// Engagement

Pricing that scales with your risk profile.

Every tier is fixed-fee with a written scope. No surprise hourly billing, no retainer minimums you cannot use, and no procurement theater. Pick the level of engagement that matches where you are today.

Fixed feeWritten scopeNo long-term lock-inUS-based delivery

Baseline

TIER-01

A point-in-time security posture audit for teams that need a clear starting line.

From $4,800

one-time engagement

Best for: Teams 10 to 100 people, first formal security review.
SLA: Findings delivered within 10 business days.
Starts in: Kickoff within 5 business days of signature.

›Identity and access review across SSO, email, and SaaS
›Cloud posture scan for a single provider (AWS, Azure, or GCP)
›External attack surface mapping and exposure inventory
›Endpoint and MDM coverage review
›Prioritized remediation roadmap with effort estimates
›Read-out call with leadership and written executive summary

Scope a baseline

Most chosen

Vigilance

TIER-02

Continuous monitoring, quarterly tabletop exercises, and a security partner on retainer.

From $3,200

per month, billed monthly

Best for: Growing and mid-market organizations worldwide with regulatory pressure or active customer-security reviews.
SLA: Alert triage within 1 business hour during business days.
Starts in: Onboarding completed within 14 days.

›Everything in Baseline, refreshed continuously
›Continuous posture and credential monitoring
›Monthly threat intelligence brief tailored to your stack
›Quarterly tabletop exercises and after-action reports
›Shared Slack or Teams channel with office hours
›Incident triage and containment included
›Vendor and customer security questionnaire support

Talk to security

Sentinel

TIER-03

Scoped managed compliance and an incident response coordination retainer for regulated industries. Monitoring coverage hours are defined in writing per engagement.

Custom

annual partnership

Best for: Healthcare, fintech, and legal teams with audit obligations or board oversight.
SLA: Coverage hours and response targets agreed in writing. After-hours coverage only through a named partner agreed in the contract.
Starts in: Custom kickoff timeline, typically 30 days.

›Everything in Vigilance, within agreed coverage hours
›Alert review and detection tuning during agreed coverage hours
›Incident response coordination retainer, with any third-party responders named in the contract
›Compliance program ownership (SOC 2, HIPAA, PCI)
›Quarterly executive and board briefings
›Custom detections, playbooks, and purple-team exercises
›Dedicated security advisor on retainer

Request a proposal

Enterprise Advisory

TIER-04

Multi-jurisdiction security programs for global enterprises, delivered in defined phases with board-level reporting.

From $25,000

per phased engagement, typically $25,000 to $75,000+ per phase

Best for: Global enterprises, public-sector institutions, and regulated organizations running multi-country security programs.
SLA: Named engagement lead with written weekly status and board-ready reporting.
Starts in: Phase 0 discovery begins within 30 days of signature.

›Everything in Sentinel, scaled across regions and business units
›Multi-jurisdiction privacy and compliance programs (GDPR, POPIA, NDPR, LGPD, and more)
›Phased roadmap with fixed scope and written success criteria per phase
›Board and executive reporting with measurable outcomes
›M&A cyber due diligence and post-close integration support
›Grant and funding strategy support credited against delivery phases
›Quarterly leadership reviews with a named principal consultant

Scope an engagement

Indicative pricing in USD. Baseline and Vigilance fit typical environments of 50 to 2,000 employees. Enterprise Advisory is scoped per phase for global environments.

// Quantified cyber risk

Where a FAIR-informed risk quantification sits in these tiers.

A first quantification engagement is scoped as an Enterprise Advisory phase, which typically starts around $25,000 depending on the number of loss scenarios in scope. Quarterly re-measurement runs inside a Sentinel annual agreement, and a lighter semiannual refresh can sit on a Vigilance retainer. Every scope is fixed fee and written before work begins.

Download the offer pack See the service

// Compare tiers

A side-by-side look

Feature	Baseline	Vigilance	Sentinel	Enterprise Advisory
Engagement model	One-time audit	Monthly retainer	Annual partnership	Phased program
Posture monitoring	Point-in-time	Continuous	Continuous, agreed coverage hours	Continuous, multi-region
Incident response	Not included	Triage included	Coordination retainer, targets in contract	Named team, custom SLA
Compliance support	Gap analysis	Program guidance	Program ownership	Multi-jurisdiction ownership
Tabletop exercises	Optional add-on	Quarterly	Quarterly + custom drills	Custom drills per phase
Executive reporting	Read-out call	Monthly brief	Board-ready quarterly	Board reporting per phase
Shared communication	Email + calls	Slack/Teams office hours	Dedicated advisor	Named principal consultant

// Frequently asked

Pricing questions, answered

How does billing work?+

Baseline is a fixed-fee, one-time engagement billed at kickoff. Vigilance is billed monthly with a 90-day initial term and 30-day notice afterward. Sentinel is an annual agreement with quarterly invoicing. Enterprise Advisory is scoped per phase, invoiced at phase milestones.

Can I switch tiers later?+

Yes. Clients commonly start with a Baseline engagement and roll the credit into the first month of Vigilance. Upgrading to Sentinel mid-engagement is prorated.

Are there hidden fees?+

No. Every engagement is fixed-fee. Travel, third-party tooling, and out-of-scope incident hours are quoted in writing before any work begins.

Do you offer a free assessment?+

We offer a free 20-minute consultation to understand your environment and recommend a fit. All paid engagements start with a signed scope and statement of work.

What if I only need an incident response retainer?+

Standalone IR retainers are available under the Sentinel tier. Contact us to scope hours and SLA based on your environment.

// Add-on

Need a security leader, not just a program?

Layer a virtual CISO onto any tier for fractional security leadership, board reporting, and compliance program ownership.

Explore vCISO services