Straightforward packages, priced to your environment.
Every business is different, so every engagement is scoped and quoted to you — no mystery, no bloated retainers. Here's how the work is packaged, so you know what you're choosing before you ever talk price.
Three ways to find what an attacker would, before they do.
Essential
- External or internal network test, scoped to a defined target
- Findings report with CVSS-ranked risks
- Plain-English executive summary
- One remediation review call
Comprehensive
- External and internal testing
- Web-application and/or social-engineering add-ons
- Detailed technical report plus a board-ready summary
- Remediation guidance + one round of retesting
Adaptive
- Quarterly testing, not a once-a-year snapshot
- Continuous vulnerability monitoring & retesting
- Managed services bundled in (MDR / ITDR / SAT)
- Quarterly leadership briefings + a living roadmap
- Direct line to your dedicated team
Always-on monitoring and response — pick your floor.
Core
MDR — 24/7 monitoring & response, backed by real people who answer the phone. ITDR — identity protection for Microsoft 365 and Google Workspace, where most breaches now start.
Complete
Core plus managed SIEM/logging and ongoing security awareness training with phishing simulations — so you can see what's happening and your team knows what to do about it.
Every engagement is scoped, agreed in writing, and quoted before any work begins — and before you pay a cent. No hidden fees, no surprise line items, ever.
Get my quote