Pick the level that fits

A 60-minute call where we look at your environment together — Microsoft 365 settings, dark web exposure, basic perimeter — and tell you what's actually risky and what isn't. You get a written report within 48 hours. No card, no obligation. About a third of firms we walk through this don't need us yet — we'll tell you so.

Yes. Monthly plans cancel at the end of the current billing month. Annual prepay isn't refundable mid-term, but we won't auto-renew you and you keep access until the period ends.

No setup fee. No per-seat overage. The published monthly price is what you pay. The only thing not bundled is incident response work, which is quoted per engagement.

Yes — as a separately-contracted engagement, anchored by GCIH-certified experience. Available either ad-hoc (hourly) or as an annual retainer. It's intentionally not bundled into seat pricing; IR is high-variance work and bundling it would force everyone to overpay for the average year that doesn't include an incident.

Yes. Written Information Security Plans, incident response playbooks, tabletop exercises, and risk assessments are scoped engagements — most commonly under our Custom tier, or as standalone projects for Guard / Shield customers when they're due.

Guard is the briefing-and-monitoring tier — we watch your environment, pull dark web exposure, scan your perimeter quarterly, and send you a weekly operator-reviewed briefing plus a monthly board PDF. Shield adds the things that require continuous human attention: real-time email threat scanning with auto-quarantine, 5-minute M365 monitoring, auto-remediation, vendor risk, a remediation tracking workflow, the AI copilot, urgent advisory emails, and a same-business-day response window. If your inbox or M365 environment is mission-critical, Shield.

Ohio. We're a US-only operation — no offshore SOC, no overseas tier-one. Every briefing, every email verdict, and every operator action is performed by a person on our team.

We can sign a Business Associate Agreement for Shield and Custom engagements. If you handle PHI and need a BAA in place, mention that on your first call — we'll walk through the sub-processor chain with you before you sign.