Services for Small & Mid-Sized Businesses
Clear “starting at” pricing. Tailored scopes after discovery. Fast, practical outcomes.
SMB Shields
Starter Shield
Starting at $1,000/mo
- Endpoint protection, basic monitoring, MFA & hardening baseline
- Patch cadence & critical vulnerability response
- Monthly status email
Final pricing quoted after discovery — tailored to users, devices, and environment complexity.
Growth Shield
Starting at $2,000/mo
- Everything in Starter + policy set (NIST-aligned), vendor risk basics
- Monthly external scans, phishing tests & user training
- Quarterly review & roadmap
Ideal for healthcare, finance, legal, and regulated SMBs.
Enterprise Shield
Starting at $3,500/mo
- vCISO oversight, cloud security reviews (Microsoft 365/AWS)
- Internal scans, incident readiness & tabletop exercises
- Facility walkthrough & audit-ready documentation
vCISO (Virtual CISO)
Bronze
Starting at $2,000/mo
- Risk register, policy updates, executive briefs
- Simple metrics & quarterly roadmap
Silver
Starting at $3,500/mo
- Vendor risk, awareness training, audit prep
- Quarterly KPI reporting & board-ready slides
Gold
Starting at $5,000/mo
- Program leadership, tabletop exercises, compliance alignment
- Executive/board briefings and roadmap execution
Incident Response
IR Retainer — Standard
Starting at $2,000/mo
- Hotline, triage, forensics, remediation guidance
- 12-hour target response time
IR Retainer — Elite
Starting at $4,000/mo
- Tabletop drills, on-site support, 4-hour target response time
- Priority channel & quarterly simulations
IR (Hourly)
$250/hr
- On-demand triage and remediation during active incidents
Compliance & Audit Readiness
Readiness Projects
Starting at $5,000/project
- NIST CSF / 800-171, HIPAA, FTC Safeguards, SOC 2 readiness
- Gap analysis, evidence collection, corrective plan
Pen Testing & Vulnerability
Standard Pen Test
Starting at $5,000/project
- Network and/or web application testing
- Findings, risk ranking, and remediation guidance
Vulnerability Scan & Report
Starting at $600
- Internal/external automated scans
- Prioritized remediation roadmap
Firewall & Network Hardening
Starting at $900
- Firewall/route policies, segmentation, logging, backups
Cloud Security Configuration (AWS / Microsoft 365)
Starting at $1,200
- Identity, MFA, conditional access, encryption & posture review
Physical Security (Baseline)
Baseline Facility Audit
Starting at $3,500/project
- On-site walkthrough, access control, CCTV & policy checks
- Actionable, prioritized fixes (no covert entry testing)
Special Projects
Network Redesign & Secure Segmentation
Starting at $7,500
- Zero-trust minded segmentation and secure topology
Hardened Endpoint Builds
Starting at $4,500
- Secure image, device encryption, and recovery documentation
Red/Blue Team Exercises & Tabletop Drills
Starting at $8,500
- Scenario design, execution, post-exercise improvements
Why Filling Security Gaps Matters
- Data Breach Exposure: Costly notifications, legal action, and fines.
- Operational Downtime: Ransomware can halt operations for days or weeks.
- Compliance Violations: Audits and penalties for NIST/HIPAA/PCI gaps.
- Reputation Erosion: Client churn and lost partnerships after incidents.
Our goal is practical, staged improvements that reduce risk quickly and prove value monthly.
Lessons from the Field
- Healthcare (Ransomware): Ignored patching led to 11 days downtime and $620K in losses.
- Manufacturing (Physical Entry): Tailgating + no badge checks exposed proprietary designs.
- Real Estate (Phish → Cloud Breach): No MFA allowed broad data exposure and reputation damage.
All pricing is “starting at” and finalized after discovery. Annual contracts receive discounted rates; monthly terms available.