Request a proposal
Free Assessment
Cyber Risk Management
Risk Assessments
Security Posture AssessmentFreeCyber Risk Scoring GuideFreeCyber Risk Scorecard + Mitigation Plan$997Security Risk Assessment$997
Technology & AI Risk
Emerging Tech Risk RadarFreeShadow AI Discovery ChecklistFreeAI Acceptable Use Policy Pack$300Emerging Technology Risk Playbook$300AI Attack Surface Report$300Technology Risk Monitoring Retainer$300/moTechnology Risk Management Assessment$497Enterprise Security Modernization Roadmap$4,997
Vulnerability Management
Free Dark Web Scan + Security AuditFreeVulnerability Scan Report$300
Cyber Security Solutions
Threat Intelligence
Free Training: Attacker Threat BriefingFreeDefender Circle$300/mo · $397/yrMulti-Modal Threat Intelligence Program$3,500/mo
Email Security
Phishing and Social Engineering Audit$1,000
Cloud & Data Security
Data Security Governance Starter FrameworkFreeRealtime Adaptive Decisioning$12,500
Cyber Security Operations
Managed Detection & Response
AI-MDR Essentials$597/moAI-MDR Complete$1,197/moAI-Powered MDR Security Plans$397–$2,497/mo
Incident Response
Ransomware Response PlaybookFreeRansomware Readiness ChecklistFreeTier 3 Managed Retainer$6,500/moRansomware Containment Readiness$2,997
AI Threat Detection
AI Threat Exposure AssessmentFreeAI Traffic Anomaly Report$300
Cyber Security Defenses
Endpoint Security
Endpoint Security Scorecard$300Endpoint Security Servicesfrom $497Managed Endpoint Security Plans$300–$797/mo
Application Security
Application Security Pack$300AI Red Team Prompt Injection Kit$300
Network & Infrastructure Security
IoT Attack Surface Report$300Application Dependency Mapping$2,497Microsegmentation Design & Rollout$6,997
Compliance Services
HIPAA Compliance
HIPAA Risk Assessment WorksheetFreeHIPAA Compliance Package$12,500
Compliance Readiness
Compliance Readiness Assessment$997Security Compliance Suite$2,497/moFractional CISO Program$3,500/mo
Vendor & Third-Party Risk
Trust Center Care Plan$300/moCybersecurity Trust Center Build$4,997
HomeAboutBlogContactRequest a proposal

StoneRock Cyber · Compliance Readiness

Fractional CISO Program

A fractional CISO who owns your security and compliance readiness program — policy, risk, audit preparation and leadership reporting — without a full-time hire.

$3,500/month

Subscribe — $3,500/month

Secure checkout by Stripe · Billed monthly · We email you after checkout to schedule onboarding

Who it’s for

Growing organizations facing customer security reviews, regulatory expectations or audit preparation without a dedicated security leader.

What’s included

  • Security program leadership — ownership of security strategy, priorities and risk decisions
  • Compliance readiness — preparation for the frameworks your customers and regulators expect
  • Policy & governance — security policies, standards and governance cadence
  • Customer security reviews — support answering security questionnaires and customer due diligence
  • Board & leadership reporting — risk and program reporting your leadership can act on
  • Standing cadence — regular working sessions with your leadership and IT teams

How it works

Subscribe
Monthly billing through Stripe.
Kickoff
We learn your environment, obligations and priorities.
Program plan
We agree a security and compliance readiness plan.
Ongoing leadership
Standing sessions, reporting and audit preparation.

What we need from you

An executive sponsor and access to the people and documentation behind your security program.

Questions

How is this billed?

$3,500 per month, billed monthly through Stripe.

Does this certify us for a framework?

No. The program prepares you for audits and assessments, which are performed by independent third parties.

How much time is included?

The working cadence and availability are agreed at kickoff and written into your engagement terms.

Get started

$3,500/month

Subscribe — $3,500/month

Related

Application Dependency Mapping

$2,497 one-time

A clear map of how your applications

View details

Ransomware Containment Readiness

$2,997 one-time

An engagement that tests and improves how quickly you can stop ransomware from spreading

View details

Service descriptions reflect general industry practice. Nothing on this page is a compliance determination, a certification, or a guarantee of any outcome. Final scope is confirmed with you before work begins.

Editorial & AI Disclosure