Free Consultation
$020 minutes
- Your priorities and the rules that apply to you
- Recommended next step
- No commitment
Pricing
Clear, fixed prices for small-business security
Every engagement starts with a free 20-minute call. You receive a fixed-price quote before any work starts, with no hourly surprises. Prices below are starting points for a typical small office.
Start here
Not sure where to begin? Start with a free call or a quick look at what attackers can see.
External Exposure Check
$495one-time
- Exposed services and ports
- Email domain security (SPF, DKIM, DMARC)
- Two-page report with quick fixes, in 5 business days
Dental & medical practices (HIPAA)
A documented security risk analysis is required by the HIPAA Security Rule. Every healthcare engagement includes a signed Business Associate Agreement.
HIPAA Risk Analysis — Essentials
$2,500one-time
- 1 location, up to 15 workstations
- On-site walkthrough and vulnerability scan
- Risk register and remediation plan
- One-hour results meeting
HIPAA Risk Analysis — Plus
$3,900one-time
- Up to 3 locations or 40 workstations
- Everything in Essentials
- Security policy review
- Follow-up check at 90 days
HIPAA Compliance Program — First Year
$6,900or $625/month
- Risk analysis (Essentials)
- Customized security policies
- Staff security awareness training
- Quarterly check-ins for 12 months
CPA & tax firms (FTC Safeguards Rule)
Tax professionals must maintain a written information security program (WISP), as outlined in IRS Publication 4557.
WISP Package
$1,950one-time
- Up to 10 users
- Risk assessment and tailored WISP
- Qualified Individual guidance
- IRS Publication 4557 checklist
WISP + Security Assessment
$3,500one-time
- Everything in WISP Package
- Office network and cloud vulnerability scan
- MFA and email security review
Annual WISP Update
$950per year
- Yearly risk assessment review
- Updated WISP
- Updated owner report
Auto dealerships (FTC Safeguards Rule)
Dealers that offer financing or leasing must run annual penetration tests and vulnerability assessments at least every six months.
Dealer Safeguards Assessment
$4,500one-time
- Written risk assessment
- WISP for one rooftop
- Qualified Individual guidance
Dealer Compliance Bundle
$9,500per year, or $850/month
- Risk assessment and WISP
- Annual external and internal penetration test
- Two semi-annual vulnerability assessments
- Compliance report for your file
Insurance agencies (Illinois Insurance Data Security Law)
Licensees of the Illinois Department of Insurance must investigate cybersecurity events and notify the Director within 3 business days. Agencies with 50 or more employees also need a written information security program.
Cyber Readiness Check
$950one-time
- For agencies with fewer than 50 employees
- MFA, email, and account security review
- External exposure check of your domain
- Incident response plan with DOI notification steps
Information Security Program
$3,500one-time
- For agencies with 50 or more employees
- Written risk assessment and information security program
- Third-party service provider review
- Incident response plan
Annual Program Update & Certification Support
$1,500per year
- Yearly risk assessment update
- Updated program and incident plan
- Annual report to ownership
Penetration testing
Controlled, authorized testing that shows how an attacker could get in, with evidence and fixes. One free retest within 60 days is included.
External Network
Starting at$3,500
- Up to 16 public IP addresses
- Firewall, VPN, and internet-facing services
Internal Network
Starting at$5,500
- One site, up to 50 devices
- Simulates an attacker inside your office
Web Application
Starting at$4,500
- One application, up to 2 user roles
- Based on the OWASP Top 10
Wi-Fi Assessment
Starting at$1,800
- One site
- Encryption, guest isolation, rogue access points
Ongoing protection
Monthly plans that keep your security and compliance current all year.
Vulnerability Scanning
$300per month
- Quarterly external and internal scans
- Summary of new risks and fixes
Security Advisor — Essentials
$1,200per month
- Monthly advisory call
- Policy upkeep and annual risk update
- Email and phone support
- 6-month minimum
Security Advisor — Plus
$2,500per month
- Everything in Essentials
- Quarterly scanning and phishing simulation
- Vendor security reviews
- 6-month minimum
Security Awareness Training
$35per user per year
- Online training and phishing simulations
- Completion reports for your file
- Minimum $350
As needed
Expert help outside a package.
Security Consulting
$150per hour
- Questions, vendor reviews, policy writing
- 1-hour minimum
Incident Response Support
$225per hour
- Contain, investigate, and document a suspected incident
- Priority response
How billing works
- Payment: 50% deposit to schedule the work, 50% on delivery of the report. Invoices are due within 15 days.
- Monthly plans: billed at the start of each month.
- Travel: on-site visits within 50 miles of Carol Stream, Illinois are included. Beyond that, travel is quoted in advance.
- Bundles: 10% off when you combine two or more one-time services in the same quote.
- Confidentiality: every engagement is covered by a confidentiality agreement, plus a Business Associate Agreement for healthcare clients.
- Public entities: registered vendor on the Illinois Procurement Gateway (IPG) and BEP-certified Minority Business Enterprise (MBE) with the State of Illinois. Public-sector pricing follows the applicable procurement rules.
- Products: CYBERISK WAF and CYBERISK SIEM pilot pricing is available on request.
- Validity: prices valid through December 31, 2026. Your written quote sets the final price.