WRIGHTBRAINEDSECURITY
Book a call
For one-off questions, document and contract reviews, and a second opinion on what a vendor is telling you.
- Contract and policy reviews
- Vendor claims, checked
- Leadership and board prep
An experienced security leader for your team, without hiring a full-time security executive. Priced to fit your organization.
- Prioritized roadmap, with oversight
- Regular leadership meetings and reporting
- Clear monthly proposal after a discovery and risk review
Assessments and supplier reviews are scoped to your organization and priced before we start.
- Healthcare security assessments
- Supplier security reviews
- CMMC readiness and SPRS score checks
Every service, and how it's priced
| Service | How it's priced | Starting at |
|---|---|---|
| Advisory hours Questions, document reviews, a second opinion before you sign something. | Hourly | $300 an hour |
| Fractional security leadership An experienced security leader for your team, without a full-time hire. Roadmap, oversight, leadership meetings and reporting. | Fixed monthly retainer | Proposal after a discovery and risk review |
| Healthcare security assessment A full look at your security risks, plus help with the risk assessment HIPAA requires. | Fixed price | Quoted after a 30-minute call |
| Supplier security reviews Ask, verify, rank and report on the suppliers that touch your data or systems. | Fixed price, by number of suppliers | Quoted after a 30-minute call |
| CMMC readiness assessment Where you stand against NIST SP 800-171, scored the way an assessor would score it. | Fixed price | Quoted after a 30-minute call |
| SPRS score check A second look at the score you posted, before someone else takes that look for you. Turnaround: 1 to 2 weeks. | Fixed price | Quoted after a 30-minute call |
| Training SLSA for Engineers, and an online, self-paced CMMC course with a certificate of completion. Q&A sessions for your team available. | Per group | Quoted after a 30-minute call |
| CMMC Compliance Engine Policies, SSP, procedures and tools for CMMC Level 2, licensed per client. | Annual license | See cmmccomplianceengine.com |
| Discovery call, self-checks and checklists Thirty minutes to find out whether we can help. The self-checks and checklists are yours to keep. | Free | Free |
How is the monthly retainer priced?
It is a fixed monthly fee, tailored to you. It depends on how complex your environment is, the rules and contracts you have to meet, where your security stands today, what you plan to improve, and how much access to us you need. After a discovery and risk review, you get a clear monthly proposal: service level, meeting schedule, availability, deliverables, response times, and what falls outside the retainer.
Do you do the hands-on fixes?
No. We direct the work and verify it. Your team or your IT provider does the hands-on part. Keeping those separate is what lets us check the work honestly.
Why no list price for assessments?
A 20-person billing office and a 400-bed hospital are different jobs. After a 30-minute call you get a written quote with the scope and a fixed price, before any work starts.
Is the first call really free?
Yes. Thirty minutes, no slide deck. If we are not the right fit, we will say so.
Is your security posture keeping you up at night?
Thirty minutes, no slide deck. Tell us what you're up against and we'll tell you honestly whether we can help.