Request a proposal
Free Assessment
Cyber Risk Management
Risk Assessments
Security Posture AssessmentFreeCyber Risk Scoring GuideFreeCyber Risk Scorecard + Mitigation Plan$997Security Risk Assessment$997
Technology & AI Risk
Emerging Tech Risk RadarFreeShadow AI Discovery ChecklistFreeAI Acceptable Use Policy Pack$300Emerging Technology Risk Playbook$300AI Attack Surface Report$300Technology Risk Monitoring Retainer$300/moTechnology Risk Management Assessment$497Enterprise Security Modernization Roadmap$4,997
Vulnerability Management
Free Dark Web Scan + Security AuditFreeVulnerability Scan Report$300
Cyber Security Solutions
Threat Intelligence
Free Training: Attacker Threat BriefingFreeDefender Circle$300/mo · $397/yrMulti-Modal Threat Intelligence Program$3,500/mo
Email Security
Phishing and Social Engineering Audit$1,000
Cloud & Data Security
Data Security Governance Starter FrameworkFreeRealtime Adaptive Decisioning$12,500
Cyber Security Operations
Managed Detection & Response
AI-MDR Essentials$597/moAI-MDR Complete$1,197/moAI-Powered MDR Security Plans$397–$2,497/mo
Incident Response
Ransomware Response PlaybookFreeRansomware Readiness ChecklistFreeTier 3 Managed Retainer$6,500/moRansomware Containment Readiness$2,997
AI Threat Detection
AI Threat Exposure AssessmentFreeAI Traffic Anomaly Report$300
Cyber Security Defenses
Endpoint Security
Endpoint Security Scorecard$300Endpoint Security Servicesfrom $497Managed Endpoint Security Plans$300–$797/mo
Application Security
Application Security Pack$300AI Red Team Prompt Injection Kit$300
Network & Infrastructure Security
IoT Attack Surface Report$300Application Dependency Mapping$2,497Microsegmentation Design & Rollout$6,997
Compliance Services
HIPAA Compliance
HIPAA Risk Assessment WorksheetFreeHIPAA Compliance Package$12,500
Compliance Readiness
Compliance Readiness Assessment$997Security Compliance Suite$2,497/moFractional CISO Program$3,500/mo
Vendor & Third-Party Risk
Trust Center Care Plan$300/moCybersecurity Trust Center Build$4,997
HomeAboutBlogContactRequest a proposal

Compliance Readiness Assessment

StoneRock Cyber · Paid Assessment

Compliance Readiness Assessment

A control-by-control gap register across SOC 2, HIPAA, CMMC L2, ISO 27001 and state privacy law — 25 control areas scored with you in a 45-minute walkthrough call, with a prioritized 180-day remediation roadmap.

Start the assessment — $997

One-time payment of $997 · Secure checkout by Stripe · Assessment PDF delivered immediately after payment

Who this is for

  • ✓Small and mid-size businesses being asked for SOC 2, HIPAA, CMMC or ISO 27001 evidence by clients, partners or insurers
  • ✓Teams that need a clear picture of where they stand before committing to a formal audit
  • ✓Owners who want compliance gaps ranked by the cost of getting them wrong, not a pass/fail verdict

What’s included

  • ✓Control-by-control gap register — 25 control areas across SOC 2 Type II, HIPAA Security Rule, CMMC L2, ISO 27001 Annex A and state privacy law
  • ✓Scored readiness bands — each control scored 0 / 1 / 2, with framework subtotals and an overall score out of 50
  • ✓45-minute walkthrough call — we score the register together and identify your lowest-scoring framework
  • ✓Prioritized remediation roadmap — a four-phase, 180-day sequence from eliminating critical gaps to pursuing the certificate or attestation
  • ✓Fee credit — 100% of the assessment fee is credited toward the Enterprise Compliance Audit Program if you start within 14 days of your walkthrough call

How it works

  1. Pay securely through Stripe. Your assessment PDF is available for download straight from the confirmation page and your receipt is emailed automatically.
  2. Reply to your receipt to schedule the 45-minute walkthrough call; we score the 25 control areas with you.
  3. You leave with a scored gap register, your lowest-scoring framework identified, and a prioritized remediation roadmap.

Start the assessment — $997

This assessment is general compliance-education and advisory content, not legal, regulatory or professional advice, and it is not a certified audit or attestation. Framework requirements vary by organization, contract scope and jurisdiction.

Editorial & AI Disclosure