PRICING

A compliant enclave, priced per user.

The Managed Compliant Enclave is the heart of Greypike — a dedicated, compliant cloud workspace built in your own account and managed by us. Simple per-user pricing with one transparent onboarding fee. No hourly bills, no scope-creep charges, no surprises.

Per in-scope user, per month Full CMMC program included Built in your own cloud account You own it — no lock-in
Book a Scoping Session See the tiers
Managed Compliant Enclave

One complete platform, priced by your team size.

A dedicated, compliant cloud workspace built in your own account and managed by Greypike — with a complete CMMC program built in. Every tier is the same platform; you're simply choosing how many in-scope users to cover.

Same features at every tier. The only difference is the number of in-scope users — the people who access, store, process, or transmit CUI, typically a subset of your team. You pay per in-scope user, per month, plus a one-time onboarding fee.

Starter

1–5In-scope users

$525 /user/mo

+ $4,000 one-time onboarding

Business-level virtual desktop included

The complete platform

  • Managed Compliant Enclave with business-level virtual desktops
  • Full CMMC program included
  • Compliance app — tracks tasks & documents your compliance
  • Documentation package, SSP & policies
  • Training & Cyber AB Registered Practitioner support
Get started
Most popular

Growth

6–15In-scope users

$475 /user/mo

+ $6,500 one-time onboarding

Business-level virtual desktop included

The complete platform

  • Managed Compliant Enclave with business-level virtual desktops
  • Full CMMC program included
  • Compliance app — tracks tasks & documents your compliance
  • Documentation package, SSP & policies
  • Training & Cyber AB Registered Practitioner support
Get started

Scale

16–25In-scope users

$450 /user/mo

+ $9,500 one-time onboarding

Business-level virtual desktop included

The complete platform

  • Managed Compliant Enclave with business-level virtual desktops
  • Full CMMC program included
  • Compliance app — tracks tasks & documents your compliance
  • Documentation package, SSP & policies
  • Training & Cyber AB Registered Practitioner support
Get started

Business-level desktops

Listed pricing assumes Azure Virtual Desktops sized for standard business productivity — email, documents, Teams, and everyday work.

Included

Design & development desktops

Need more horsepower for CAD, engineering, or development workloads? Higher-spec virtual desktops are available at a higher monthly rate.

Higher monthly rate

Physical endpoints

If your work requires managed physical devices alongside the enclave, we can add them for an additional fee — scoped to your needs.

Additional fee

Enterprise — 26+ in-scope users

Custom pricing for larger teams.

The same complete platform, scoped for bigger teams, multiple sites, or more complex CUI environments. We'll size onboarding and per-user pricing to your environment.

Talk to us

Every plan includes

The Managed Compliant EnclaveBuilt in your own GCC High or Google Assured Workloads account
Customized documentation packagePolicies & procedures tailored to your environment
System Security Plan (SSP)Built and kept current
Tailored policy suiteWritten to your CMMC / NIST 800-171 scope
Greypike compliance appTracks tasks & documents the behaviors that keep you compliant
Cyber AB Registered Practitioner supportExpert guidance at no additional cost
Team training & knowledgebaseBring your people up to speed, with answers on hand
Secure backup & managed security (SIEM)Encrypted backups plus centralized monitoring and alerting
Virtual endpoint support & maintenanceYour virtual desktops kept patched, updated & running

Billed per in-scope user, per month, built in your own cloud account — you own it, no lock-in. Pricing assumes business-level virtual desktops; design/development desktops and physical endpoints are available for an additional fee. See how the enclave works →

Find My Plan

Not sure what you need?

Answer a few questions and we’ll point you to the right starting place — with an estimated price range for your in-scope team. Your exact quote is confirmed in a scoping session.

1What’s your situation?
2How many in-scope users?
3Do you handle ITAR data?
Your recommended starting point
—
—
Estimated monthly
—
One-time
—
Book a scoping session →

Estimates are indicative ranges based on confirmed pricing tiers; your exact fee depends on systems in scope, environment complexity, and the platform you choose. Greypike is a Cyber AB Registered Practitioner Advanced (RPA) firm and prepares you for assessment — an independent C3PAO conducts the certification assessment.

CMMC Level 1

FCI compliance, done right.

For contractors handling Federal Contract Information — the 17 Level 1 practices, self-attestation, and a senior-official affirmation done with confidence. Three fixed-fee tiers, scoped to your size and environment.

Essentials

$3,500

≤10 employees, single location, one cloud tenant, no servers.

  • Gap assessment vs. all 17 Level 1 practices (intake + one session)
  • FCI scoping questionnaire & written scope statement
  • Level 1 policy set across all six domains, tailored to you
  • Prioritized remediation checklist — you execute, advisory guidance included
  • Verification review of completed items
  • Affirmation walkthrough & submission guidance
Get started
Most popular

Guided

$6,000

11–35 employees or multi-location, one primary environment.

  • Full assessment with stakeholder interviews & environment walkthrough
  • Scope statement plus FCI flow summary
  • Essentials policy set plus procedures customized to your tooling
  • Hands-on implementation of quick wins: MFA, access reviews, cleanup, physical-security docs
  • Remediation validation pass before attestation
  • Affirmation walkthrough + senior-official briefing
Get started

Complete

$9,500

36+ employees, mixed/on-prem environments, complex FCI boundaries.

  • Deep assessment incl. FCI flow analysis across systems & locations
  • Full FCI scoping diagram & boundary documentation
  • Fully customized policy & procedure suite, multi-site where applicable
  • Full implementation alongside your team across all findings
  • Full pre-attestation validation with an evidence file per practice
  • Complete affirmation package, briefing & submission support
Get started

Every tier is a flat fee, quoted upfront — and ends with your senior-official affirmation done right. Not sure which fits? Book a scoping session →

CMMC Level 2 & NIST 800-171 Roadmap

Priced to your size and complexity.

Whether you’re pursuing CMMC Level 2 certification or meeting NIST SP 800-171 under DFARS 252.204-7012, it’s the same 110 controls — and the same Roadmap. This is a fixed-fee engagement, with your tier set by the things that drive the work: headcount, number of systems, and how complex your CUI environment is. We confirm the exact tier during your scoping session.

Starter

$7,500

Small teams with a focused CUI footprint — lower headcount, a single primary environment, limited systems in scope.
Book scoping

Growth

$10,000

Mid-sized contractors with more systems and stakeholders — growing headcount, multiple tools or locations feeding the boundary.
Book scoping

Scale

$15,000

Larger or more complex environments, up to 100 employees — mixed/on-prem systems, multi-location, broader CUI flows to map.
Book scoping

Enterprise

Over 100 employees or highly complex environments

For large contractors, multi-enclave footprints, or intricate CUI boundaries that go beyond the Scale tier, we scope a custom Roadmap engagement built around your specific environment.

Talk to us

Every Roadmap is a flat fee, quoted upfront, and the deliverable is yours to keep. See what’s included →

Expert Blocks

Expert time, on tap — for whatever you need built.

Flexible blocks of hands-on engineering and compliance expertise. Point a block at targeted CMMC work, custom AI agents, automation, or anything else in your boundary — no fixed package, no long commitment.

Half-Day Block

$1,400 / 4 hrs

$350/hr. A focused chunk of expert help.

  • Best for a single, well-defined task
  • Quick questions, reviews, or a targeted fix
  • Expert-led, scoped before we start
Get started
Most popular

Day Block

$2,600 / 8 hrs

$325/hr. A full day — better value per hour.

  • Best for a meaningful build or deeper work
  • Stand up an agent, automation, or remediation push
  • Stack multiple days for larger efforts
Get started

Week Block

$12,000 / week

Best rate. A dedicated week of focused effort.

  • Best for projects — build, test, and document
  • Custom agents or automation, end to end
  • Lowest effective hourly rate
Talk to us

What you can point a block at

Expert Blocks are deliberately flexible. Common uses:

Compliance help

Targeted CMMC and NIST 800-171 work for teams that just need a hand.

Custom AI agents

Purpose-built agents in Microsoft Copilot or Google Gemini, in your environment.

Automation

Build automated workflows inside your accredited environment.

Other custom CUI work

Specialized, in-boundary work that doesn’t fit a fixed package.

Every block is scoped before we begin, so you know what you’re getting. Anything we build for AI or automation runs inside your own accredited environment. Not sure how many you need? We’ll help you size it.

Managed Compliance

Your compliance program, run for a flat monthly fee.

For contractors who keep their own IT or MSP. Greypike owns the compliance program — your IT executes the hands-on work. Your tier is set by the complexity and intensity of your program; we confirm it at scoping.

Essentials

$2,500 /mo

Single environment, straightforward scope, stable controls.

Covers: evidence upkeep, POA&M maintenance, annual affirmation, SSP kept current, and Rev 2 / Rev 3 reconciliation.

Book scoping
Most popular

Standard

$4,500 /mo

Multiple systems or moderate complexity, active remediation.

Adds: more frequent evidence cycles, active POA&M remediation support, more control families in motion, and quarterly posture reviews.

Book scoping

Advanced

$7,500 /mo

Complex / multi-boundary, ITAR exposure, or high assessment intensity.

Adds: named-day reassessment support, deeper governance, priority response, and hands-on specialist involvement.

Talk to us

Enterprise

Over 100 in-scope employees

For larger organizations with significant in-scope headcount, multiple boundaries, or program intensity beyond the Advanced tier, we build a custom Managed Compliance program scoped to your environment — with the governance, cadence, and specialist support to match.

Talk to us

Every tier is a flat monthly fee with a dedicated compliance manager — no hourly billing. We own the program; your IT team executes. See what’s included →

Expert Blocks

Expert time, on tap — for whatever you need built.

Flexible engineering and compliance expertise you point at exactly the work in front of you. Buy the block that fits the job — no fixed package, no long commitment.

Half-Day Block

$1,400 / 4 hrs

$350/hr. A focused chunk of expert help.

  • Best for a single, well-defined task
  • Quick questions, reviews, or a targeted fix
  • Expert-led, scoped before we start
Get started
Most popular

Day Block

$2,600 / 8 hrs

$325/hr. A full day — better value per hour.

  • Best for a meaningful build or deeper work
  • Stand up an agent, automation, or remediation push
  • Stack multiple days for larger efforts
Get started

Week Block

$12,000 / week

Best rate. A dedicated week of focused effort.

  • Best for projects — build, test, and document
  • Custom agents or automation, end to end
  • Lowest effective hourly rate
Talk to us

What you can point a block at

Expert Blocks are deliberately flexible. Common uses:

Compliance help

Targeted CMMC and NIST 800-171 work for teams that just need a hand.

Custom AI agents

Purpose-built agents in Microsoft Copilot or Google Gemini, in your environment.

Automation

Build automated workflows inside your accredited environment.

Other custom CUI work

Specialized, in-boundary work that doesn’t fit a fixed package.

Every block is scoped before we begin, so you know what you’re getting. Anything we build for AI or automation runs inside your own accredited environment. Not sure how many you need? We’ll help you size it.

Pricing questions

Things people ask before committing.

Do I have to start with a Roadmap?
For most CMMC Level 2 / NIST 800-171 work, yes — the Roadmap scopes your environment and tells us (and you) exactly what’s needed before committing to an enclave or ongoing program. It’s a fixed fee and the deliverable is yours to keep. Level 1 (FCI) engagements are self-contained and don’t require a separate Roadmap.
How does payment for the setup fee work?
For the Managed Compliant Enclave, the one-time setup fee and your first month are due up front — that covers the build work that stands up your environment before go-live. We can sometimes arrange flexible payment options depending on the engagement, so just ask at scoping. It reflects real labor, not an onboarding tax.
Does the Enclave price include compliance management?
Yes. The Managed Compliant Enclave is all-in — the per-user price includes compliance program management (policies, training, SSP, POA&M, evidence) along with the secure environment itself. You also get our compliance app, which guides the tasks and documents the behaviors that keep you compliant, with real RPA support when you need a human. Our separate Managed Compliance offer (flat monthly fee) is for contractors who keep their own IT or MSP and just need the compliance program run — you wouldn’t buy both.
What’s the difference between the Enclave and Managed Compliance?
The Enclave is when we provide and run the compliant environment and the compliance program — priced per user, all-in. Managed Compliance is when you already have your own IT or MSP running your environment, and Greypike owns just the compliance program (we define the cadence and drive remediation; your IT executes). It’s a flat monthly fee — we’re not a replacement MSP.
Is there a minimum contract term?
We offer month-to-month pricing with a modest premium, or annual agreements at the rates shown. Most clients choose annual for predictability — and we’ll be transparent about both options at scoping.
What if we add users later?
Enclave pricing is per in-scope user, so it simply scales as you grow. Tiers run by in-scope user count — Starter (1–5), Growth (6–15), and Scale (16–25) — and as you cross a band you move to the next tier’s rate. There’s no per-seat setup fee for new users after initial deployment; they’re added to your existing environment. Teams over 25 in-scope users move into custom Enterprise pricing.
How is the AI Enablement add-on priced?
It’s an add-on for enclave clients: a one-time setup plus $100 per user, per month all-in (the Microsoft or Google AI license is included). You get Copilot (on GCC High) or Gemini (on Assured Workloads), matched to your platform — running inside your own accredited tenant, configured and governed by Greypike. More on Compliant AI →
What counts as an “in-scope” user?
In-scope users are the people who actually access, store, process, or transmit CUI — not your whole company. Because enclave pricing is per in-scope user, scoping this correctly is what keeps both your cost and your assessment small, and it’s the first thing we sort out together at scoping.
What if I just need help with a specific project?
That’s what Expert Blocks are for — flexible engineering and compliance expertise you point at exactly the work in front of you, with no fixed package or long commitment. Buy a half-day, a day, or a week and use it for targeted CMMC work, custom AI agents, automation, or other in-boundary CUI work. Every block is scoped before we begin. See Expert Blocks →
Are C3PAO assessment fees included?
No. C3PAO assessment fees (typically $35,000–$100,000+) are paid directly to the independent assessor. Greypike is a Cyber AB Registered Practitioner Advanced (RPA) firm — we prepare you for the assessment; an independent C3PAO conducts it. Our pricing gets you ready; it doesn’t pay for the assessment itself.

Still deciding?

Not sure which plan? Let’s scope it together.

Every environment is different, and the right fit comes down to your scope, systems, and timeline. Book a scoping session and we’ll confirm exactly what you need — and what it costs — with no guesswork.

Book a Scoping Session Try Find My Plan

Fixed-fee pricing · No hourly billing · Cyber AB RPA-led