Pricing
Three continuous tiers. One free starting point.
Pick the level of visibility and control your firm needs. Every engagement starts with a free Proprietary Exposure Review so you know exactly what you are paying to fix.
Tier 1 — External Continuous
$249 / month
month to month
Always-on monitoring of your public attack surface: email spoofing posture, lookalike domains, exposed infrastructure, and certificate drift. No system access required.
- Free Proprietary Exposure Review included
- Continuous external posture monitoring
- Lookalike domain registration alerts
- External vulnerability and attack-surface scans
- Credential exposure monitoring
- Monthly or quarterly written report
- Cancel any time
Tier 2 — Internal Continuous
$1,495 / month
quarterly + ongoing monitoring
Recurring assessment and hardening of your Microsoft 365 environment, with continuous drift detection on the controls we configure.
- Everything in Tier 1
- Microsoft 365 configuration review and hardening
- Defender XDR, Conditional Access, and Safe Links tuning
- Authenticated internal vulnerability scanning
- Quarterly phishing / BEC simulations
- Cyber-insurance and client questionnaire support
- Plain-English partner report and evidence package
Tier 3 — Full Baseline Continuous
Recommended$4,495 / month
continuous + quarterly + annual testing
The complete external + internal program for firms with active client obligations, insurance requirements, or demanding outside-counsel guidelines.
- Everything in Tier 1 and Tier 2
- Annual scoped penetration test
- Annual tabletop incident exercise
- Continuous optimization of Microsoft advanced controls
- Optional named security advisor
- Multi-office scope capability
- Board and partnership reporting
All tiers begin with the free Proprietary Exposure Review. Final scope and price confirmed before any work starts — no surprises. One-time services are also available.
Common questions
Pricing questions
Yes — always. No credit card, no obligation. It runs on public DNS and web records only, so we never need access to anything private at your firm.
The $395 starting price covers a focused, single-service engagement — for example, configuring SPF, DMARC, and DKIM for one domain. More complex configurations, multiple domains, or cleanup of an existing misconfiguration may cost more. Final scope and price are confirmed before any work begins.
We run continuous passive checks of your domain's public exposure: email authentication posture (SPF, DMARC, DKIM), lookalike domain registrations, DNS record changes, exposed subdomains, and certificate status. You receive an alert any time something material changes and a written monthly or quarterly summary. No system access is required.
Yes — that is the most common path. The free Proprietary Exposure Review shows you where you stand. If you want a specific gap closed, we scope a single-service engagement. Once the work is done, many firms add Tier 1 or Tier 2 so they know immediately if their posture changes.
Tier 1 is month to month and can be cancelled any time. Tiers 2 and 3 are scoped engagements with a clear statement of work and deliverable schedule.
We can discuss prepaid arrangements. Reach out through the contact page after your free review and we will put something together.
No obligation
Start with the free Proprietary Exposure Review
The review is always free. If the findings show gaps worth addressing, we'll scope an engagement together — no pressure and no bait-and-switch.