Defined scope projects
Defined work with a stated scope and deliverables.
Each project below has a defined scope and the deliverables listed before work begins. A technical lead is assigned on every engagement. Prices are in Canadian dollars before tax. Anything outside these scopes is priced after a short call, with a fixed price for discovery.
| Project | What is included | Starting from |
|---|---|---|
| Email and domain protection | SPF, DKIM and DMARC published for every service that sends as your domain, reporting enabled, and the DMARC policy moved to enforcement over an agreed period. | $900 |
| Security questionnaire response | One customer or insurer questionnaire of up to 100 questions, drafted from your existing controls, with two review rounds. New technical evidence is quoted separately. | $1,500 |
| External attack surface assessment | An inventory of your internet facing assets, verification of each exposure, prioritized fixes and a retest after remediation. | $1,900 |
| Cyber insurance evidence review | Your controls reviewed against the insurer's application, with the supporting records assembled for the broker. | $1,900 |
| Customer security due diligence package | Your existing policies and controls compiled into a response library and a summary you can send to buyers. Writing new policies is not included. | $2,400 |
| Ransomware resilience and recovery testing | A backup and recovery review, an authorized restore test of agreed systems, recovery findings and prioritized technical recommendations. Covers one environment; remediation is quoted separately. | $2,900 |
| AI agent security review | One AI assistant or agent deployment reviewed for permissions, connected tools, data access, prompt injection exposure and escalation paths, with findings and fixes. | $2,900 |
Discuss a projectWe reply within one business day.