Our prices are on this page. All of them.

Managed EDR, managed SIEM, vulnerability management, and awareness training with phishing simulation — run by us, on the environment you already have.

Already included if you have an enclave. Security monitoring comes with both the CUI and commercial Secure Enclave — the rates above are for monitoring your existing environment, without one.

Servers are priced per device because server count doesn’t track headcount, and a server carries more licensing cost, more log volume, and a different response path than a workstation. Setup covers agent deployment, baseline tuning, alert routing, and reporting. Penetration testing, incident response, and cyber risk assessments are priced separately — testing and assessments per engagement, incident response through Expert Blocks. Coverage hours, response times, and escalation paths are defined in your agreement rather than implied here.

Built in your own tenant — GCC High or Google Assured Controls for CUI, commercial for everything else. Security monitoring is included in both. The CUI seat is all-in.

On CUI seats. They aren’t pooled, and that’s deliberate. A cheaper CUI seat elsewhere may be sharing a host between users, which creates attribution and separation problems at assessment. Worth asking any provider directly.

The CUI seat is all-in. $325 per user covers the desktop, security monitoring, the full compliance program — controls against NIST SP 800-171, SSP, policy suite, POA&M, evidence, SPRS support — and the Compliance App. There is no separate App subscription to add on top. Platform licensing is the only thing billed separately. A $500 monthly minimum applies to every enclave, and setup is the same across the band — the environment costs the same to build and run whether one person or fifteen are working in it.

Your control set, evidence, and status in one place, with credentialed practitioner review behind it. Already included if you have a CUI enclave — the rates below are for clients running it on their own environment.

No setup fee, 12-month term, 10% off if you prepay annually. And an important distinction: the App is not done-for-you. You do the work in the tool and our practitioners review and support it. If you’d rather we produce the artifacts, that’s Expert Blocks — a clean handoff rather than a surprise on your invoice.

Inventory, governance framework, technical configuration, monitoring, and documentation — then ongoing management.

Already have a Secure Enclave? The enclave attach rate applies — the boundary, identity, and monitoring are already ours to run, so governing AI inside it costs less than governing it across an environment we didn’t build.

Secure AI Readiness Assessment — $4,500, credited against setup if you proceed within 60 days. Two exclusions worth knowing up front: end-user training and custom agent builds route to Expert Blocks, and SharePoint permission remediation is scoped separately — assistants surface anything a user can already reach, and most tenants carry years of oversharing.

Fractional security leadership in two tiers, with a deliberate gap between them.

Small Business is tracking, not implementation. Incident response, document production, third-party risk work, questionnaires over about fifteen questions, and out-of-band requests are billed as Expert Blocks. We’d rather write that down than have the conversation later. Security monitoring is a separate service — a vCISO decides what should happen; the Cybersecurity practice is what runs it.

Bounded professional services for anything outside a subscription.

Typical uses: incident response, policy and artifact production, migration into the enclave, custom agent builds, training and workshops, and vCISO overage. Every agreement names Expert Blocks as the destination for out-of-scope work, so the handoff is contractual rather than a negotiation mid-project.