Harbor Artificial Contact
Menu Close

Retainers · S-RET-2

Dependency & Vulnerability Monitoring

New dependency risks triaged for you.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Compare 3 tiers Book a call

Pricing

Compare tiers

Retainers are prepaid monthly.

Starter

$350 /mo

Hours. 2.5 hours

Scope. ≤5 repos, monthly digest

Deliverables

  • Triage digest

Turnaround. monthly

Subscribe ($350 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Standard

$700 /mo

Hours. 5 hours

Scope. ≤15 repos, twice monthly

Deliverables

  • Digest
  • upgrade PRs for Critical

Turnaround. twice monthly

Subscribe ($700 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Advanced

$1,300 /mo

Hours. 10 hours

Scope. ≤40 repos, weekly

Deliverables

  • Digest
  • upgrade PRs for Critical/High

Turnaround. weekly

Subscribe ($1,300 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Scope

Deliverables, limits, and standards

Standards mapping

OWASP Top 10:2025 A03; NIST SSDF RV.1; NIST CSF 2.0 ID.RA.

Exclusions

  • Guaranteed patch times
  • runtime monitoring

Acceptance

Each digest lists new advisories, decision and owner.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Book a call All security services

More in Retainers

Not sure this tier is the one?

Email [email protected] with the system you want reviewed. We will point at a tier in this catalog, or tell you if the work is outside it.

Book a call All security services