Pricing

Start with an assessment. Know where you stand.

Every engagement starts with a fixed-fee assessment against the framework or objective you are preparing for. You will know the price before the work begins, and the full fee is credited toward qualifying follow-on work.

Find your starting price

What are you preparing for?

Select one or more.

Frameworks and objectives

Select a framework or objective above to see the starting assessment.

The assessments

Three starting points, each a fixed fee.

Published pricing applies to typical single-entity environments. Larger or more involved environments may require individual scoping.

The assessment credit.

100% of the assessment fee is credited toward a qualifying follow-on engagement of $3,000 or more that begins within 90 days of final assessment delivery.

After the assessment

Follow-on work is scoped separately.

Follow-on implementation, remediation, readiness, engineering, documentation, configuration, and advisory work is scoped separately, based on your environment and the assessment findings.

Follow-on work is priced before it begins.

Find the right assessment.

A free consultation confirms scope and fit before any engagement begins — including for the published fixed-fee assessments.

Questions

Common questions about pricing.

How is an assessment priced?

Each assessment is a fixed fee, set before the engagement begins. $750 for the Cyber Insurance Readiness Assessment, $1,250 for a standard single-framework assessment, and $1,750 for frameworks with federal or sector-specific scoping requirements. Published pricing applies to typical single-entity environments. Larger or more involved environments may require individual scoping.

What happens if we need more than one framework?

Selected frameworks are assessed together and scoped as one engagement rather than added together. Controls, requirements, systems, and evidence frequently overlap across frameworks, so two frameworks do not cost twice one framework.

How does the assessment credit work?

100% of the assessment fee is credited toward a qualifying follow-on engagement of $3,000 or more that begins within 90 days of final assessment delivery.

Is implementation work included in the assessment fee?

No. Follow-on implementation, remediation, readiness, engineering, documentation, configuration, and advisory work is scoped separately, based on your environment and the assessment findings. Follow-on work is priced before it begins.

Which CMMC assessment should we start with?

If you handle Federal Contract Information but not CUI, start with the CMMC Level 1 assessment. If you handle CUI and your boundary is already settled, start with the CMMC / NIST 800-171 assessment. If you may handle CUI but are not certain what falls in scope, start with CUI Boundary Definition — the boundary determines how many requirements apply, so it shapes everything after it. If none of those describe your situation, a free consultation is the right first step.

What if we are not sure what we need?

Select “Other / Not sure” and schedule a free consultation. The purpose of that conversation is to determine the right assessment before any price is quoted.

More questions about frameworks, audits, and engagements →