Exposure checkFree
One domain you control
- Public TLS endpoints and certificates
- Quantum-vulnerable key exchange flagged
- Two-page summary
- Five business days
Pricing
Published prices for the first step, fixed quotes for the rest. You never pay for hours you did not approve.
[ A ] Assessments
Start small. Scale up.
PQC Readiness Snapshot$5,000
Up to two systems
- Cryptography bill of materials (CycloneDX)
- Endpoint quantum-safe test
- Findings ranked by data lifetime and exposure, reviewed by an engineer
- One to two weeks
- Credited in full toward an inventory ordered within 60 days
Inventory and migration planFrom $14,500
Sized by systems in scope
- Up to 10 systems: $14,500
- Up to 30 systems: $32,000
- Larger estates: quoted, from $60,000
- Code, dependencies, endpoints and certificates
- Migration plan covering the OMB M-26-15 elements or FAR readiness
[ B ] After the assessment
Fix it. Keep it fixed.
Migration engineering$12,000
Per two-week sprint
- Fixed scope agreed before each sprint
- Hybrid TLS, certificate reissuance, crypto-agility changes
- Evidence for every change
Monitoring Essentials$1,500/mo
Stay current
- Monthly re-scan of in-scope repositories and endpoints
- Written change summary
- Updated CBOM each month
Monitoring Pro$3,500/mo
Audit-ready
- Everything in Essentials
- Vendor post-quantum status alerts
- Quarterly review with an engineer
- Evidence pack for assessors and auditors
Monitoring is 10% less when paid annually.
[ C ] Compliance and security
Everything else.
NIST SP 800-171 gap assessment
All 110 requirements, an SPRS score and a draft system security plan. We prepare you for CMMC assessment; we do not certify.
HIPAA security risk analysis
Risk analysis plus readiness for the proposed Security Rule update.
Cloud and Kubernetes assessment
Posture against CIS benchmarks, cluster hardening, network policy, identity and secrets.
Fractional security lead
Policies, vendor risk, questionnaires and audit preparation.
Penetration testing
Delivered with vetted partners. We scope it, manage it, map the findings and run the retest.
[ D ] Buying
How buying works.
- BriefingThirty minutes on your systems, frameworks and deadlines.
- Written scopeA fixed price, deliverables and dates in a statement of work.
- PaymentCard, ACH, government purchase card, or invoice against your purchase order.
- Work startsThe week your scope is signed, with our own tooling.
[ E ] Payment
Ways to pay.
CardVisa, Mastercard and American Express through a secure hosted checkout. We never see your card number.
ACHBank transfer from a US business account.
Purchase cardGovernment-wide commercial purchase cards are accepted for in-scope work.
Purchase orderWe invoice against your purchase order or contract.
Prices are in US dollars. Questions about payment terms: vm@machersecurity.com.