I work with a customized Archer risk management module at work, so I'm pretty familiar with it. If you are targeting the enterprise/B2B market, they're going t

I work with a customized Archer risk management module at work, so I'm pretty familiar with it. If you are targeting the enterprise/B2B market, they're going to laugh at $20. In theory, PCI compliance is worth whatever revenue you bring in with credit cards, since being non-compliant theoretically means you could lose all of that revenue. That said, the typical model of security software is to charge as much as you possibly can. You're making a product that supposedly interfaces with Archer - who can easily charge $50k+ in renewal fees each year. Enterprise customers usually equate higher $$$ with better functionality/more security. I say that with significant experience consulting and working for large enterprises. I'd thinking about charging significantly more, maybe even in the $499 range depending on the exact functionality of your product. This is interesting, because I've recently been thinking a bout product ideas around the assessment process. Archer is WAY overkill for a lot of businesses, even some large businesses.