Questions, answered.

Audits and fixed-fee projects have no minimum beyond the scope. Managed retainers are typically annual but billed monthly. vCISO retainers carry a 6-month minimum to allow strategic work to land. We do not lock clients into multi-year contracts.

No. The first 30-minute call and any follow-up scoping conversations are free. We commit a fixed-fee proposal before any signed agreement.

For audits and assessments: typically within 2 weeks of signed agreement. Managed retainers: onboarding within 30 days. Website builds: 4–8 weeks for full scope, faster on existing relationships.

Yes — this is one of our most common entry points. We run a transition audit, document everything we inherit, and stand up clean operations within 30–60 days while keeping the lights on.

Managed clients receive 24/7 incident support. Non-retainer clients can engage emergency response on a time-and-materials basis. We aim to acknowledge incident calls from managed clients within 15 minutes.

Audits are fixed-fee and scoped after an initial conversation. Most SMB audits fall between $5,000 and $25,000 CAD, depending on size and scope.

Our practices are aligned to PIPEDA, Quebec Law 25, PHIPA, and CyberSecure Canada. We provide board-ready compliance documentation as part of charity and SMB engagements.

Yes. We are vendor-agnostic by design. We work with your existing EDR, SIEM, firewall, and identity stack, or recommend a refresh based on what fits your operational profile and budget.

All three, with specific hardening playbooks for each. Identity, MFA (passkey-preferred), conditional access, DLP, and audit logging configured to a defensible baseline. For privacy-sensitive clients we lean Proton; for regulated Canadian organizations we lean M365 with CA-region data residency; for everyone else, the right choice is whichever your team already runs well.

Standard retainer: 4-hour response on business hours. Priority retainer: 1-hour with after-hours coverage. Critical incidents: 15-minute acknowledgement for managed clients.