Pricing
Triage pricing. Fixed, quoted in 4 hours.
Stabilization fee by secrets in the blast radius
Graduated like a tax bracket: each band's rate applies only to the secrets inside it. The blast radius is usually a small slice of the estate: a company with 100,000 secrets might have 300 in the blast radius, a $45,000 stabilization.
| Secrets in blast radius | Rate per secret in band | Fee at top of band | Typical duration |
|---|---|---|---|
| 1–25 | $10,000 flat (the retainer covers it) | $10,000 | 1–2 days |
| 26–100 | $200 | $25,000 | 2–5 days |
| 101–500 | $100 | $65,000 | 4–10 days |
| 501–2,000 | $40 | $125,000 | 1–3 weeks |
| 2,001–10,000 | $15 | $245,000 | 2–5 weeks |
| 10,001–100,000 | $4 | $605,000 | Phased plan |
| 100,000+ | Quoted | — | Phased plan |
Counted by the rule above: one usable credential = one secret.
Estimated fee
$45,000
Typical duration
4–10 days
Estimate only. Your fixed quote comes after size-up, within 4 hours.
How it runs
01
Retainer
A $10,000 retainer mobilizes the team now and is credited to the stabilization fee.
02
Size-up
Within 4 hours: size-up and triage, a written secret count and triage level.
03
Quote
A fixed quote. Approve it and pay 50% (50% when stabilized), or stand down.
04
Stabilize
We stabilize and deliver the after-action report. Extra scope only with written approval, at $375/hour.
A LEVEL 1 · RED incident (admin compromise or data accessed) adds forensic investigation at $375/hour with a not-to-exceed estimate.
Stabilized means
- DoneEvery compromised credential revoked or rotated
- DoneAttacker sessions, backdoor users and persistence removed
- DoneGPU and AI-token spend back to baseline
- DoneNo attacker activity for 72 hours
- DoneAfter-action report delivered
Questions
Not sure if a key is being used?
The free compromise assessment checks with read-only access and tells you how many secrets are exposed.
Request an assessment