Entry engagements have fixed, published prices. Larger readiness engagements get a fixed-fee proposal after a free scoping call — so you always know the total before work begins. Nothing is billed hourly, and 100% of what you pay for an entry engagement is credited when you continue to the next step within 60 days.
$1,450 fixed fee · 2–3 business days
A read-only diagnostic of your Vanta or Drata environment. Know exactly what's failing, what's misconfigured, and what to fix first — before committing to anything bigger.
$4,950 fixed fee · 5–10 business days
A hands-on configuration sprint for teams that have the platform and are stuck or uncertain. We configure it correctly and hand you a clear roadmap to audit readiness.
$4,950 fixed fee · single framework · 2–3 weeks
A tool-agnostic, control-by-control assessment of your security program against SOC 2 or ISO 27001 — with severity-rated findings and an executive summary.
Custom fixed fee · scoped to you
Complete readiness through audit coordination: controls, policies, evidence workflows, and auditor communication. Scoped after a free call — you get one number, in writing, before we start.
From $1,750/month · flexible retainer
Stay audit-ready after the first audit: continuous monitoring review, evidence upkeep, policy updates, and preparation for annual re-audits.
You never pay twice for the same ground. Start with the smallest engagement that answers your question — if the findings justify the next step, the fee you already paid comes off the price.
Upgrade within 60 days and the full $1,450 is credited — the Kickstart costs $3,500 more, and the diagnostic was effectively free.
Continue within 60 days and the full $4,950 is credited against your fixed-fee readiness proposal.
If you continue to the next engagement within 60 days, the full fee you already paid is subtracted from the next engagement's price. The entry step effectively becomes free.
Entry engagements have a fixed, well-bounded scope, so they carry a fixed, published price. Full readiness depends on your environment and timeline — that gets a fixed-fee proposal after a free scoping call, so you still know the total before work begins.
The Gap Assessment price covers one framework (SOC 2 or ISO 27001). Multi-framework assessments are quoted at scoping — much of the work overlaps, so a second framework costs meaningfully less than double.
No. Every engagement is a fixed fee agreed in writing before work begins. Scope changes are agreed before they change the price — no surprise invoices.
Book a free 30-minute scoping call. We'll tell you honestly which engagement matches where you are — including "you don't need us yet," if that's the truth.