform where buyers can self-serve security documents. A fit when buyers ask for the same documents repeatedly. Its site publishes plan details; ask for pricing.
See current plansConveyor
Its free Trust Center lets teams show their security posture and share documents. Questionnaire automation is on paid plans; the Business tier starts at $9,600/year (published on their pricing page). Conveyor offers a trial to test AI answering against your knowledge base.
See current plansDoing it manually
Still an option at small firms. Your team handles evidence search, drafting and review; the tradeoff is senior time and slower turnaround.
Shuttlewright
A white-label RFP and Security Desk being built with founding design partners. The intended workflow retrieves from approved sources, maps controls and drafts cited answers for human review. The current walkthrough is synthetic; customer-ready fulfillment is not proven.
See five-day pilot termsHonest differences
- SafeBase and Conveyor are software you operate. Shuttlewright is a desk being built to work with your reviewer holding the gate.
- If all you need is a simple trust center, Conveyor offers one for free. Shuttlewright does not offer a trust center.
- For proven portal-native automation at scale today, Conveyor's paid product is further ahead. Shuttlewright is at pilot stage.
- If senior time spent drafting from documents is the bottleneck, Shuttlewright is being built for that specific work, with citations and a human approval gate.
Who this is for
vCISO and GRC consultancies preparing questionnaires for clients, and SaaS or security vendors handling enterprise reviews themselves. The intended pilot audience is teams of roughly 5–200 that want a reviewer gate rather than autopilot.
Current stage: The workflow has a synthetic walkthrough. That is not a client finding, a customer-ready answer packet or proof of paid-order fulfillment. See the pilot scope before relying on any proposed workflow.
See the five-day pilot
One workspace, one source library, one questionnaire family. Review the current scope and price on the live page.
Pilot scope and pricing Signal AuditCommon questions
Is there a free security questionnaire tool?
Conveyor publishes a free Trust Center plan for sharing security information, but questionnaire automation is not included in that free tier. Manual drafting has no software subscription, though it takes staff time.
Is Shuttlewright a SafeBase alternative?
Only if your specific problem is preparing source-backed questionnaire drafts. Shuttlewright does not offer a buyer-facing trust center. SafeBase is a better fit for self-service document access.
What does security questionnaire help cost a small firm?
Costs vary by scope and product. Conveyor publishes a free Trust Center tier and its Business tier starts at $9,600/year (published on its pricing page); SafeBase lists plan features and asks buyers to contact it for pricing. Shuttlewright publishes its current five-day pilot price and scope on the pilot page.