Pricing & Quoting

We, utilizing the HHS provided HIPAA Security Rule Risk Assessment Tool, walk you through each of 3 categories of dozens of control requirements, helping you interpret and efficiently analyze each requirement as written, as well as documenting your corresponding controls (or gaps). Further, we help with risk mitigation plans (if needed), and compensating controls, per control requirement.

The service that started it all, our NIST 800-53 based comprehensive security vulnerability risk assessment is broad, thorough, insightful and actionable. We offer the assessment with or without utilizing our digital toolbox (Eg. Tenable Nessus, Snort, etc.). Our toolbox allows us to deliver added detail and specificity,  and thus added value, per control requirement.

This is a highly customized service, since the ideal secure SDLC methodology will differ for each client. We can help you optimally tailor a process for your company, which works with how you work, and is based on academic research and professional experience.

We start with an Agile, proprietary, Fibonacci sequence-based, level of effort and time estimation process.

​

We then develop a price quote, based on the estimated number of hours worked over the engagement duration, times our current hourly price (H x $55). If the actual number of hours worked is more than quoted, you will not pay the difference in fee. We back up our quotes. However, if the actual number of hours worked is lower than in the price quote, we'll pay you the difference. We record our hours worked, and we pass the savings back to you.

​

Never pay more than the quoted price.