Key specifications
Illustrations are for reference. Service scope is defined by the plan you choose.
One-time project fee — no recurring charges.
A structured assessment of your network, cloud accounts and policies, ending in a prioritized remediation plan your team can act on.
Cyber insurers, enterprise customers and boards increasingly ask the same question: how do you know your company is secure? A Cybersecurity Audit gives you an evidence-based answer. We test your external exposure, scan internal systems, review Microsoft 365 or Google Workspace security settings and examine the policies behind them.
Findings are rated by risk and effort and mapped to widely used frameworks — CIS Critical Security Controls v8 and the NIST Cybersecurity Framework 2.0 — so your remediation plan speaks the same language as insurance questionnaires and customer security reviews. You receive an executive summary for leadership, a technical report for IT and a live walkthrough of the results.
The audit is a point-in-time assessment, not a certification. Professional and Enterprise include a retest of critical and high findings so you can show they were fixed.
All prices in USD, one-time per audit. Swipe the table sideways to see every plan.
| Feature | Business | Professional Recommended | Enterprise |
|---|---|---|---|
| Price | $7,000.00 one-time, per audit | $16,500.00 one-time, per audit | $38,000.00 one-time, per audit |
| Best for | A baseline security assessment for small organizations. | Adds penetration testing and a retest of critical findings. | Broad assessment covering applications, cloud and people. |
| What’s included |
|
|
|
| Order | Customize term & quantity for the Business plan | Customize term & quantity for the Professional plan | Customize term & quantity for the Enterprise plan |
| SKU | TS-SEC-503 |
|---|---|
| Category | Security & Continuity |
| Pricing | One-time fee, per audit |
| Billing | One-time project fee |
| Scope | Up to 100 / 250 / 1,000 internal hosts depending on tier |
| Testing | Vulnerability scanning; penetration testing on higher tiers |
| Frameworks | CIS Controls v8, NIST CSF 2.0 |
| Deliverables | Executive summary, technical report, remediation roadmap |
| Duration | Typically 2 to 6 weeks from kickoff |
| Confidentiality | Mutual NDA signed before any testing |
| Lead time | Kickoff within 10 business days |
Testing is planned with you in advance, and anything that could affect production, such as penetration testing, is scheduled in agreed windows. We stop immediately if we observe any impact.
No. The audit is an independent technical and policy assessment. Its findings help you prepare for a formal certification or compliance audit, which must be performed by a qualified auditing firm.
Only the contacts you designate. Reports are delivered through an encrypted share, and testing data is deleted 90 days after the final report unless you ask us to keep it for the retest.
A technical contact, network diagrams if available, a list of in-scope systems and, for internal testing, either remote access or a small virtual appliance that we provide.
Have another question? Ask a solutions architect
