Fees, stated up front.
Every engagement is fixed-fee and quoted in writing after a scoping call — we do not bill hourly, and there is no scope-creep line at the end. The figures below are the starting points we typically quote; final fees depend on scope, systems, and the observation window.
- 01SOC 2 Type II3 — 12 monthsScoped quotefrom $42,000Most engagements fall between USD 42k and 110k depending on scope, systems, and the length of the observation window.Service details →
- 02ISO/IEC 270016 — 9 monthsScoped quotefrom $48,000Covers ISMS build-out through Stage 2 certification. Annual surveillance audits are quoted separately.Service details →
- 03HIPAA & HITRUST4 — 8 monthsScoped quotefrom $34,000Security Rule assessments start here. HITRUST i1 and r2 validated assessments are quoted against scope.Service details →
- 04PCI DSS 4.03 — 6 monthsFixed feefrom $16,500SAQ support is a fixed fee. Report on Compliance support is quoted after the scoping review.Service details →
- 05NIST CSF & 800-534 — 7 monthsScoped quotefrom $38,000Profile development is quoted as a block. Control assessments scale with the systems in scope.Service details →
- 06Penetration Testing2 — 6 weeksFixed feefrom $8,500Fixed fee per target and box type. The retest of remediations is included.Service details →
- 07Vendor & Third-Party Risk1 — 3 monthsFixed feefrom $5,800 / vendorPriced per vendor at the agreed risk tier. The board-ready summary is included.Service details →
- 08Virtual CISO6 — 18 monthsFixed feefrom $7,000 / monthRetainered monthly with a six-month minimum. Engagements are bounded — never open-ended.Service details →
What the fee buys.
- Scope first, fee second
What is in and out of scope is agreed in writing before fieldwork begins. The quoted fee does not move.
- No hourly billing
We price engagements, not hours. There is no scope-creep line item waiting at the end.
- Partner-led throughout
The partner who scopes the engagement leads fieldwork and signs the report. The fee reflects senior time, not leverage.
- Quoted in writing
Every figure below is a starting point. The final fee is set at the scoping call and quoted in writing before any work begins.
Every fee starts
with a scoping call.
Thirty minutes with a partner. You leave with a written scope, timeline, and fixed fee — whether or not you proceed.