Pricing
What it costs, before you ask
Published anchors for every way of working with us. Larger builds are quoted to scope rather than guessed at on a web page - but you will never be asked to book a call simply to find out the shape of the numbers.
Posture audit
Freeno cost, no obligation
An automated audit of your Microsoft 365 estate against the security baselines that apply to you, returned as a written summary.
The fastest way to find out where you stand. You keep the report whether or not you engage us for anything further.
Roadmap
from £4,500 / $5,800fixed fee
An optional fixed-fee roadmap that maps what to do, in what order, before anyone changes anything - for when you want the full sequence, and a costed plan to take to the board, before committing to a build.
Identity, device, and data governance measured against the baseline that matters to your obligations. You leave with a sequenced plan - dependencies, effort, and risks included - that you can act on with us or without us. It is never a required step: the Deadline Packs include their own planning, so most teams go straight from the free audit to a pack. Book a pack or a build within 60 days and the roadmap fee is credited against it, so planning first never costs you twice.
Pack / Build
from £3,500 / $4,500a Deadline Pack; larger builds from £20,000
A fixed-price, fixed-scope implementation - most often a dated Deadline Pack that closes the gaps against an external deadline.
The primary way to buy is a Deadline Pack: a dated, guaranteed outcome - the Cyber-Insurance Renewal Pack, the AI Readiness Pack, the Secure Remote Access Pack - so you buy an outcome, not an estimate. Where the work does not fit a pack it is still fixed-scope: scope, deliverables, and price agreed in writing before work starts, and if the scope genuinely changes we re-quote rather than quietly billing more hours against an open estimate. Want the full sequence mapped first? An optional fixed-fee Roadmap does that, and is credited against the pack or build you book within 60 days.
Retain
from £3,500 / $4,500per month
Continuous Evidence - a monthly retainer that keeps your posture aligned and your audit and insurance evidence current and submittable, not rebuilt from scratch each year.
Month one lands a posture baseline and a first evidence pack, so value arrives immediately. From there a fixed amount of senior time each month goes to the highest-priority work, drift is caught before an auditor sees it, and the evidence stays submit-ready - so next year's renewal or audit is handled inside the retainer, not re-bought as a fresh pack. One ladder, three rungs - Continuous Evidence, Embedded, and Fractional CISO - scales the cover from a compliance-continuity floor to hands-on delivery to a board-facing role. Start on a 90-day term, then month-to-month, cancellable with notice.
Prices are shown in pounds and US dollars and exclude VAT or local sales tax. Work is delivered remotely, worldwide.
How we price
Why there is no day rate
The commercial model is part of the offer, not an administrative detail. These are the principles every quote is built on.
Fixed scope, fixed fee
Every engagement is quoted as a defined outcome with a written scope. You know the total before it starts, not after.
No day rates
Open-ended time and materials rewards slow work and transfers all the delivery risk to you. We do not sell it.
Re-quote, don't creep
If the scope genuinely changes, we stop and re-quote in writing. Scope creep billed as extra days is a failure of estimation, not a revenue line.
Senior time, no pyramid
The work is delivered hands-on by the architect who scoped it. There is no junior bench being funded by the rate.
Why it costs less
Efficiency you can see in the quote
Lower fees are not a discount or an introductory rate. They reflect a genuine change in how long this work takes now that delivery is AI-accelerated.
The efficiency is priced in, not pocketed
Fixed-fee engagements are quoted against what the work actually takes us now, not against what it would have taken three years ago. Faster delivery shows up in the number you are quoted rather than in our margin.
It is why fixed scope is viable at all
Day rates exist because delivery time is hard to predict. Shorter, more predictable engagements are what make a fixed price something we can commit to in writing without padding it against uncertainty.
Budget spent on judgement, not legwork
Evidence gathering, config comparison, and first-draft documentation are the parts that used to consume an engagement's hours without needing an architect. Automating them is what keeps senior-led delivery affordable rather than a premium line item.
A proven standard applied, not rebuilt
The infrastructure-as-code, baselines, and runbooks behind an engagement are generated and refined once, then fitted to your estate rather than retyped from scratch for every client. You pay to have a proven standard applied, not to write one from the ground up.
How that AI assistance is governed - approved providers, what data never reaches a model, and who signs off the output - is published in our AI policy.
Scoping
What changes the number
A 'from' price is an honest floor, not a bait. These are the factors that move a quote above it.
- The number of tenants and users in scope, and whether they are being consolidated
- The baseline you need to meet - internal standard, cyber-insurance, CIS, ISO 27001, or a regulator
- How much remediation the roadmap surfaces, and how much you want to take on in-house
- Whether evidence needs preparing for a formal audit or independent verification
- Whether the work is delivered once, or templatised so your team can repeat it
Get started
Find out where you stand, free
Most engagements start with a no-cost posture audit against the baselines that matter to you. If a fixed-fee roadmap is the right next step, we'll say so - and if it isn't, we'll say that too.