Every engagement is fixed scope and fixed price. Sprints deliver working configuration. Assessments deliver findings and remediation roadmaps.
Identity & Access - Find gaps in your Entra ID tenant security before an attacker does.
Entra ID security hardening: Full tenant review, roles, legacy auth, PIM. Assessment + findings report. Fixed-scope M365 security.
Duration: 2-3 weeks Price: $3,500 – $6,500
Identity & Access - A CA policy framework designed, deployed, and tested based on your organization's needs.
Conditional Access architecture: Design and deploy CA policy framework. Device compliance, risk-based, location policies. M365 security sprint.
Duration: 2–4 weeks Price: $3,500-$8,500
Identity & Access - Organization-wide MFA enforced — or upgraded from SMS to phishing-resistant methods.
MFA deployment sprint: Org-wide rollout. FIDO2, Microsoft Authenticator phishing-resistant. Weak methods eliminated. Fixed-price M365 security.
Duration: 2–4 weeks Price: $4,000-$7,500
Identity & Access - Eliminate standing admin accounts. Just-in-time access for every privileged role.
PIM sprint: Just-in-time access for privileged Entra roles. Eliminate standing admin accounts. Approval workflows, access reviews. M365 security.
Duration: 2–3 weeks Price: $4,500-$7,000
Endpoint & Device Management - Microsoft and CIS security baselines deployed across every managed device.
Intune security baseline: Deploy Microsoft & CIS benchmarks. Windows/mobile compliance policies. Automated remediation. M365 endpoint security.
Duration: 2–4 weeks Price: $4,500-$7,500
Endpoint & Device Management - New devices that provision themselves. Zero IT touch required.
Intune zero-touch enrollment: Autopilot + Intune. Auto-provisioning, app deployment, profiles. No IT touch required.
Duration: 2–3 weeks Price: $6,500-$10,000
Email & Messaging Security - SPF, DKIM, DMARC to enforcement. All domains. No exceptions.
Email authentication hardening: SPF, DKIM, DMARC to enforcement (p=reject). MTA-STS, DANE. All sending domains verified.
Duration: 2–3 weeks Price: $2,500-$4,500
Email & Messaging Security - A full review of your Exchange Online configuration including connectors, rules, policies, and protections.
Exchange Online security review: Connector hygiene, transport rules, anti-phishing, external forwarding blocks. Findings report + roadmap.
Duration: 1–2 weeks Price: $3,000-$5,000
Microsoft 365 Posture - Meaningful Secure Score improvement — not checkbox theater.
Microsoft Secure Score optimization: Triage & implement quick wins. Identity, data, devices, apps. Measurable score improvement.
Duration: 4–8 weeks Price: $5,000-$8,000
Microsoft 365 Posture - Harden your M365 environment before Copilot exposes what's already overshared.
Copilot security readiness: Pre-deployment hardening. Data oversharing audit, sensitivity labels, SharePoint permissions. M365 security.
Duration: 3–5 weeks Price: $6,500-$10,500
Microsoft 365 Posture - Copilot licensed, enabled, governed, and live — for the right users, with the right guardrails.
Microsoft 365 Copilot deployment: Full rollout, governance, plugins, agents. For hardened, licensed orgs ready to deploy.
Duration: 2–4 weeks Price: $6,500-$12,000
Microsoft 365 Posture - Full Microsoft Defender onboarding — EDR, ASR, and automated response operational.
Microsoft Defender deployment: EDR, vulnerability management, attack surface reduction, automated investigation. Full M365 threat protection.
Duration: 3–5 weeks Price: $6,000-$9,500
Microsoft 365 Posture - A comprehensive review across your entire Microsoft 365 environment.
M365 security posture assessment: Full review across Entra ID, Exchange, Intune, Defender, SharePoint. Gap report + remediation roadmap.
Duration: 4–6 weeks Price: $8,500-$14,000
Entry Point - One day. Fixed price. You'll know exactly what's broken and what to fix first.
M365 security health check: One-day assessment covering Entra ID, identity, email, endpoint. $1,500 fixed-price. Prioritized findings report. Book now.
Duration: One day (6–8 hours, remote) Price: $1,500