Simple monthly retainers scoped to your size and goals — typically 20–40% of a full-time CISO's loaded cost, with a whole team behind every engagement.
For startups landing their first enterprise deal and need to pass one audit, fast.
For scaling companies that need an ongoing program and a CISO in the room.
For complex environments, regulated industries, or full interim CISO coverage.
Prices shown are illustrative for this template. Every engagement is scoped to your environment, frameworks, and timeline.
No matter the tier, you're never relying on one person. The retainer buys you access to the entire bench — and our independence is never for sale.
Engagements are month-to-month after an initial term that matches your audit timeline. You can scale the retainer up during a certification push and back down once you're in maintenance mode.
A full-time CISO in the U.S. typically costs $300K–$450K+ in total compensation — and that's one person. Our retainers run a fraction of that and come with a full team of specialists.
Third-party auditor fees and tooling are billed directly by those providers — we stay vendor-neutral. We manage the relationship and the evidence so the audit goes smoothly, and we'll help you choose a cost-effective auditor.
We offer fixed-scope gap assessments as a standalone project. Many clients start there, then move into a retainer once they see the roadmap. Just ask on your consultation call.
Tell us your size, your target frameworks, and your timeline. We'll come back with a clear scope and a fixed monthly number — usually within a day.