Fixed-scope, fixed-price packages. Payment terms: 50% at SOW signature, 50% at final report, Net 15. ACH preferred.
“What can an attacker (or my cyber insurer's scanner) see and exploit on the internet right now?”
| Standard — $1,750 | Extended — $2,500 | |
|---|---|---|
| Root domains | up to 5 | up to 10 |
| Public IPs | up to 16 | up to 48 |
| Manual validation of scan results | ✔ | ✔ |
| Email security (SPF/DKIM/DMARC) | ✔ | ✔ |
| Breached-credential exposure (domain-level) | ✔ | ✔ |
| One login portal (VPN / RDP gateway / client portal) checked for weak configuration | — | ✔ |
| Retest of fixed items | 1 retest within 30 days | 1 retest within 45 days |
Scope: subdomain and asset discovery; port and service enumeration; rate-limited vulnerability scanning; manual validation to remove false positives; TLS and certificate review; exposed admin panels and remote-access services; DNS and mail-authentication posture; public exposure of cloud storage tied to your domains. No exploitation beyond safe proof of a finding.
Deliverables: 1-page executive summary; findings report with severity, evidence, and plain-English fix steps; remediation tracker; 30-minute readout call; retest letter. Timeline: about 5–7 business days from kickoff to final report (about 2 days of testing; report within 3 business days of testing end).
Review — $2,250 (about 1 week) · Review + Hardening — $3,500 (about 2 weeks) · Over 50 users: +$500 per additional 50 users.
Scope: configuration review using a read-only / global-reader role. No attack traffic against Microsoft or Google infrastructure; provider penetration-testing rules followed.
Deliverables: gap report mapped to CIS controls; prioritized 30/60/90-day fix list; cyber-insurance questionnaire crosswalk (MFA, backups, logging); 45-minute readout. The Hardening tier adds the changes themselves, a change log, an after-state report, and a before/after Secure Score comparison.
“If a real attacker targeted us, how far could they get, and what do we fix first?” Supports the annual penetration-testing requirement in the FTC Safeguards Rule (16 CFR 314.4(d)(2)).
| Component | Included scope | Price |
|---|---|---|
| Core: External network + 1 web application | Up to 32 public IPs; 1 web app or client portal, up to 2 user roles and about 25 dynamic pages | $6,500 |
| Add-on: Internal network | 1 site, up to 100 live hosts, Active Directory / Entra ID review; remote test VM shipped, or on-site in Southeast Michigan | +$3,500 |
| Additional web app | Similar size | +$3,000 |
| Phishing simulation | 1 campaign, up to 50 users | +$1,500 |
Scope: manual testing aligned to NIST SP 800-115 and the OWASP Web Security Testing Guide: reconnaissance, vulnerability discovery, non-destructive exploitation to prove impact, authentication and access-control testing, and for internal tests, credential attacks within lockout limits, lateral movement, and privilege-escalation paths.
Deliverables: executive summary; full technical report (evidence, CVSS plus business-impact rating, remediation); remediation tracker; 60-minute readout (your MSP is welcome); one retest within 45 days; attestation letter for insurers, auditors, and customers. Timeline: about 2–3 weeks from kickoff to final report (5–8 testing days; draft report within 3 business days of testing end), retest by day 45. Testing can be scheduled evenings and weekends.
Mid-sized environments: the packages above are sized for typical small offices. For larger organizations (more IPs, multiple sites or applications, larger Active Directory / Entra ID estates, up to roughly 500 employees) the same methodology scales, and we provide a custom fixed quote after a scoping call. Mid-size engagements typically run about 1–4 weeks depending on package and scope.
Compliance readiness against FTC Safeguards, HIPAA, or NIST 800-171 is quoted per statement of work ($5,000–$15,000). MSPs: white-label delivery is available for Packages 1–3; you keep the client relationship.