Securing Your Law Firm logoSecuring Your Law Firm

One-time services

Fixed-Price Security Services for Law Firms

For firms that want a specific problem solved once, not a monthly retainer. Every price is published. Scope is confirmed in writing before any work begins.

Email and DNS

ServicePriceScope

Email Authentication Hardening

$1,450

SPF, DKIM, and DMARC taken to full enforcement for one domain over a monitored 60-day rollout so legitimate firm mail is never broken. Includes before/after evidence and a one-page insurer summary.

Additional Domain

$295

Same hardening applied to each additional domain your firm owns.

Lookalike Domain Sweep

$450

Permutation scan of domains impersonating your firm, with a defensive registration priority list and takedown guidance.

DNS Hygiene Cleanup

$750

Dangling records, stale MX entries, exposed subdomains, and certificate issues identified and remediated, with a full change log.

Microsoft 365

ServicePriceScope

M365 Security Hardening Sprint

$3,850

MFA enforced, legacy authentication disabled, mailbox forwarding audited, external sharing restricted, admin privilege reduced, and full audit logging enabled. Includes a complete before/after evidence pack and partner readout.

Mailbox Rule and Forwarding Audit

$650

Every inbox rule and forwarding configuration in your tenant documented, with malicious or unauthorized rules flagged and removed. The fastest check for an already-compromised mailbox.

Conditional Access Design and Deployment

$1,850

A designed policy set, a break-glass emergency account, and full documentation.

Microsoft 365 Migration

Quoted

A structured move to Microsoft 365 with security configured from day one. Scoped individually.

Documentation and Compliance

ServicePriceScope

Cyber Insurance Application Support

$950

We complete the security sections of your application or renewal with accurate, evidence-backed answers.

Client Questionnaire and OCG Response

$1,450

We draft your firm's responses to a client security questionnaire or outside counsel guidelines, flagging any gap that needs remediation.

Written Information Security Program

$2,450

A documented WISP written for your firm's actual environment, suitable for insurers and corporate clients.

Incident Response Plan

$1,850

A practical, law-firm-specific plan covering wire fraud, ransomware, and client data exposure, with a breach notification decision tree.

Tabletop Exercise and After-Action Report

$2,500

A facilitated scenario exercise with your key staff, plus a written after-action report you can show clients and insurers.

Law Firm Specific

ServicePriceScope

Partner Departure Security Review

$850

Access revocation, data movement review, and evidence preservation when an attorney leaves the firm.

New Client Onboarding Security Setup

$650

Configuration and documentation to meet a specific client's outside counsel security requirements.

Urgent Response

ServicePriceScope

Business Email Compromise Rapid Response

Starting at $3,500

Same-day containment and evidence preservation when your firm suspects an active email compromise.

Containment and evidence preservation only. This is not a forensic investigation or breach determination. If you carry cyber insurance, notify your carrier immediately — most policies require their panel vendors for investigation, and we will coordinate the handoff.

How pricing works

Prices shown are for firms of 1–10 users; 11–25 users add 40%, 26–50 users add 80%. Final scope and price confirmed in writing before any work starts.

Credit offer

Any one-time engagement credits 100% toward your first three months of a continuous tier if you convert within 90 days.

Specific problem?

Start with the free Proprietary Exposure Review

If you already know the gap you need closed, we will confirm the exact scope and price in writing before work begins. If you do not, the free review gives us the baseline to point you to the right one-time service.

Must match your domain so another firm cannot request your review.

Public records only. Your report goes only to the verified inbox that requested it. We do not sell, share, or broker firm data, and we delete it after 30 days unless you engage us.