Skip to content
Unmesha Technologies, cybersecurity assessments

What does it cost?

Services start from $1,500. We agree a fixed price after the free call, once we know what’s in scope, and nothing starts until you say yes.

Request a free callWhat sets the price

Free 30-minute call. A check of every fix is included.

The plan, from our fictional sample report: the fixes we make, and the code changes your developers make.Read the whole sample report

What sets the price

We ask about these on the call, then send you a fixed price in writing.

  • How much there is to check: how many apps, APIs, cloud accounts and people.
  • What whoever’s asking needs to see, and by when.
  • Which fixes the assessment shows you need. Each one gets its own fixed price before we start it.
  • If the scope grows once we’ve started, we price the extra before we do it.

Always included

In every service, whoever’s asking.

See a sample report
  • A report your engineers can act on, with the evidence for each problem
  • What to fix first, and how to check each fix worked
  • A one-page summary to send to your customer, auditor or insurer
  • A call to walk your engineers through it
  • A check of every fix once it’s made

The six fixes

After the assessment, you only buy the ones it shows you need. We make the change, then check it worked.

  • Sign-in security

    Staff accounts and laptops

    Nobody gets into your company’s accounts with a password alone.

    For your engineer

    MFA enforced everywhere, with break-glass accounts. Single sign-on for your core apps. Conditional access rolled out report-only first, then enforced.

    Usually takes3 to 4 weeks

  • Cloud alerts

    Cloud account

    Someone on your team hears about it when something odd happens in your cloud.

    For your engineer

    CloudTrail, GuardDuty and Security Hub on AWS, Microsoft Defender on Azure, or Security Command Center on Google Cloud, with alerts routed to your team.

    Usually takes1 to 2 weeks

  • Tested backups

    Cloud account

    You know your data comes back, because we’ve restored it once.

    For your engineer

    Backups configured with retention, and made immutable where your platform allows it. One restore test, documented.

    Usually takes1 week

  • Email spoofing protection

    Staff accounts and laptops

    Nobody can send email that passes as coming from you.

    For your engineer

    SPF, DKIM and DMARC for your domain, taken from monitoring to quarantine to reject. Most of the calendar is watching the reports.

    Usually takes4 to 8 weeks

  • Laptop security

    Staff accounts and laptops

    Every work laptop is managed and protected, and can be locked or wiped if it’s lost.

    For your engineer

    A device management baseline and endpoint protection across your laptops, with enrolment support for your people. Licences are extra.

    Usually takes3 to 6 weeks

  • Web firewall

    Web app and API

    Common attacks on your app are filtered out before they reach it.

    For your engineer

    A web application firewall in front of your app: count mode first, then tuning, then block.

    Usually takes2 to 3 weeks

Sized for one cloud, one workspace tenant and under about 50 people. Larger estates are quoted. Secrets management and data-deletion routines live in your application code. We give your developers the pattern and check the result.

What isn’t included

So there are no surprises later.

  • Changes to your application code. Your developers make them from our pattern, and we retest.
  • The certification, audit or test itself, and its fees: SOC 2, ISO 27001, the pentest, the insurer's own checks.
  • Licences, such as Entra ID P1, endpoint protection or device management seats, and insurer or broker fees.
  • Incident response.

Start with the call

Tell us what you need. We’ll say what we’d check, then send you a fixed price. We reply within one working day.

Request a free call
  1. We reply within one working day. We set up the call, and you meet the people who’d do the work.
  2. We send a proposal with the scope, the timing and a fixed fee.
  3. Work starts when you say go.
See every service