Grey Wing prices the IT Program, Security Program, and GRC & Compliance Program against the systems, deadline, deliverables, and operating responsibility in scope.
The pricing conversation should answer what Grey Wing will own, what the client team keeps, and what the first work plan costs.
1
Start with what you need now
We review the customer request, audit date, system gap, or security decision that brought you to Grey Wing.
2
Define the first work plan
The proposal names the systems, deliverables, client responsibilities, dependencies, cadence, and fee for the approved scope.
3
Continue only where it helps
A defined first phase can become recurring work when there is a continuing system, security, or compliance work queue to own.
Before work begins
What the proposal identifies
Systems covered
Artifacts delivered
Milestones
Client responsibilities
Communication cadence
Scope boundaries
Fee
Add-ons and one-off work.
Each is scoped and priced on its own.
Security Program add-on
24/7* managed detection and response
Add managed detection and response (MDR) from a specialist security operations partner. Their analysts watch your systems around the clock and act when a real threat shows up. Grey Wing handles the follow-up fixes in your program.
Priced separately from the Security Program.
The systems covered, the containment steps partner analysts may take, and the response times are set before monitoring starts.
External, web application, and API assessments with named scope on the proposal before work starts. Findings and remediation guidance land in a Grey Wing report under our MSA.
The right starting point is the program that addresses the current business condition without adding unneeded scope.
Do you publish fixed package prices?
No. The fee depends on the systems in scope, deadline, required deliverables, and whether the work is a defined phase or ongoing program.
Can we start with one immediate problem?
Yes. An audit deadline, identity cleanup, incident-readiness gap, or customer questionnaire can become the first scoped work plan.
How is specialist work handled?
When a program needs penetration testing or a SOC 2 audit from an independent CPA firm, the specialist work and any related cost are identified separately in scope.
Is 24/7* monitoring part of the Security Program fee?
No. 24/7 managed detection and response from a specialist security operations partner is an optional add-on, priced separately. The systems covered, the containment steps, and the response times are set in writing before monitoring starts.
*24/7 monitoring is available as an add-on for an additional cost.
Not sure where to start?
Tell us about your systems and deadline. We’ll reply within one business day.
