// services and pricing

Fixed prices. Delivered personally.

Every engagement is scoped on a free call, priced up front, and delivered by me. Pay 50% to start and the balance on delivery.

HIPAA Security Risk Analysis

Small practices up to 25 staff. Delivered in 10 days.
  • Risk analysis report
  • Risk register
  • Prioritized remediation plan
  • Policy gap list
  • 60-min findings call
$2,750multi-site or healthtech $3,950
Book

Advisory vCISO / CTO

About 1 day a month.
  • Monthly leadership session
  • Policy and vendor reviews
  • Questionnaire support
$1,900per month
Book

Office Hours

4 hours a month with me.
  • Monthly working session
  • Policy and vendor reviews
  • Questionnaire help
  • Hours reset monthly
$1,250per month
Book

Hourly Advisory

Security and technology answers, by the hour.
  • Security and tech questions
  • Vendor and contract review
  • Architecture second opinion
  • No retainer
$225per hour
Book
Founding client price: the HIPAA Risk Analysis for $1,950 for the first 3 clients who share a short testimonial.CLAIM A SPOT →
// EU clients

EU pricing in EUR, excluding VAT

  • Security risk analysis, report only, single site€1,950
  • Risk analysis, report only, multi-site€2,950
  • Risk analysis, founding client price€1,450
  • Advisory vCISO / CTO retainer€1,500 per month
  • Office Hours (4 hours a month)€950 per month
  • Hourly Advisory€175 per hour

Prices exclude VAT. EU business clients: reverse charge with a valid VAT number.

// details

What each offer includes.

$2,750 / $3,950

HIPAA Security Risk Analysis

For small practices up to 25 staff, delivered remotely in 10 days. Multi-site practices and healthtech companies are $3,950.

  • Risk analysis report mapped to the HIPAA Security Rule
  • Risk register with likelihood and impact
  • Prioritized remediation plan
  • Policy gap list
  • 60-minute findings call

Policy and process scope. No technical testing.

// need the fixes done?

Want the fixes done for you? Dark Edge runs your security and compliance per seat, every day. See Dark Edge plans →

$1,900 / month

Advisory vCISO / CTO

About one day a month of senior guidance.

  • Monthly leadership session
  • Policy and vendor reviews
  • Security questionnaire support
$1,250 / month

Office Hours

Four hours a month of my time, used however you need it.

  • Monthly working session
  • Policy and vendor reviews
  • Security questionnaire help
  • Unused hours do not roll over
// outgrowing office hours?

More than office hours? Dark Edge offers vCISO and vCTO retainers with a team and a service level. See vCISO and vCTO →

$225 / hour

Hourly Advisory

Senior security and technology advice when you need it, with no retainer.

  • Security and technology questions
  • Vendor, contract, and architecture review
  • Billed in 30-minute increments
Founding client price: the first 3 clients get the HIPAA Risk Analysis for $1,950 in exchange for a short testimonial.CLAIM A SPOT →
// how prices compare

Senior work. Below market rates.

Market ranges come from published 2026 consultant price pages and benchmarks. They are estimates, shown so you can compare.

OfferMy priceTypical market price
HIPAA Security Risk Analysis$2,750$2,000 to $8,000 consultant-led
Multi-site or healthtech risk analysis$3,950$2,000 to $8,000 consultant-led
Advisory vCISO / CTO, about 1 day/mo$1,900/mo$3,000 to $12,000 per month
Office Hours, 4 hrs/mo$1,250/mo$175 to $600 per hour
Hourly Advisory$225/hr$175 to $600 per hour
// need more than me?

Need a team, technical testing, or managed IT?

That is Dark Edge Consulting, my firm. Same standards, with a team and a service level behind them.

from $199/user/mo

Managed IT, security and compliance

Want the fixes done for you? Dark Edge runs your security and compliance per seat, every day.

See managed plans →

vCTO from $2,500/mo, vCISO from $3,500/mo

vCISO and vCTO retainers

More than office hours? Dark Edge offers vCISO and vCTO retainers with a team and a service level.

See vCISO and vCTO →

from $3,950

Penetration testing

My risk analysis is policy and process only. Dark Edge does technical testing.

See testing prices →

// regulated industries

FFIEC, CMMC readiness, or SOC 2?

Dark Edge handles exam and assessment readiness for organizations it does not manage. CMMC certification itself is done by an authorized C3PAO.

FFIEC readiness → · CMMC and SOC 2 readiness →

See Dark Edge plans and pricing Ask me which fits

// next step

Not sure which fits?

Book a free 30-minute call and I will recommend the smallest engagement that solves the problem.

Book a free 30-min call