For DFW contractors and subcontractors

Every draw lands where it should. See it working in 90 days.

One partner keeps your company running, protected, automated and audit-ready, with a date on every milestone.

Book my free 20-minute Scorecard Review call

20 minutes by phone. We go through your scorecard (or run it with you), rank your gaps by risk to your money, and tell you what to fix first.

Enterprise security since 1997 · Scotiabank · Walmart · Road Solutions · Bilingual EN/ES helpdesk · DFW

Your 90-day plan

  1. Days 1-30Stabilize
  2. Days 31-60Protect
  3. Days 61-90Automate

What changes for a contractor or sub

  • Today

    A bank-change email shows up and nobody is sure it's real

    With UT-Ops

    Every draw lands in your account, with a callback rule your AP team follows

  • Today

    The renewal form sits on the controller's desk for weeks

    With UT-Ops

    Your vCISO answers it and keeps you ready for the next one

  • Today

    A GC sends a security questionnaire and it stalls the bid

    With UT-Ops

    Back to you in 3 business days

  • Today

    The estimator's laptop dies on bid day

    With UT-Ops

    Bid-day priority line, 15-minute response

  • Today

    A foreman's tablet walks off with every drawing on the job

    With UT-Ops

    Locked and wiped in minutes

  • Today

    Procore, Bluebeam and Adobe seats nobody uses

    With UT-Ops

    Dead seats cut, one invoice

  • Today

    The crew skips training they can't follow

    With UT-Ops

    10 minutes at the huddle, in Spanish or English

  • Today

    Five vendors and a nephew who "does IT"

    With UT-Ops

    One partner, one plan, working in 90 days

$58,850. A fraudster copied an electrical subcontractor's email address with .net in place of .com and sent the GC new payment instructions. The payment went to the fraudster, and the sub had to sue to collect it.

Source: U.S. ex rel. Jay Worch Electric, LLC v. Atlantic Specialty Ins. Co., No. 8:22-cv-02420 (D. Md. May 21, 2024)

Everything your office and field run on, handled by one team

Bid-Ready runs on UT-Ops: the one team that plans, builds, runs and improves your technology, with software and AI, security and day-to-day operations in one service. We named its parts for the way a subcontractor works.

Always running

Your office and field keep working, day and night.

Parts:

  • Lost Tablet Kill Switch
  • Bid-Day Priority Line
  • Same-Day Crew Offboarding
  • License Leak Audit

Also included: 24/7 bilingual helpdesk and monitoring, patching and updates, device management, backups every hour on critical systems and at least daily on everything else, license management, network.

Always protected

Every draw protected and your crew trained in their language.

Parts:

  • Draw Protection Lockdown
  • Toolbox Talks, Cyber Edition (EN/ES)

Also included: a named vCISO, 24/7 threat hunting and managed detection and response, Zero-Trust access, email protection, incident response.

Audit-ready

Your insurance and GC questionnaires answered, with the policies and evidence on file.

Parts:

  • Prequal Pack (with the vCISO-signed attestation letter)
  • Questionnaire Service

Also included: compliance support, written policies and evidence, vCISO-signed documentation, and audit support.

Smarter every quarter

A senior technology leader and a new automation every quarter.

Parts:

  • Fractional CIO
  • Quarterly automation

Also included: a four-quarter technology roadmap, systems integration so your tools share data, vendor management, BI dashboards and quarterly growth reviews.

A date on every milestone, from kickoff to day 90

From you, the plan needs one kickoff call and one signature. We handle the rest. Every milestone below gets a date in your plan before we start.

  1. Days 1 to 30

    Stabilize

    • Week 1: Draw Protection Lockdown (callback rule, domain authentication, impersonation filtering, AP and PM session)
    • Monitoring, backup, patching and the 24/7 bilingual helpdesk switched on
    • Every office computer, field phone and tablet enrolled (Lost Tablet Kill Switch)
    • Bid-Day Priority Line set up for your estimators; Same-Day Crew Offboarding agreed with your office manager
    • Every vendor, device and license inventoried, with the License Leak Audit cut list

    What you do: attend the kickoff call, sign the service order and the callback rule, approve the cut list.

  2. Days 31 to 60

    Protect

    • vCISO risk review of your office systems, email and devices
    • Zero-Trust access, email and endpoint protection live
    • Prequal Pack delivered (policy set, vCISO-signed attestation letter, pre-filled questionnaire answers)
    • Your insurance renewal or GC questionnaire answered
    • First Toolbox Talk at a morning huddle in English and Spanish; first phishing test

    What you do: review the Prequal Pack with your vCISO; tell foremen to expect the huddle talk.

  3. Days 61 to 90

    Automate

    • First automation or integration shipped, chosen with you in the first 60 days (for example, pay-app data flowing from Procore to your accounting system without retyping)
    • Four-quarter technology roadmap delivered by your Fractional CIO
    • Hours-saved baseline measured and reported at your day-90 review

    What you do: pick the first automation with us; attend the day-90 review.

From day 1, any new insurer or GC questionnaire comes back completed within 3 business days. After day 90, a new automation ships every quarter and your roadmap is reviewed with you.

Protect every draw in 7 business days

A one-time setup that closes the gaps criminals use to redirect progress payments, plus a ranked plan for your insurance renewal. It counts as week 1 of the 90-day plan, and the fee is credited against onboarding if you sign within 14 days.

$1,500, one time

For companies with 15 or more people on their own work computers.

Lockdown Guarantee: Delivered within 7 business days of kickoff, or your full fee is refunded.

What it costs to buy the same coverage piece by piece

For a sub with 16 people on their own work computers, here is what the same coverage costs at typical market prices, bought from separate vendors.

  • Managed IT with 24/7 helpdesk

    Typical market price: $100-400 per user

    Monthly, 16 people: $3,200

  • Managed detection and response

    Typical market price: $20-60 per user

    Monthly, 16 people: $640

  • Security awareness training

    Typical market price: $0.95-3.25 per user

    Monthly, 16 people: $52

  • vCISO retainer

    Typical market price: $1,500-4,000

    Monthly, 16 people: $3,000

  • Fractional CIO

    Typical market price: about $217 per hour, about 6 hours a week

    Monthly, 16 people: $5,650

  • One automation per quarter

    Typical market price: $5,000-15,000 each

    Monthly, 16 people: $1,650

  • Bought separately

    about $14,200 a month, from 5 to 6 vendors

  • UT-Ops

    One partner, priced after your fit call.

Typical published market prices, 2026: Datapath, Corsica, Petronella, Bellator Cyber, Consilien, SideChannel, GoFractional, Layer3Labs, Zaps Studio, Robert Half, BLS.

One price for every subcontractor

From $250 per seat per month

plus one governance retainer that covers your vCISO, your Fractional CIO and a new automation built every quarter

15-seat minimum. All four outcomes and every part on this page.

What a seat is:

  • A seat is one person with their own work computer, plus up to 3 devices assigned to them. Office staff, PMs, AP and estimators are seats.
  • A foreman with a phone and company email but no computer, and crew phones and shared jobsite tablets, are billed as lower-cost lines. Every field device gets device management with the Lost Tablet Kill Switch, patching, lock and wipe, and helpdesk.

Your exact monthly total comes from a 20-minute fit call, once we know where your email lives, what runs in your building and who holds your admin passwords.

One-time onboarding equal to one month of your monthly ITFocus lines (software licences excluded).

12 months, then month to month until you cancel with 60 days' written notice.

Hardware, third-party software licenses (Microsoft 365, Procore, Bluebeam), builds larger than the quarterly allowance, full penetration tests and on-site project work are quoted separately.

90-DAY PLAN GUARANTEE90

Every milestone has a date. We stand behind each one.

We put a date on every milestone in your 90-day plan. If we miss one for reasons within our control, your next month's seat fees are on us.

Milestones are deliverables with dates, such as "backups verified," "Prequal Pack delivered" and "first automation live." The clock pauses while we wait on your team, your approvals or a third-party vendor. One guarantee credit per 90-day plan, in place of any service-level credit for that month. Prequalification decisions belong to each GC, underwriting decisions belong to each insurer, and your company retains responsibility for its own compliance and payment approvals. Our vCISO services are advisory, and the Prequal Pack documents the controls in place at the time it is written. Full terms are in your Service Order.

Plan around your renewal

Be through Protect 30 days before your renewal application is due.

Protect finishes at day 60, so count back about 90 days from your renewal application and start then. Tell us your renewal month on the call and we set the kickoff date around it.

Built for a specific kind of subcontractor

Bid-Ready is for you if:

  • You run a DFW commercial contractor or subcontractor, in any trade.
  • You have 15 or more people on their own work computers, plus crews on phones and tablets.
  • You invoice progress payments and handle bank details over email with GCs and suppliers.
  • Your cyber insurance renewal is coming up, or a GC has sent you a security questionnaire.
  • You want one accountable partner for IT, security and the tools you run on, with a senior leader steering it.
  • Much of your crew speaks Spanish first.

Bid-Ready is a poor fit if:

  • You have fewer than 15 people on their own work computers.
  • You are choosing IT on price alone. Our price is the same for every company, and it reflects a senior team.
  • You need a guarantee that your insurer will renew you or a specific GC will approve you. We guarantee dated deliverables, and those decisions stay with the insurer and the GC.
  • You are unwilling to put field devices under management. The Kill Switch and Offboarding depend on it.

Enterprise security experience, sized for a subcontractor

28 years

Running enterprise technology and security since 1997.

Scotiabank and Walmart

An active cybersecurity engagement with Scotiabank and a past project for Walmart.

Road Solutions

A 15-person road and highway contractor running its office and field on UT-Ops since mid-2026.

Bilingual EN/ES team

Helpdesk, training and your vCISO in English and Spanish, so the crew hears it in the language they work in.

Questions sub owners ask us

How does a draw get stolen by email?

A criminal breaks into your email or a GC's, or sends from an address that looks almost right, and asks for the next payment to go to a new bank account. The request arrives right when a pay app is due, so it looks routine. The callback rule and domain authentication in the Draw Protection Lockdown are built to stop it, and they go in during week 1.

We already have an IT guy. Where does Bid-Ready fit?

Bid-Ready works alongside the person you have today. Your IT contact keeps the day-to-day relationships they know well, and we add payment protection, the security layer, the vCISO, the Fractional CIO, the questionnaire work and a 24/7 bilingual helpdesk behind them. Your IT person gains senior backup on bid days and after hours. On the call we map who handles what, so nothing falls between two desks.

Should I start with the Lockdown or go straight to the full plan?

If you want to see our work first, start with the Lockdown. If your renewal is close or a GC questionnaire is already on your desk, the full plan covers both from day one. We recommend one on the Scorecard Review call.

What is the attestation letter?

A one-page letter signed by your vCISO that describes the security controls your company has in place as of its date. You can attach it to your insurance application, include it in bid packages, and send it along with questionnaire responses. It is an advisory document, and it is updated as your controls change.

How much of my time does onboarding take?

One kickoff call and one signature from you, plus a day-90 review. Your office manager joins a few short working sessions, your AP team and PMs attend one 20-minute session on the callback rule, and your foremen run one 10-minute huddle talk a month. We fill out the questionnaires.

Start with a free 20-minute Scorecard Review call

In 20 minutes we go through your scorecard (or run it with you), rank your gaps by risk to your draws, and recommend the Lockdown or the full plan. No cost, no commitment.

Haven't taken the scorecard? Take it first

Prefer to call? +1 (817) 395-8517

ITFocus will contact you about your request. You can opt out at any time. See our privacy policy.