Four situations bring people here, and each one needs a different first step. Pick the one that matches, and you will know what happens next before you call. If you are already in the middle of an incident, skip to the phone number: 703-486-0200.
If You Have an Active Incident
Ransomware, a compromised mailbox, an employee’s laptop behaving strangely, or money that moved to the wrong account. Speed matters, and so does not making it worse.
Call 703-486-0200. After-hours and emergency work is billed at $275 per hour, published in the service menu.
While you wait, preserve three things:
- Logs: email gateway, identity provider sign-ins, VPN, firewall, and endpoint telemetry. Export them somewhere the attacker does not control.
- Disk images: image affected machines before anyone rebuilds or reinstalls. Do not wipe to “get everyone working again”.
- Email: the original phishing message, mailbox rules, and forwarding settings. These are the cheapest persistence an attacker gets.
Then read incident response and digital forensics for what the engagement looks like.
If You Need an Assessment
You want to know what is exposed, what it would cost to fix, and whether your current IT provider is covering it. An independent assessment answers that with evidence rather than opinion.
Start with the free cybersecurity self-assessment if you want a baseline in five minutes. For the independent version, see cybersecurity assessments: devices, servers and cloud, network, physical security, and human security, reported with a prioritized remediation plan.
If You Need to Meet a Compliance Requirement
A customer sent a security questionnaire, an insurer asked for MFA and tested backups, a contract names NIST 800-171, or a regulator expects a HIPAA risk analysis. Compliance work starts with scope and evidence.
Read the compliance guide for who each framework applies to, then compliance and gap analysis for the engagement itself. We are not a certification body: ISO 27001 audits are performed by accredited registrars, PCI DSS on-site assessments may require a QSA, and we do not provide legal advice.
If You Want to Use AI Without Adding Risk
You have a use case in mind, or staff already using tools nobody approved, and you want the value without the data leak. The order matters: policy and data rules first, then one bounded pilot, then scale.
Run the AI readiness check, read the AI for business guide, and see AI consulting and AI security for the work itself.
What Happens Next
- We read your message or take your call and reply within one business day.
- If it is a fit, we schedule a free initial consultation, up to one hour, to scope the problem.
- You get a written scope and estimate before any billable work begins.
No retainer, no monthly managed-services contract, and no obligation to continue after the first engagement.
Pricing and Response
Rates are published, not negotiated per client: $200 per hour per consultant during regular hours (weekdays, 9:00 am to 5:00 pm ET, excluding federal holidays), and $275 per hour after hours, on weekends, on holidays, or in any emergency. Time is billed in half-hour increments, and emergencies carry a one-hour minimum remotely and a two-hour minimum on site.
Active incidents are prioritized, including outside business hours. Training has separate per-attendee rates, all listed in the service menu.
Call 703-486-0200 Schedule a free consultation