Services & prices — New York, NY

Mostly, We Just Check The Locks.

Every lock. Every handle, every forgotten side door, every login page somebody spun up in 2021 and never mentioned again. Here’s exactly what we test, audit and rehearse — with the price sitting right next to it, because guessing is the worst part of buying security.

Get a fixed quote Not sure which? Start here
  • One fixed quote after one call
  • Mutual NDA on request
  • Countersigned scope letter
  • Live readout with your team
  • 60-day retest on technical tests

01 — Penetration testing

We Try The Handles. All Of Them.

Manual-first testing by people who actually enjoy this. Pick the surfaces that worry you, or let the scoping call narrow it down. Every price below is the honest floor for a typical 20–150 person company; your fixed quote shows the line items if it moves.

A green network cable plugged into a wall port on a lilac office wall
Fig. 02 — One open port, one afternoon.
Penetration testing services, scope, timing and starting prices
Test What we poke at Time From Action
External network Up to 64 public IPs — exposed admin panels, VPN gateways, mail servers, the staging box nobody remembers. 5 days $6,400 Scope it
Internal network Assumed breach: we start from one laptop on your LAN and see how far Active Directory, file shares and stale service accounts let us walk. 7 days $8,200 Scope it
Web app & API One app, two authenticated roles. OWASP Top 10, plus the business-logic stuff scanners can’t see — like ordering at someone else’s price. 8 days $9,750 Scope it
Cloud config review One AWS, Azure or GCP account: IAM roles, public buckets, logging gaps, keys that live a little too long. 4 days $5,300 Scope it
Office Wi-Fi On-site at your NYC office: guest-to-corporate segmentation, rogue access points, the captive portal, the printer on the wrong VLAN. 2 days $2,950 Scope it
Phishing simulation Two campaigns to up to 150 people, written for your actual vendors and tools, with click and report rates broken out by team — never by name. 3 weeks $2,400 Scope it
Badge readers & side doors A physical entry attempt at one office: tailgating, cloned badges, the loading dock. After hours, with a signed letter in our pocket. 1 night $4,100 Scope it

Bundle two or more tests in one scope letter and the overlapping recon days come off the quote. Retest within 60 days is included on every network, app and cloud test.

What one finding looks like — illustrative format, not a client

Ref
HAL-EXT-07
Severity
High
CVSS 3.1
8.1
Evidence
2-min screen recording

Former Contractor, Still On The VPN

A contractor account offboarded from email was never removed from the VPN appliance, and its password showed up in a public credential dump. Combined with no MFA on the VPN, that’s a working login to the internal network from anywhere.

The fix, in your stack Disable vpn-contractor-03 today. Then turn on SAML login to the VPN through your identity provider so offboarding in one place offboards everywhere, and enforce MFA on the VPN group policy.
An open audit binder with green index tabs and a brass ruler on lilac linen
Fig. 03 — Every tab is a control. Some are empty.

02 — Security audits

Your Controls, Lined Up Against The Checklist

We read your policies, then check whether reality agrees with them — MFA coverage, backups that actually restore, who still has admin, how laptops get wiped when someone leaves. Mapped to whichever framework is knocking.

  • SOC 2 Type I & II
  • ISO 27001:2022
  • HIPAA Security Rule
  • NIST CSF 2.0
  • CIS Controls v8
  • Your biggest customer’s spreadsheet

You walk away with a gap list ranked by effort, not by alphabet — so the two-hour fixes get done this week and the quarter-long ones get a real owner.

  • The Snapshot

    $4,850 Flat · one framework
    • Policy and config review across identity, endpoints, backups and access
    • Gap list ranked by effort and risk
    • 45-minute walkthrough with leadership

    About 2 weeks

    Book the Snapshot
  • Before your auditor

    The Readiness Run

    $11,300 Flat · SOC 2 or ISO 27001
    • Everything in the Snapshot, control by control
    • Evidence checklist formatted the way auditors ask for it
    • Policies rewritten to match how your team really works
    • Two check-ins while you close the gaps

    5–6 weeks

    Start the Readiness Run

  • The Questionnaire Desk

    $1,350 Per questionnaire
    • We answer the vendor security questionnaire, row by row
    • Evidence attached where it exists
    • The “not yet” rows flagged, with a plan you can share

    5 business days

    Hand us the spreadsheet

03 — Incident-response planning

Rehearse The Bad Day On A Tuesday

A plan nobody has opened is a PDF. We write yours around the people and tools you actually have, then run your team through a realistic incident around a table — so the first time anyone reads it isn’t at 3 a.m. with the Slack on fire.

  • Who calls whom, in what order
  • Playbooks for ransomware, invoice fraud, lost laptops, vendor breaches
  • When to ring your cyber insurer and counsel
  • A printable one-pager for the fridge — the office one
Scenario cards, a brass timer and coffee cups on a dark table during a tabletop drill
Fig. 04 — Phones face-down. The clock is running.

The tabletop, minute by minute

Three Hours. One Bad Morning. Coffee Provided By You.

  1. Roles, Then Rules

    Who’s playing incident lead, who’s playing the CEO who just landed at JFK. Phones go in a pile.

  2. First Inject

    Finance forwarded a strange invoice. Two people already clicked. Who hears about it first — and who should?

  3. It Spreads

    Five account lockouts in ten minutes. Somebody has to decide whether to pull the VPN. Who’s allowed?

  4. The Outside World

    A customer emails asking if their data is safe. Legal, comms and the founder all want to reply. One does.

  5. Getting Back Up

    Backups exist. Has anyone restored one this year? We find out together, out loud.

  6. Hot Wash

    What broke, who owns each fix, and which three lines of the plan change by Friday.

  • Flat $3,600

    Plan + First Tabletop

    The written plan, the one-pager, and the three-hour drill at your office or ours.

    Book the drill
  • Per session $1,450

    Extra Tabletop

    A fresh scenario for a different team — engineering on-call, the exec group, the board.

    Add a session
  • Yearly $1,900

    Annual Refresh

    We re-read the plan against new hires, new vendors and new tools, and update every phone number in it.

    Keep it current

Pick a starting point

If This Sounds Like You, Start Here

Most people show up with a trigger, not a shopping list. Find yours, and we’ll usually agree on the call — or tell you the cheaper thing is enough.

  1. A customer’s security questionnaire is due Friday.

    The Questionnaire Desk$1,350 per questionnaire

  2. Your SOC 2 auditor is booked for spring.

    The Readiness Run$11,300 flat

  3. You just shipped a customer-facing app.

    Web app & API testfrom $9,750

  4. Nobody has looked at the firewall since the office move.

    External network testfrom $6,400

  5. Your cyber insurer asked whether you have an IR plan.

    Plan + first tabletop$3,600 flat

  6. Honestly? No idea. Something just feels off.

    The free 30-minute scoping call$0, NDA first if you like

Not On Our Menu

  • 24/7 monitoring or a SOC. We’ll point you to good ones.
  • Reselling software or licenses. Our advice isn’t on commission.
  • Denial-of-service testing, unless you ask for it in writing.
  • Touching anything before the scope letter is countersigned.

Invoiced in two halves — at scope signing and at report delivery. Card, ACH or wire.

  • VISA
  • AMEX
  • ACH
  • WIRE