Pricing & engagement models
A fixed price for a fixed scope
We quote a fixed price for a fixed scope after a free consultation, so there is no price list on this page. Below: the three ways to work with us, how a quote comes together and what moves it.
Ways to work together
Choose the model that fits
Readiness projects
Fixed-scope, fixed-fee projects to prepare you for a SOC 2, ISO 27001, HITRUST, CMMC, FedRAMP 20x or ISO 42001 assessment, or to meet HIPAA and GDPR.
- Gap assessment
- Remediation support
- Readiness review
- Audit support
vCISO retainer
Monthly security leadership with defined hours and responsibilities.
- Security roadmap
- Compliance ownership
- Customer and board reporting
- Incident readiness
Advisory hours
Expert help when you need it, in prepaid blocks of hours.
- Security questionnaires
- Policy reviews
- Auditor coordination
- Second opinions
How pricing works
- Free consultation: a 30-minute call about your goals, customers and timeline
- Written proposal: scope, deliverables, timeline and a fixed price
- Fixed means fixed: no hidden fees and no open-ended hourly billing on projects
What shapes your quote
- Which service(s) and framework(s) you need
- Report type or certification level
- Systems, locations and people in scope
- How much is already in place
- Your deadline
Bring your next audit into the light.
Book a free 30-minute consultation. We will map where you are, what your customers need and the fastest path to get there.