Pricing
Every engagement is scoped to your frameworks, team size, and goals. The starting points below give you a clear sense of investment before we ever get on a call.
Adjusts based on the frameworks in scope.
Includes
Up to 20 employees.
+$1K/mo per additional 50 employees.
Includes
Scoped to the advisory services you select.
Includes
How pricing works
Ruleset pricing reflects the scope of your program. This includes the compliance frameworks you're pursuing, your current program maturity, and the level of ongoing ownership required. The figures above are starting points. Every engagement begins with a discovery call to define scope and provide fixed, predictable pricing before work begins.
Book a scoping call→Or work with us project-by-project
Hire us for a specific deliverable, audit deadline, or short-term workstream — without a long-term commitment. Ideal for teams that need senior compliance and security expertise on a defined scope.
Pricing scoped to your project.
Contact us→Examples: audit prep sprint · gap assessment · GRC platform cleanup · vendor risk assessment · customer security questionnaire support · post-audit remediation
Additional Services
Add any of these to a Buildout, Program Management, or Advisory engagement. Scoped and priced with your plan.
Senior security leadership on demand, without a full-time hire.
Simulated attacks to surface vulnerabilities before auditors or attackers do.
Continuous scanning and remediation tracking across your environment.
Independent review of controls and evidence ahead of formal audits.
Our cloud team fixes the misconfigurations and findings your GRC platform surfaces.
Security and compliance reviews for deals, partners, and vendors.