SERVICES
Explore the practice that fits your needs, then choose an assessment, response engagement, retainer, or training program.
THE PRACTICES
01 · RESPOND
See practiceActive incident response, forensic investigations, and threat hunting, with retainers, IR plans, and tabletop exercises to prepare before an incident.
Active incident? Call(469) 489-4601
02 · ASSESS
See practiceAuthorized penetration testing and validated vulnerability assessments across external and internal networks, Active Directory, and web applications. Scope, rules of engagement, and authorization are defined in writing before testing begins, and post-remediation retesting is available to validate closure.
03 · ADVISORY
See practiceFractional CISO leadership, security strategy roadmaps, governance and risk advisory, and cyber insurance readiness reviews for organizations operating without dedicated security leadership.
04 · MODERN
See practiceAssessment-led reviews of cloud security posture for organizations whose business runs on Microsoft 365, Azure, and cloud identity. Findings come with concrete remediation steps; implementation is scoped separately or handed back to your IT or MSP.
HOW CLIENTS ENGAGE STRACE
Fixed-scope assessment
Written report, clear deliverables, defined timeline. Used for M365 hardening, NIST-aligned security reviews, cyber insurance readiness, and risk assessments. Typical duration: 2-4 weeks.
Active response engagement
Live engagement with an incident underway. Used for ransomware, BEC, insider threat, cloud compromise, and data exfiltration. Scope defined at incident confirmation.
Remediation project
Hands-on execution of findings from a prior assessment. Used for M365 hardening implementation, security control remediation, and policy development. Scoped per-control or per-deliverable.
Advisory retainer
Standing monthly relationship for organizations without an in-house CISO. Used for executive advisory, ongoing risk reporting, and strategic security input.
Training program
Productized educational engagement. Used for executive briefings, phishing simulation programs, role-based curricula, and small business cyber programs. Delivered in person or remote.
Quarterly review
Ongoing oversight cadence. Used for cloud security maintenance, configuration drift detection, and posture upkeep. Subscription-style with quarterly deliverables.
HOW PRICING WORKS
We quote after a consultation to establish the environment, urgency, deliverables, and timeline. Advisory, assessment, training, and hardening projects use fixed-scope proposals where appropriate; active incidents require an agreed scope-and-rate structure. Selected offerings have public starting prices.
START THE CONVERSATION