Pricing

Clear prices. No surprises.

Most security firms make you ask. I publish my prices so you can plan and budget with confidence. Every engagement starts with a free 30-minute call.

Mission-based rate: 20% off

For 501(c)(3) organizations with annual budgets under $2 million. Applies to every service on this page.

Just mention it on our call.

Ongoing leadership

Virtual CISO plans

Three-month minimum to match your first-90-days plan, then month to month. Cancel any time after that.

Essentials

About 8 hours a month

$2,000 / month

  • Security roadmap
  • Core policies
  • Quarterly board update
  • Email support

Most popular

Partner

About 16 hours a month

$3,750 / month

  • Everything in Essentials
  • Monthly check-ins
  • Security questionnaires handled
  • Annual tabletop exercise

Program

About 30 hours a month

$6,500 / month

  • Everything in Partner
  • Compliance program management
  • Audit preparation and support
  • Vendor risk management

What a vCISO does →

Fixed-price assessments

Know where you stand

One price, agreed up front. Start a vCISO plan within 60 days and half your assessment fee goes toward your first three months.

Risk Assessment

What could hurt you most, and what to fix first.

Under 25 staff$3,500
25–100 staff$6,000
Over 100 staffCustom quote

Framework Gap Assessment

How you measure up against a specific standard.

CIS Controls IG1 or NIST CSF 2.0$4,500–$7,500
SOC 2, ISO 27001, or HIPAA$8,000–$12,000

Price depends on your size and systems in scope.

Projects & one-time help

When you need something specific

Compliance Readiness

Closing gaps, policies, evidence, and audit support. Scoped after a gap assessment.

From $7,500

Security questionnaire

A funder, partner, or vendor review, completed accurately.

$750 each

Cyber insurance application

Help answering security questions on a new or renewal application.

$1,000

Answer library

Reusable, accurate answers to common security questions, so the next one takes minutes.

$2,500

Advisory hours

Ad hoc advice, sold in prepaid blocks of 10 hours.

$225 / hour

Pricing questions

Can a grant pay for this?

Often, yes. Many funders support capacity-building work, and security is increasingly part of that. I’m happy to provide a scope and budget you can include in a proposal.

Do prices include software or tools?

No. I don’t resell software, so any tools you choose are bought directly from the vendor, and I’ll always point out free or low-cost options first.

What if we need more hours one month?

Extra hours are billed at the advisory rate, and only with your approval first. If it keeps happening, we’ll talk about whether a different plan fits better.

Does the audit fee come from you?

No. Formal audits, like a SOC 2 report, are performed and billed by an independent CPA firm. I help you get ready and choose one.

Not sure what you need?

In a free 30-minute call, I’ll recommend a starting point and give you a clear price.

Book a free intro call