A written agreement defines the engagement.
Website descriptions and prices are starting points for discussion, not an executed service agreement. Work begins only after both parties agree in writing on the scope, fees, coverage hours, response targets, responsibilities, and authorization.
Published monthly plans
Essential starts at $1,250 per month for up to 10 users and 10 workstations. Managed starts at $2,500 for up to 25. Managed Plus starts at $4,000 for up to 50. Each plan covers one Microsoft 365 or Google Workspace tenant. All prices are in US dollars.
One-time onboarding starts at $1,250, $2,000, and $3,000 respectively. Third-party licenses, backup storage, taxes, and work outside the agreed scope are separate. Website oversight is an optional add-on from $300 per site per month; website setup is separately quoted.
Routine reviews and remediation
The routine activities listed in each plan are included within the agreed scope. Monthly remediation allowances are up to 2 hours for Essential, 4 total hours for Managed, and 8 total hours for Managed Plus. They require scheduling, do not roll over, and do not create unlimited project support.
Coverage and exclusions
Published plans provide business-hours service, with precise hours and response targets established in the agreement. They do not include a staffed 24/7 security operations center, unlimited general IT helpdesk, server administration, penetration testing, breach remediation, or unlimited emergency recovery.
After-hours monitoring, specialist assessments, substantial projects, or third-party services require separate scope and confirmation of delivery capacity.
Authorization and customer responsibilities
Customers must have authority over the systems placed in scope. Assessments, changes, containment actions, and access are limited to written authorization. Customers retain responsibility for business decisions, approval of changes, and obligations that are not explicitly assigned to RedSocCyber.
Risk and professional advice
Security work can reduce exposure and improve readiness; it does not eliminate all risk or guarantee that an incident will not occur. Services do not by themselves certify legal compliance. Seek advice appropriate to your industry and obligations.