2. Add the projects you have coming Select work you expect this year. We identify included work and possible overlaps before adding a charge. Use “Request extra scope” only when you need a separate project beyond your plan.
Testing & offensive security
Testing & offensive security External network penetration test from $2,400 Test what an attacker on the internet can reach and do.
Internal network penetration test from $3,600 Measure how far an intruder moves once inside.
Web application penetration test from $3,600 Test an application and the identity flows behind it.
Cloud penetration test from $3,600 Test your cloud environment the way a cloud attacker would.
AI security test from $6,000 Test an AI feature, assistant, or agent and what it can reach.
Full-scope red team operation from $15,000 Objective-driven adversary simulation across your defenses.
Compliance readiness
Compliance readiness SOC 2 readiness from $7,500 Prepare controls and evidence for an independent SOC 2 examination.
ISO 27001 readiness from $18,000 Build the management system and evidence for certification.
HIPAA readiness from $4,500 Risk analysis, safeguards, and documentation for HIPAA.
PCI DSS readiness from $4,500 Scope, close gaps, and prepare for a PCI assessment.
CMMC readiness from $12,000 Define the boundary and prepare for a CMMC assessment.
Continuous compliance upkeep from $750/mo Evidence upkeep for one agreed framework; already included within Leadership’s framework boundary.
Architecture & engineering
Architecture & engineering Cloud security configuration review from $4,800 Review your cloud configuration and prioritize fixes; implementation is scoped separately.
Identity & access architecture from $6,000 Design how people, systems, and services prove and get access.
Threat modeling from $2,400 Find design weaknesses before they are built in.
Secure code review from $4,800 Manual review of the code paths that matter most.
Leadership & readiness
Leadership & readiness Security risk assessment from $6,000 Identify, rate, and prioritize your enterprise risks.
AI governance stand-up from $4,500 Policy, approvals, and an inventory for responsible AI use.
Incident tabletop exercise from $3,000 Practice your response against a realistic scenario.
Incident response plan & readiness from $6,000 Plans, playbooks, and roles that hold up under pressure.
Vendor software assessment from $1,800 Starting scope: document and component review of one product. Hands-on testing is additional.
