← ncdLabs
Assure by ncdLabs

Assure

Continuous technical compliance for WordPress — discover risks, audit controls, remediate issues, monitor drift, and keep audit-ready evidence.

Free on WordPress.org · WordPress 6.6+ · PHP 8.1+

59 GDPR controls Built-in · free
38 OWASP Top 10 2025 Built-in · free
17 NIST CSF 2.0 Built-in · free
Discover Scripts, forms, integrations
Enforce Consent, blocking, gating
Monitor Scheduled drift detection
Remediate One-click fixes where supported
Verify Re-evaluate after changes
Report Evidence and export

Built for WordPress operators

Metrics first, then the work: scores, findings, and clear status labels so you know what passed, what needs attention, and what still needs a person.

Monitor

Dashboard

Readiness scores, findings counts, monitoring state, and deep links into what needs attention.

Manage

Controls · Integrations · Consent · Evidence

Catalog scope, Google OAuth and GTM, native consent banner, and manual evidence when automation cannot decide.

Assure

Audits · Reports

Run audits, review findings, remediations, history, and export JSON, CSV, or PDF for reviewers.

Integrations

Assure can detect or check the following plugins and services.

Inside Assure

Click any screenshot to open the full-size view.

Assure dashboard showing compliance health and readiness score
Dashboard Readiness scores, findings, and recent audits.
Assure audits findings table with GDPR control results
Audits and findings Control results, remediation status, and audit history.
Assure controls page with GDPR, OWASP Top 10, and pack management
Controls Built-in frameworks plus optional yearly encrypted packs.
Assure consent manager settings with native banner configuration
Consent manager Banner design, versioning, and category choices.

Pricing

The free plugin includes built-in GDPR, OWASP Top 10, and NIST CSF 2.0 catalogs. Add annual framework pack subscriptions when you need more — Privacy from $49/yr, Accessibility, HIPAA, and FTC Safeguards at $99/yr, Security at $129/yr.

Assure plugin

Free

Live on WordPress.org · GDPR, OWASP, and NIST CSF included

Discovery, consent, enforcement, audits, monitoring, remediation, and evidence inside WordPress.

  • Built-in GDPR technical controls (59)
  • Built-in OWASP Top 10 2025 controls (38)
  • Built-in NIST CSF 2.0 controls (17)
  • Readiness scores, applicability, and manual evidence
  • Native consent manager
  • GA/GTM OAuth, enforcement, and YouTube gating
  • Browser verification, reports, and admin alerts
  • Public compliance status page (opt-in)
Get Free on WordPress.org

HIPAA pack

$99/yr

Yearly subscription · one site unlock key

Encrypted framework pack with technical readiness controls for sites that handle protected health information.

  • 25 HIPAA controls (v2.0.0)
  • Install via Assure admin
  • Encrypted .assure-pack download
Buy HIPAA pack

SOC 2 pack

$129/yr

Yearly subscription · one site unlock key

SOC 2 Security and Availability catalog mapped to AICPA Trust Services Criteria with WordPress-applicable checks.

  • 55 SOC 2 controls (v2.0.0)
  • Install via Assure admin
  • Encrypted .assure-pack download
Buy SOC 2 pack

Packs & bundles

From $49/yr

Yearly subscriptions · see store for tiers

Privacy packs at $49/yr, Accessibility, HIPAA, and FTC Safeguards at $99/yr, Security at $129/yr. Or unlock everything with Complete Library ($299/yr, 1 site) or Agency ($699/yr, 10 sites).

  • 16 additional frameworks; built-in frameworks remain free
  • Billed annually through Stripe
  • License for one site
Browse the pack store

View compliance pack store · Complete Library $299/yr · Agency $699/yr · Licensing API docs

Install Assure

GDPR, OWASP Top 10 2025, and NIST CSF 2.0 technical controls ship free with the plugin. Install from WordPress.org, then add yearly framework packs from the store when you need them.

Get Free on WordPress.org

Assure provides technical compliance tooling for WordPress operators. It does not provide legal advice, and it does not certify that your organization is legally compliant with GDPR, OWASP, or any other regulation.