Pricing
Fixed fees. Published prices. No surprises.
Start with the Posture Check. We'll work together to understand what fits your needs.
Compare
| Package | Scope | Timeline | Deliverable | Price | Best for |
|---|---|---|---|---|---|
| Posture Check | Identity, email, endpoint, file-sharing, monitoring, access, training, incident readiness — broad attack surface and security domain coverage plus detailed security configuration evaluation of Microsoft tenants. | Two weeks. | Posture report, prioritized 90-day roadmap, executive summary. | $4,500 fixed fee | Companies that need to establish a baseline and roadmap before committing to a broader security program, or need a point-in-time check up. |
| Tune-Up | MFA enforcement and conditional access policies; OAuth third-party app inventory and revocation; identity protections enabled; admin role review; sign-in risk policies; emergency access account. | Four to six weeks. | Hardened tenant + documented control changes + evidence package + handoff playbook. | $7,500 fixed fee | Companies with a suspected identity-attack-surface problem — recent incident, customer review pressure, audit prep. |
| Compliance Prep | Framework selection and scoping; control gap analysis; remediation roadmap; evidence definition and documentation. | Ninety days fixed-fee for phase 1 (gap analysis + roadmap); execution on a separate SOW thereafter. | Framework scope, control-gap analysis, evidence plan, prioritized remediation roadmap, and follow-up review. | $14,500 fixed fee | Preparing for compliance and certification e.g. SOC2, ISO 27001 |
| Customer and Insurance Ready | Carrier and customer questionnaire response; control gap closure guidance for required controls; carrier-friendly attestation package; documentation of any compensating controls. | Four to six weeks. | Completed renewal questionnaire + attestation document + control evidence + one-page carrier-ready summary. | $9,500 fixed fee | Companies preparing for renewal or annual questionnaire cycle, especially those facing tightening carrier and customer requirements. |
| Close Call Cleanup | Review of the suspicious activity; indicators-of-compromise sweep across identity, email, file-sharing, and endpoint; root-cause determination; and a prioritized set of changes to prevent a repeat. Not full incident response — if a live breach needs containment, we help you engage a DFIR firm. | Investigation + one week of follow-up. | Findings summary (what happened, what was exposed) + indicators-of-compromise report + prioritized prevention roadmap + (if applicable) communication recommendations for legal/customers. | From $7,500 | Businesses that had a scare — a clicked phish, a suspicious sign-in, an accidental external share — and want to know what happened and prevent a repeat. |
| vCISO or Fractional CISO | Ongoing vCISO and Fractional CISO advisory + basic security posture monitoring and reporting + monthly scorecards + quarterly executive readouts. Add control roadmap execution (hourly). | Quarterly retainer. | Monthly posture scorecard, quarterly briefing, evidence library maintained, audit support included. | From $2,500/mo for the Basics. | Organizations that need ongoing security leadership, continuous monitoring, and program execution without building internal headcount. |
Posture Check
Duration: Two weeks.
Price: $4,500 fixed fee
Identity, email, endpoint, file-sharing, monitoring, access, training, incident readiness — broad attack surface and security domain coverage plus detailed security configuration evaluation of Microsoft tenants.
Tune-Up
Duration: Four to six weeks.
Price: $7,500 fixed fee
MFA enforcement and conditional access policies; OAuth third-party app inventory and revocation; identity protections enabled; admin role review; sign-in risk policies; emergency access account.
Compliance Prep
Duration: Ninety days fixed-fee for phase 1 (gap analysis + roadmap); execution on a separate SOW thereafter.
Price: $14,500 fixed fee
Framework selection and scoping; control gap analysis; remediation roadmap; evidence definition and documentation.
Customer and Insurance Ready
Duration: Four to six weeks.
Price: $9,500 fixed fee
Carrier and customer questionnaire response; control gap closure guidance for required controls; carrier-friendly attestation package; documentation of any compensating controls.
Close Call Cleanup
Duration: Investigation + one week of follow-up.
Price: From $7,500
Review of the suspicious activity; indicators-of-compromise sweep across identity, email, file-sharing, and endpoint; root-cause determination; and a prioritized set of changes to prevent a repeat. Not full incident response — if a live breach needs containment, we help you engage a DFIR firm.
vCISO or Fractional CISO
Duration: Quarterly retainer.
Price: From $2,500/mo for the Basics.
Ongoing vCISO and Fractional CISO advisory + basic security posture monitoring and reporting + monthly scorecards + quarterly executive readouts. Add control roadmap execution (hourly).
Details
Each engagement has a defined scope, timeline, and set of deliverables. No billable-hour uncertainty. No scope creep.
Posture Check
Security posture check covering common attacks and defenses.
- Price
- $4,500 fixed fee
- Duration
- Two weeks.
- Scope
- Identity, email, endpoint, file-sharing, monitoring, access, training, incident readiness — broad attack surface and security domain coverage plus detailed security configuration evaluation of Microsoft tenants.
- Deliverable
- Posture report, prioritized 90-day roadmap, executive summary.
- Best for
- Companies that need to establish a baseline and roadmap before committing to a broader security program, or need a point-in-time check up.
- Needed for
- Customer reviews, Compliance, Incidents
Typical next: Tune-Up or Compliance Prep.
Tune-Up
Identity hardening sprint for Microsoft 365 or Google Workspace.
- Price
- $7,500 fixed fee
- Duration
- Four to six weeks.
- Scope
- MFA enforcement and conditional access policies; OAuth third-party app inventory and revocation; identity protections enabled; admin role review; sign-in risk policies; emergency access account.
- Deliverable
- Hardened tenant + documented control changes + evidence package + handoff playbook.
- Best for
- Companies with a suspected identity-attack-surface problem — recent incident, customer review pressure, audit prep.
- Needed for
- Customer reviews, Compliance, Incidents
Typical next: vCISO.
Compliance Prep
A structured compliance-readiness assessment and roadmap using your chosen framework.
- Price
- $14,500 fixed fee
- Duration
- Ninety days fixed-fee for phase 1 (gap analysis + roadmap); execution on a separate SOW thereafter.
- Scope
- Framework selection and scoping; control gap analysis; remediation roadmap; evidence definition and documentation.
- Deliverable
- Framework scope, control-gap analysis, evidence plan, prioritized remediation roadmap, and follow-up review.
- Best for
- Preparing for compliance and certification e.g. SOC2, ISO 27001
- Needed for
- Compliance, Certification, Customer security questionnaires
Typical next: vCISO for ongoing.
Customer and Insurance Ready
Cyber insurance renewal and customer questionnaire preparation.
- Price
- $9,500 fixed fee
- Duration
- Four to six weeks.
- Scope
- Carrier and customer questionnaire response; control gap closure guidance for required controls; carrier-friendly attestation package; documentation of any compensating controls.
- Deliverable
- Completed renewal questionnaire + attestation document + control evidence + one-page carrier-ready summary.
- Best for
- Companies preparing for renewal or annual questionnaire cycle, especially those facing tightening carrier and customer requirements.
- Needed for
- Insurance renewal, Compliance, Customer security questionnaires
Typical next: Tune-Up or vCISO.
Close Call Cleanup
Investigative follow-up after a close call — find what got in and how to fix it.
- Price
- From $7,500
- Duration
- Investigation + one week of follow-up.
- Scope
- Review of the suspicious activity; indicators-of-compromise sweep across identity, email, file-sharing, and endpoint; root-cause determination; and a prioritized set of changes to prevent a repeat. Not full incident response — if a live breach needs containment, we help you engage a DFIR firm.
- Deliverable
- Findings summary (what happened, what was exposed) + indicators-of-compromise report + prioritized prevention roadmap + (if applicable) communication recommendations for legal/customers.
- Best for
- Businesses that had a scare — a clicked phish, a suspicious sign-in, an accidental external share — and want to know what happened and prevent a repeat.
- Needed for
- Incidents
Typical next: Tune-Up, then vCISO.
vCISO or Fractional CISO
Ongoing security leadership without the headcount.
- Price
- From $2,500/mo for the Basics.
- Duration
- Quarterly retainer.
- Scope
- Ongoing vCISO and Fractional CISO advisory + basic security posture monitoring and reporting + monthly scorecards + quarterly executive readouts. Add control roadmap execution (hourly).
- Deliverable
- Monthly posture scorecard, quarterly briefing, evidence library maintained, audit support included.
- Best for
- Organizations that need ongoing security leadership, continuous monitoring, and program execution without building internal headcount.
- Needed for
- Customer reviews, Compliance, Incidents
Typical next: —
Not sure which fits?
Take the free Posture Self-Check to see where you stand, or book a call and we will recommend the right fit — no commitment, no pitch.