Start with your 90‑Day Blueprint
In 10 business days our team reviews your technology, fixes the five most urgent gaps, and hands you a plan and a fixed quote. You keep everything whether or not you sign.
What you get
- A risk review of your systems, security, vendors and licenses, in plain language
- Five quick fixes done before we leave: secure logins on every admin account, old accounts closed, a backup test-restored, email protection monitoring on, and a written rule for bank-detail changes
- A check for company passwords leaked online, and a scan of what an attacker sees from outside (a snapshot of what we find that week)
- Your cyber insurance renewal answers drafted
- A cut list of unused licenses and duplicate tools, with the monthly dollar total
- Your top three automations and the hours each would save
- A one-page security scorecard you can show your bank, insurer or board, and a one-page incident plan
- Your dated 90-day plan and fixed quote, presented to you and your leadership team
- 30 days of email questions to your vCISO about the findings
Delivered in 10 business days, or your money back.
A consultant-led security risk assessment alone typically costs $5,000 to $15,000. The Blueprint includes one, plus the fixes, the scans and your plan.
How the 10 days work
- Day 1
Kickoff and access
A short kickoff call. You give us admin access, and we book 30-minute interviews with two or three of your people.
- Days 2-5
Review and scans
We review your systems, security, vendors and licenses, check for leaked company passwords, scan what an attacker sees from outside, and map where your team loses hours.
- Days 6-8
Fixes and drafts
With your written approval we make the five quick fixes, draft your insurance renewal answers, and prepare your scorecard and incident plan.
- Days 9-10
Your plan
We present your dated 90-day plan and fixed quote to you and your leadership team in a 60-minute meeting.
For 30 days after, email your vCISO any questions about the findings.
Questions about the Blueprint
What access do you need?
Admin access to your email platform (Microsoft 365 or Google Workspace), your main systems and your network, plus 30-minute interviews with two or three people. The 10 business days start when we have access.
Will you change anything in our systems?
Only the five quick fixes, and only after you approve them in a short scope letter. Everything else we find goes into your 90-day plan.
What if you find an active breach?
We stop, tell you the same day, and quote incident response separately.
Is the outside scan a penetration test?
No. It is a snapshot of what an attacker can see from outside during that week. Full penetration tests are quoted separately.
Do we have to sign up for UT-Ops afterward?
No. You keep the report, the fixes and the plan whether or not you sign. If you do sign, onboarding starts the week you sign, because the Blueprint is the plan UT-Ops runs.
What if you're late?
If we don't deliver within 10 business days of receiving access, you get the full fee back.
We have 100 or more people. Can we still do it?
Yes. Companies with 100 or more people on email get a quote on the fit call.
Find out where you stand in 10 business days.
Book a 20-minute fit call with a senior engineer. We will tell you whether the Blueprint fits.
Assessment price ranges from Monmouth Cyber (2026), IBSSCORP (2026) and VikingCloud (2026).