Pricing
Every price in one place, grouped by who the service is for: defense contractors (Cybersecurity Maturity Model Certification, CMMC), medical and dental practices (Health Insurance Portability and Accountability Act, HIPAA), other businesses, and veterans. Each item links to its own page for details or purchase.
CMMC Prices
For suppliers to the Department of Defense that need a Cybersecurity Maturity Model Certification (CMMC) self-assessment. Kits are one-time purchases that support your own self-assessment. They do not give you a CMMC certification or status.
| Offer | Price | Details or purchase |
|---|---|---|
| Free CMMC Level 1 StarterAnyone who wants to learn whether Level 1 applies and where the gaps are before spending money. | $0 email required | Get the Free Starter |
| CMMC Level 1 Self-Assessment KitA small supplier with Federal Contract Information that must complete a Level 1 self-assessment and affirm it each year. | $297 one time | Buy Level 1 Kit for $297 See what is inside |
| CMMC Level 2 Self-Assessment KitA small supplier with Controlled Unclassified Information that must complete a Level 2 self-assessment, or prepare for a third-party assessment. | $497 one time | Buy Level 2 Kit for $497 See what is inside |
| Level 1 Kit + CMMC Certified Professional Review CallA Level 1 supplier who wants a credentialed person to look over the finished work before the senior official signs. Includes the Level 1 Kit and one review session of your completed workbook. | $697 one time | Buy Kit + Review for $697 |
| Level 2 Kit + CMMC Certified Professional Review CallA Level 2 supplier who wants a credentialed review of the completed workbook, score, and System Security Plan. Includes the Level 2 Kit and one review session. | $997 one time | Buy Kit + Review for $997 |
| Annual RefreshA kit owner who must re-assess and affirm every year and wants the kit brought up to date first. Offered at your first renewal date. Refreshed files are emailed within 2 business days of payment once the refreshed set for your level is released. One payment each year: $297 for Level 1 or $497 for Level 2, with a reminder email 14 days before your renewal date. It does not renew automatically. | $297 or $497 each year, by level | See Annual Refresh terms |
| Guided Level 1 PackageA supplier that wants the Level 1 work scoped to its own systems and the remediation plan written for it. Remote and document based, with no system access or testing. | $1,950 one time | Ask About Guided Level 1 |
| Guided Level 2 PackageA supplier with Controlled Unclassified Information that wants the Level 2 work scoped and drafted for it. Remote and document based, with no system access or testing. | $4,950 one time | Ask About Guided Level 2 |
| Hands-on AssessmentA supplier that wants us to test its actual systems against the requirements, with a written quote for its own environment. | Starting at $9,000 quoted per company | Ask for a Hands-on Quote |
HIPAA Prices
For practices that must protect patient information under the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. Start with the free tools, then choose the level of help you want.
| Offer | Price | Details or purchase |
|---|---|---|
| Free HIPAA Evidence BinderA HIPAA compliance checklist and evidence binder guide to organize the documentation an auditor, insurer, or the Office for Civil Rights may ask for. | $0 email required | Get the Free Binder |
| Free HIPAA Security Quick CheckA short set of questions on administrative, physical, and technical safeguards that shows where your gaps are. | $0 free | Take the Quick Check |
| HIPAA Evidence Binder KitEditable HIPAA Security Rule policies, forms, risk analysis workbook, and evidence tracker for small medical and dental practices. No subscription. | $197 one time | See the Evidence Binder Kit |
| Professional HIPAA Security Risk Analysis: Small PracticeA practice with 1 to 5 providers at a single location. Flat price. | $2,950 flat price | See HIPAA Assessment Details |
| Professional HIPAA Security Risk Analysis: Mid-Size PracticeA practice with 6 to 15 providers at a single location. Flat price. | $4,450 flat price | See HIPAA Assessment Details |
| Professional HIPAA Security Risk Analysis: Complex or Multi-LocationA practice with more than 15 providers, more than one location, or a more complex environment. Quoted for your practice. | From $6,500 quoted | See HIPAA Assessment Details |
Business Security Prices
For small and mid-size organizations that want their security settings and their contracts reviewed.
| Offer | Price | Details or purchase |
|---|---|---|
| Microsoft 365 Security Review: Up to 25 UsersA review of your Microsoft 365 security settings with a written report of priority fixes. For organizations with up to 25 users. | $1,750 one time | Ask About a Security Review |
| Microsoft 365 Security Review: 26 to 75 UsersA review of your Microsoft 365 security settings with a written report of priority fixes. For organizations with 26 to 75 users. | $2,750 one time | Ask About a Security Review |
| Microsoft 365 Security Review: Larger OrganizationsFor organizations with more than 75 users. Quoted for your organization. | Quoted per organization | Ask for a Quote |
| Contract ReviewPricing depends on the agreement and its complexity, so reach out and you will have a quote before any work begins. Every review includes a written findings report, with an optional 30-minute debrief call if you would like to talk it through. | Contact for a quote | See Contract Review |
Veteran Career Coaching
Veteran career coaching: contact us for current options.
See Veteran CareersPrices are in U.S. dollars and do not include sales tax where the law requires us to collect it.
Not Sure Which Option Fits?
Tell us about your company and we will recommend the right option for your situation.
Contact Us