Pricing
Every engagement is scoped to your frameworks, team size, and goals. The starting points below give you a clear sense of investment before we ever get on a call.
Adjusts based on the frameworks in scope.
Includes
Up to 20 employees.
+$1K/mo per additional 50 employees.
Includes
Scoped to the advisory services you select.
Includes
How pricing works
Ruleset pricing reflects the real scope of your program — the frameworks you're pursuing, your team size, and the level of ownership you need. The figures above are starting points. Book a call and we'll scope a fixed, predictable engagement before any work begins.
Book a scoping call→Or work with us project-by-project
Hire us for a specific deliverable, audit deadline, or short-term workstream — without a long-term commitment. Ideal for teams that need senior compliance and security expertise on a defined scope.
Pricing scoped to your project.
Contact us→Examples: audit prep sprint · gap assessment · GRC platform cleanup · vendor risk assessment · customer security questionnaire support · post-audit remediation
Additional Services
Add any of these to a Buildout, Program Management, or Advisory engagement. Scoped and priced with your plan.
Senior security leadership on demand, without a full-time hire.
Simulated attacks to surface vulnerabilities before auditors or attackers do.
Continuous scanning and remediation tracking across your environment.
Independent review of controls and evidence ahead of formal audits.
Our cloud team fixes the misconfigurations and findings your GRC platform surfaces.
Security and compliance reviews for deals, partners, and vendors.