Choose a vCISO ownership level or request a separately scoped project.Choose the vCISO ownership level that fits your team. Focused assessments and technical projects are scoped separately with fixed or capped pricing when possible.
Engagement options
Start with a clear baseline. The written intake confirms the scope, responsibilities, and final price before you commit.
Save 15% with annual billing
Your team executes. We guide.
We manage the program.
We embed and execute.
Monthly retainers remain month to month. Annual billing is one prepaid invoice with a 15% discount; cancel with 30 days' notice and the unused prepaid balance is refunded on a prorated basis.
Prices shown are engagement baselines. Final pricing depends on your environment, compliance obligations, implementation needs, and response expectations. The written intake confirms the scope and final price before purchase.
We prioritize the work against your risks, deadlines, and agreed roadmap. Direction, program management, and hands-on implementation are stated explicitly in the scope so you know what is owned and what remains with your team.
Trust boundaries, sensitive data paths, integrations, and the design decisions that create or reduce material risk.
IAM, logging, network exposure, secrets, and cloud configuration reviewed and remediated when implementation is in scope.
Policies, procedures, control operation, and audit evidence brought into alignment with how the environment actually works.
Scoped offensive testing and technical validation tied to the roadmap—not a disconnected annual checkbox.
Actionable runbooks, escalation paths, tabletop exercises, and leadership support before a real incident forces the issue.
Customer security reviews, evidence requests, auditor coordination, and the technical follow-through needed to close gaps.
Focused project
We define the outcome, boundaries, deliverables, assumptions, and finish line before the work begins.
Ongoing ownership
We define the operating cadence, responsibilities, response expectations, and program backlog around the work you need owned.
Expanded execution
When hands-on implementation or enterprise coordination is needed, it is added explicitly to either scope rather than hidden inside a tier.
Most buyer questions, answered plainly.
A full-time CISO costs $250K to $400K fully loaded, takes 3-6 months to hire, and is often overqualified for Series A or early B companies. A virtual CISO gives you senior security leadership on demand, month-to-month. When you outgrow us, we help you hire the full-time CISO.
Use a focused project for a bounded assessment, test, or remediation initiative. Use ongoing program ownership when you need recurring leadership, audit management, and cross-functional accountability. If the right starting point is not obvious, request a written recommendation and we will map it for you.
The listed prices are engagement baselines. Environment size, deadlines, frameworks, response expectations, and implementation responsibilities determine the final scope and price. The written intake confirms both before you commit.
Yes. Cyber Syndicate, LLC dba vCISO.com carries professional liability / errors and omissions insurance sized for growth-stage engagements. Coverage certificates are available on request during procurement review.
Ready when you are
Share the essentials once. You'll receive a recommended starting scope, a working price range, and any focused questions needed to finalize it within 24 hours.