Pricing

Published starting prices. Fixed once scoped.

Priced on outcomes, not hours. Each tier says what moves the price. After the first call the retainer is fixed. No hourly billing and no three year contracts.

Book a 30 minute call See vCISO →

Published starting prices

Platform Health CheckCredited to month one of any tier $2,500

Managed GRC EssentialsOne framework, one platform from $3,500 / month

Managed GRC ProfessionalMultiple frameworks, customer audits from $6,000 / month

vCISOFlagship. Managed GRC included from $10,000 / month

Compare

What changes from tier to tier.

Swipe sideways to see the full table →

Compare	Essentials	Professional	Build	vCISO
Role	Compliance ops manager	More frameworks and audits	Builds the plumbing	Senior security leader
Price	From $3,500 / month	From $6,000 / month	Fixed build fee	From $10,000 / month
Frameworks	One	Two or more	Any, built once	Program wide
Evidence	Platform plus manual	Platform plus manual	Automated, in your repo	Through the GRC tier
Audits	Prep and liaison	Findings and customer audits	Minimal manual evidence	Owns audit strategy
Reporting	Monthly ops report	Weekly status, budget burn	Build milestones	KPI pack, CFO view, board
Budget ownership	No	No	No	Yes

vGRC Build

Fixed build fee

The plumbing between your compliance platform and your real systems. Scoped after a Health Check.

Moves the price: systems to connect, data stores to map, deletion engineering.

Evidence repo you own

Drift alerts with owner and SLA

Data map, retention, deletion runbooks

See Build

Managed GRC Essentials

From $3,500 / month

Your compliance operations manager. One framework on one platform with readiness included from day one.

Moves the price: over 100 staff or a second framework.

Platform setup and control mapping

Monthly evidence and follow up

Audit prep with your auditor of choice

See Essentials

Managed GRC Professional

From $6,000 / month

Multiple frameworks from one control set with customer audits handled.

Moves the price: a third framework, headcount or more than two customer audits a year.

Everything in Essentials

Findings worked before the draft report

Weekly status with budget burn

See Professional

vCISO · Flagship

From $10,000 / month

A named senior security leader inside your company. Managed GRC included.

Moves the price: Professional underneath, more than one customer audit a quarter, board and fundraise cadence or M&A activity.

Owns roadmap, risk and budget

Joins customer security calls

Monthly pack, quarterly board summary

See vCISO

Way to start

Platform Health Check

$2,500

Two week review of your GRC platform with a 60 day plan to green. Credited to month one of any tier. Free for partner referrals.

Way to start

Security Program Assessment

$7,500 to $15,000

Roadmap, risk register and a board summary. The natural entry point for vCISO.

Quoted on the call

HITRUST r2, FedRAMP, enterprise GRC tools

On the call

Platform subscriptions bundled on one SOW.

Questions

Straight answers.

Why publish prices?: Most firms in this space do not. Publishing makes referrals easier and tells you before the call whether we fit. If a lower priced option is what you need right now, we will say so.
Is readiness a separate project?: No. One monthly price from day one through the audit and beyond.
Which platform?: Drata is where we run deepest. We are a partner and reseller so the subscription and the service arrive on one invoice. Already on Vanta or Secureframe? We take over that instance.
Who does the audit?: Your auditor of choice, independent of us. We prepare you, liaise with the auditor and work findings before the draft report.
Who do we actually work with?: A senior vCISO leads every engagement and a named compliance operations manager runs Managed GRC.