Baseline Security Checkup
From $750+ · 51-150 staff from $1,500+90 minutes on-site · 20-point scored review, top risks in plain English, 30-day plan. 100% credits toward any training or Tune-Up booked within 30 days.
Book the checkup →The whole price list
Starting prices, published. The rate in writing.
Every figure on this page is a starting estimate for typical scope, in CAD, plus HST. Your written proposal states the hourly rate and the estimated hours; the invoice reflects the hours actually worked - and if scope runs past the estimate, you hear it from us before the invoice, not on it.
Start here
The first step is a diagnostic, not a commitment.
The Baseline Security Checkup is the wedge: it produces the scored report that answers insurer questionnaires - and its full fee credits toward whatever you book next within 30 days. See a sample report →
Executive Cyber Risk Briefing
From $750+One hour with owners and partners only · your real risk in dollars, the insurance questionnaire decoded, five signed decisions.
Book the owner’s hour →Live team training
Good, better, best - and the anchor above.
All formats are live, at your office, story-driven and no-shame. Larger teams run multiple sessions or a tailored program, scoped on the fit call.
| Format | Price | What the step up buys |
|---|---|---|
| Fire Drill 90 | From $1,800+ | 90 minutes · up to 15 people (+$60/person over) · quiz, certificates, insurer completion record, posters, report. |
| Cyber Defense Workshop | From $2,600+ | 2 hours, hands-on · up to 15 people (+$60/person over) · practised skills, not just awareness. |
| The Cyber Fire Drill | From $3,900+ | 3 hours · up to 20 people (21-40 +$75/person · >40 split-cohort, quoted) · loaded edition $4,500 · The Heist simulation, sector scenarios, scored team scorecard, leadership memo, 30-day plan, follow-up call. |
| Cyber Readiness Day | Quoted | Full day · executive briefing + flagship drill + tabletop + signed plan by 5 p.m. Quoted on request. |
Add an authorized phishing-simulation program: setup from $750+, then campaigns from $450+ for up to 25 seats. Additional 25-seat blocks start at $175+; client-paid licences are never marked up. Results are reported in aggregate with no individual named. See the full training page →
Fix and build
The basics, actually done.
Security Tune-Up
From $1,800+ (≤10 seats) · $2,500 (11-25) · 26-50 from $3,400+MFA enforced, Microsoft 365 / Google Workspace baseline applied, email authentication, backup restore test, device hygiene - plus the “what we changed” page and updated score.
See the tune-up →Secure Office Launch
From $4,900+ (≤10 staff) · $6,900 (≤20) · 21-50 from $8,900+Opening an office or acquiring a practice: accounts, devices, Wi-Fi, policies and people-training set up once, correctly, across two weeks.
See the launch package →Incident Readiness Package
From $2,400+Standard $2,900 · $3,900 with the executive tabletop · one-page incident plan, insurer-first contact sheet, roles card, 90-minute discussion tabletop. Preparation, not incident response.
See incident readiness →Access control & MFA readiness
From $600+ · 26-50 from $1,300+Endpoint & device security readiness
From $400+ ($45/device)Security questionnaire readiness
Quoted after reviewPhishing simulation program
Setup from $750+ · campaigns from $450+Awareness platform implementation
From $1,200+The Security Partner Plan
Your security person. $349 a month.
Training fades. New people arrive. The scams keep evolving. Flat monthly tiers, six-month minimum, cancel monthly after - available to offices we’ve worked with, because the plan continues what the drill starts.
Essentials
$349/mo
Offices up to ~10 seats
Monthly 45-min check-in with a live scorecard · quarterly no-shame phishing practice (team results only) · new-hire micro-training · email Q&A line · annual insurer-questionnaire help.
Standard
$649/mo
Offices up to ~25 seats
Everything in Essentials + monthly phishing practice · monthly Microsoft 365 / Workspace secure-score review · annual 90-minute refresher drill · offboarding checks on request.
Premium
$1,199/mo
Offices up to ~50 seats
Everything in Standard + quarterly executive briefing · the full annual 3-hour Cyber Fire Drill · annual tabletop · priority coordination if something happens (coordination, not incident response).
Custom
from $1,999/mo
Teams of 51-150 seats
Everything in Premium, scoped to a larger environment - simulation cadence, included annual training and the check-in rhythm set in your written proposal.
Deep technical testing
Partner-delivered penetration testing, by quote.
Typical GTA small-business external + web-app tests run $6,000-$20,000+, quoted by our senior testing partner; vulnerability assessments run $2,500-$6,000. We scope the engagement, translate the report into plain English, coach the remediation and coordinate the retest - one accountable local contact. How partner testing works →
Commercial rules
What the numbers mean.
HST is additional
All prices are CAD before HST.
Estimates first, hours billed honestly
The published figure is the typical-scope starting estimate; your proposal states the rate and estimated hours, and the invoice reflects actual hours. Past ~20% over estimate, you hear from us before the invoice lands.
Payment plans over $3,000
50 / 25 / 25 on request - we flex the cash flow.
Published programs, not negotiations
Nonprofit rate card (at cost, one per quarter) · second location −15%, printed on the quote · referral credit $100, both sides · Partner Plan clients get 10% off project work.
Booking and rescheduling
A signed SOW books the date. Reschedule free 10+ business days out; 25% fee inside that window.
Specialists are disclosed
Partner-delivered testing is quoted by the partner and billed transparently - we never mark up a test invisibly, and our coordination role is stated in the SOW.
Not sure which first step fits?
Book the 20-minute fit call. We’ll tell you honestly whether you need us - and if you don’t, we’ll say so and point you to the free tools.
Book the 20-minute fit call