PRICING

Transparent coverage.
Serious security outcomes.

One unified security program designed to replace tool sprawl, reduce operational risk, and scale with your business.

Layer 8 — Management (aka People) — is not a real part of the OSI model, but it should be. It's how we describe the human factors, people, identities, and business processes attackers target every day. Most compromises start with a stolen identity, a weak process, or a simple configuration mistake. Our approach focuses on strengthening the people in the business, and then the technical pieces are straightforward: harden the environment, prevent the compromise, and if something still gets through, detect and contain it before it becomes a business problem.

Free 30 Day Trial

By scheduling a meeting, you agree to the Privacy Policy.

LIMITED-SCOPE ONSITE ENGAGEMENT

Onsite Assessment + Tabletop Simulation

$2,000 to $10,000

Do you wait for a fire to figure out where the exits are?

Most companies do not know where response breaks down until the pressure is real. We come onsite, assess key risks, run a custom tabletop, and show you what needs to be fixed first.

Choose the level of coverage that fits your organization today and scale seamlessly as needs evolve. Each option is designed around clear operating-model accountability — so you always know who owns what.

Core Coverage

IT/OT Cyber Defense & Risk Management

Co-managed IT (MSSP Model)

SecureStep deploys, owns, and manages your security program. Your team retains responsibility for daily IT operations while we handle detection, investigation, and response.

What's Included

Every capability, quantity limit, and operating-model boundary — compared across all three options.

Capability	Option 1IT/OT Cyber Defense	Option 2Managed IT/OT & Cyber	Option 3Full IT/OT Transformation
Security Operations
24/7 security operations center
Endpoint security monitoring
Identity security monitoring
Email security monitoring
SIEM monitoring / log retention	5 TB / 1 yr	10 TB / 1 yr	15 TB / 1 yr
Application control whitelisting	Up to 25 high-risk users	All users	All users
Browser isolation	Up to 25 high-risk users	All users	All users
External attack-surface monitoring
DNS filtering
Dark Web Monitoring
Vulnerability & Asset Management
Vulnerability management	Up to 500 assets	All assets	All assets — Tenable Nessus Enterprise
Asset discovery and exposure management	Up to 500 assets	All assets	All assets
Incident Response
Incident investigation and escalation	Within defined limits
Incident containment	Remote via approved tools	Managed end to end	Managed end to end
Incident recovery labor	Hourly / separate SOW	Normal ops included; major incidents separately scoped	Included within normal ops; major DR separately scoped
Access & Zero Trust
Secure remote access	Up to 50 high-risk users	All users — implemented & managed	All users — implemented, managed & modernized
Zero Trust infrastructure	Up to 50 high-risk users	All users — implemented & managed	All users — implemented, managed & modernized
Third-party / vendor access	Advisory	Secure access managed	Fully governed & managed
IT/OT segmentation	Assessment & roadmap	Incremental; major rebuild SOW	Designed & delivered in scope
IT Management
IT/OT ticketing	Security tickets only	All IT/OT & cyber	All IT, OT, cyber & transformation
Level 2/3 help desk	Hourly	Included — normal ops	Included — normal ops
Microsoft 365 / Entra ID administration	Security advisory only	Managed, implemented & licensed	Managed, implemented & licensed
Microsoft Intune	Separate SOW / hourly	Managed, implemented & licensed	Managed, implemented & licensed
Conditional Access	Baseline then hourly	Managed, implemented & licensed	Managed, implemented & licensed
Onboarding / offboarding automation	Advisory	Implemented & managed	Implemented & managed
Password manager
Endpoint patching	Security oversight	Managed	Managed
Endpoint lifecycle management	Advisory	Inventory & replacement planning	Full planning + defined replacement package
Server administration	Monitoring & security advisory	Day-to-day included	Full operational & lifecycle ownership
Backup administration	Security & risk oversight	Administration & recovery coordination	Full administration & recovery coordination
Networking
Firewall management	Assessment & recommendations	Day-to-day management	Full management, replacement & modernization
Switching and wireless management	Assessment & recommendations	Day-to-day management	Full management & modernization
Network performance support
Hardware Included
Business-class laptops			Laptops for full team + spares — buy, configure, license & deploy
Firewall			Firewall per site — buy, configure, license & deploy
Network switches			Switches — buy, configure, license & deploy
Wi-Fi access points			Access points — buy, configure, license & deploy
Governance & Advisory
vCISO support	5 hrs / month	10 hrs / month	20 hrs / month
Additional vCISO / architecture	Per hour beyond allowance	Per hour beyond allowance	Per hour beyond allowance
Security risk register	Maintained	Maintained w/ remediation ownership	Maintained w/ transformation tracking
Security policies and standards	Maintained within advisory hours	Implemented & managed	Implemented & managed across IT and OT
Change Control Board	Advisory within vCISO hours	Led by SecureStep — IT & cyber	Led by SecureStep — IT/OT transformation
Security awareness & phishing testing
Quarterly onsite tune-up	Hours + travel billed separately	80 hrs / year (travel billed separately)	160 hrs / year (travel billed separately)
IT vendor management	Advisory	Included	Included
Executive reporting	Monthly security reporting	Integrated IT & cybersecurity reporting	Executive IT/OT transformation & risk reporting
One-year IT/OT transformation roadmap	Advisory roadmap	Operational improvement roadmap	SecureStep accountable for delivery

Build DIY or Leave it to Experts

Most organizations underestimate the cost and complexity of building effective security operations internally.

Typical DIT Tool Stack Costs

Security assessment$18,000 - $80,000 yearly
Firewall Audit$20,000 - $70,000 yearly
SOC 2 Type 2 Audit$40,000 - $100,000 yearly
Endpoint protection$9/user/mo
Email security$5/user/mo
SIEM / logging$10/user/mo
Identity tools$5/user/mo
Phishing training$4/user/mo
Vulnerability management$5/user/mo
Darkweb Monitoring$5/user/mo
Vulnerability scanner$5/user/mo
Patching software$3/user/mo
Zero trust broker$7/user/mo
Asset management license$5/user/mo
Browser isolation license$3/user/mo
Secure remote access / VPN license$5/user/mo
IT/OT ticketing system$6/user/mo

Operational Reality

Number of tools to manage
DIY: 7+Managed: 1
Number of vendors
DIY: 6+Managed: Us
Internal staffing required
DIY: 2-3 FTEManaged: 0
Alert fatigue
DIY: DailyManaged: Filtered
Time to value
DIY: 6-18 monthsManaged: 30 days
Incident ownership
DIY: YouManaged: Us
Pentest/Compliance
DIY: A lot of hoursManaged: Us and tailored
Hardware for sensors
DIY: ~$10K per siteManaged: Included
Firewall updates — architecture & planning time
DIY: Your team's timeManaged: Planned & documented

[CRITICAL] One incident is all it takes to learn who really owns security.

DIY Simple Cost Calculator

Number of Employees

Security that proves value before contracts.

See real results in the first 30 days
No long-term commitment required
Built for modern IT, cloud, and OT environments