Inland · coastal · harbor
Inland towing compliance software - Sub M first, cyber only if Subpart F applies
Two jobs, one workspace. Subchapter M TSMS is job one. USCG cybersecurity (33 CFR 101 Subpart F) is job two, only if Subpart F actually applies. Each module $500 per vessel per month. Dry inland on Sub M plus AWO RCP is usually out of cyber. Coastal and harbor are usually in. Pick and choose what you need.
Not a TPO. Not a class society. Not a SOC. Modules are pick-and-choose.
The modules
Pick and choose what you need
Each module is priced separately. You can run Sub M alone. You can run USCG cyber alone. You can run both. Shoreside ISO 27001 is a third option, $500 per month organization-wide, not day one for most inland shops.
Subchapter M TSMS
Run your TSMS here. Plain-English controls, hashed write-once evidence, one-click inspection packet. We do not write it, certify it, or file it. You run the system. We keep the record defensible.
or $5,400/vessel/yr - save 10%
Learn about Sub M TSMS →USCG cybersecurity (33 CFR 101 Subpart F)
NRC reporting in force. CySO, assessment, and Plan submit 16 Jul 2027. Evidence and a packet you attach to your Plan. We do not generate or file the Plan. Only if Subpart F applies.
or $5,400/vessel/yr - save 10%
Learn about USCG cyber →Shoreside ISMS (ISO 27001:2022)
Full ISO 27001 for the office. $500 per month organization-wide, not per vessel. Not day one for most inland shops. Adds on to any fleet subscription.
Who owes what
Subchapter M is not the same as USCG cybersecurity
Subchapter M is Subchapter M. USCG cybersecurity (33 CFR 101 Subpart F) is a separate MTSA-scoped obligation. They are not the same. Subpart F is 33 CFR 101.605: if you already owe a 104, 105, or 106 plan, you now owe a Cybersecurity Plan. If you do not, you do not.
Towing trigger is 33 CFR 104.105(a)(11): greater than 8 meters towing a Part 104 tank or CDC barge, with fleeting, lock, and assist exceptions. Dry inland on Sub M plus AWO RCP is usually out. Coastal and harbor towing with tank or CDC barges are usually in.
Dry inland (usually out of cyber)
- ✓ Sub M TSMS applies
- ✗ USCG cyber usually does not (Subpart F out)
- ✓ One module: $500/vessel/mo
Coastal / harbor (usually in)
- ✓ Sub M TSMS applies
- ✓ USCG cyber usually applies (Subpart F in)
- ✓ Two modules: $500/vessel/mo each
Read 33 CFR 101.605 and 33 CFR 104.105(a)(11) for the full applicability test. If unsure, ask your MSC or COTP/OCMI.
How it works
You do the work. We keep the record defensible.
VesselMark breaks down Sub M and Subpart F obligations into plain-English controls. You see what is outstanding, close the gap, and attach evidence. Documents are content-hashed and held in write-once storage, so your evidence trail stands up to scrutiny. When inspection or filing time comes, export a one-click packet: your posture and evidence index, defensible and point-in-time.
Plain-English controls
See what is outstanding without a cybersecurity degree. Every control has a plain-language title and guidance.
Write-once evidence
Documents are content-hashed and held in write-once storage. Your evidence trail is tamper-evident.
One-click inspection packet
Export your posture and evidence index for a USCG or class review. A defensible point-in-time snapshot.
Renewal reminders
Drills, log refreshes, annual reviews. We schedule them, track what is due, and email before anything slips.
Unlimited users
No per-user tax. Add every captain, port engineer, and office admin who touches the system.
Sits beside existing ops
Not a replacement for Helm CONNECT, TBS, Mobile Ops, or ABS NS. Compliance-first, operations-adjacent.
What this is not
We are not your TPO. We do not replace your TSMS or ops software.
VesselMark is compliance management software. We are not a Third-Party Organization, not a class society, not a Statement of Compliance issuer, not a CySO, not a filing service. You run your TSMS and cybersecurity program here. We do not write them, certify them, or file them. We give you a workspace where the controls stay current and the evidence trail is defensible.
We sit beside Helm CONNECT, TBS, Mobile Ops, and ABS NS. We are not a replacement. Compliance-first, operations-adjacent.
Pricing
$500 per vessel per month, per module.
No per-user tax. 14-day free trial, no card required. Annual billing saves 10%. Each module is priced separately.
Subchapter M / TSMS
$500/vessel/mo
or $5,400/vessel/yr - save 10%
- ✓ Plain-English controls
- ✓ Write-once evidence + append-only audit trail
- ✓ One-click inspection packet
- ✓ Renewal reminders
- ✓ Unlimited users
- ✓ Cancel anytime
USCG Cyber (33 CFR 101 Subpart F)
$500/vessel/mo
or $5,400/vessel/yr - save 10%
- ✓ Plain-English controls
- ✓ Write-once evidence + append-only audit trail
- ✓ One-click inspection packet you attach to your Plan
- ✓ Renewal reminders
- ✓ Unlimited users
- ✓ Cancel anytime
Each framework module is priced separately. One module or two, each is $500 per vessel per month. Shoreside ISO 27001 is $500 per month organization-wide, not day one for most inland shops.