Build the foundation
Establish ownership, a risk register, policies and a prioritized roadmap. Cost depends on what already exists and how much needs to be created.
Pricing & engagement scope
What goes into
your quote?
Start with the service you need. Your goals, current setup, team and deadline shape the work and the price.
Discuss your scope
Prefer email? info@vectari.co
Tailored quotes. Deliverables, responsibilities, timing and fees agreed before work begins.
Choose a service.
Select a service to jump to what shapes its quote.
vCISO
Price the goals. Plan the leadership.
A focused roadmap and an ongoing leadership role call for different levels of involvement. The quote reflects the decisions, coordination and working cadence your business needs.
Support customer growth
Prepare for compliance readiness, customer questionnaires, vendor reviews and contract requirements. The gaps to address, coordination required and depth of evidence shape the workload.
Lead an ongoing program
Set a leadership cadence, review risk and coordinate progress with your team or MSP. Meeting frequency, reporting audiences and implementation oversight affect scope.
Prepare for change
Plan security around new products, acquisitions or a changing technology environment. The number of teams, systems and decisions influences the level of support.
Bring your top priorities, current team and target dates. We’ll agree the leadership role, deliverables and responsibilities, including which implementation work your IT team or other providers will handle.
Prefer email? info@vectari.co
Compliance readiness
Understand the work behind readiness.
Two organizations pursuing the same framework can need very different levels of work. Complexity, current controls and the organization’s commitment to doing the work shape both cost and timing.
Organization complexity
Entities, locations, systems, sensitive information, vendors and target frameworks shape how much needs to be reviewed and coordinated.
Your starting point
Existing controls, policies and usable operating records affect how much must be built or repaired.
Organizational commitment
Leadership decisions, budget, staff time and accountable owners affect the pace of the work and the support needed.
Tools and implementation
New tools or system changes can add licensing, configuration, integration and training costs. Agree any additional implementation services in the proposal.
Ongoing activities and evidence
Plan for the recurring work that keeps controls operating, and the records that demonstrate it. Agree who performs, documents and reviews those activities.
Deadline and capacity
Remediation, approvals, evidence collection and review availability shape the schedule. A close deadline does not remove those dependencies.
Agree the phases and the responsibilities.
First define the requirements and review the current program. Then plan remediation, any additional implementation services and the activities needed to keep controls operating. Finally, review the gaps and evidence against the agreed requirements.
The organization needs to make decisions, assign owners and give them time to do the work. Ongoing activities might include access reviews, security training, vulnerability follow-up and recovery exercises. The plan should say who performs each activity, how often it is needed and where the supporting records will live.
Readiness support, tool subscriptions, technical implementation, ongoing program support and independent assessment fees are identified separately in the proposal.
Prefer email? info@vectari.co
Public information searches
Start with the decision you need to make.
Research into one prospective partner, a passive scan and ongoing vendor management involve different work. The quote reflects who or what you want reviewed, the questions to answer and the depth of the review.
Subjects and questions
The number of people, businesses or domains and the questions you need answered determine the initial research scope.
Depth and evidence
Source availability, the depth of review and the work needed to resolve uncertain matches influence effort. Agree the findings, source references and review format.
Vendor management cadence
One prospective partner differs from several vendor reviews, evidence requests and ongoing follow-up. Agree the roles, review schedule and reporting in the quote.
The free exposure review is introductory, with eligibility and scope confirmed. Person searches, partner or vendor research and ongoing vendor management are paid work, quoted separately.
Prefer email? info@vectari.co
Penetration testing
Define the test. Know what is included.
An application test and a review of several environments need different scopes. Start with the systems you are authorized to test and the security questions the test should answer.
Systems and scope
The number and type of applications, domains, networks or environments determine the work to test. Agree the authorized targets and exclusions.
Testing approach and access
The testing objectives, available credentials, environment and permitted techniques shape preparation and effort. Timing and rules of engagement are agreed before testing.
Findings and follow-up
Reporting detail, the remediation discussion and any retesting affect scope. Confirm what is included and what requires a separate follow-up engagement.
Your proposal defines the authorized targets, testing approach, access, safety constraints, deliverables and any retesting. Tools or remediation work outside that testing scope are discussed separately.
Prefer email? info@vectari.co
Additional coverage & implementation
Need endpoint coverage
or new tools?
Endpoint coverage can be included in a separate quote. If readiness work identifies missing tools or system changes, agree the implementation work alongside the readiness plan.
For endpoint clients, bring your workstation and server counts, operating systems, locations, existing tools and the coverage you need. We’ll confirm eligible devices, onboarding or migration work, recurring fees, setup costs and response responsibilities.
Leave with a scope
you can evaluate.
Agree the outcomes, deliverables, responsibilities, schedule and fees before deciding how to move forward.
Start a pricing conversation