Harbor Artificial Contact
Menu Close

Retainers · S-RET-4

Fractional Security Lead

Part-time security lead, no certified CISO claim.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Compare 3 tiers Book a call

Pricing

Compare tiers

Retainers are prepaid monthly.

Starter

$1,200 /mo

Hours. 8 hours

Scope. 8 h/month

Deliverables

  • Monthly risk register update
  • 1 call

Turnaround. monthly

Subscribe ($1,200 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Standard

$2,200 /mo

Hours. 16 hours

Scope. 16 h/month

Deliverables

  • Starter items
  • vendor reviews
  • board/owner report

Turnaround. monthly

Subscribe ($2,200 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Advanced

$3,900 /mo

Hours. 30 hours

Scope. 30 h/month

Deliverables

  • Standard items
  • program roadmap
  • questionnaire handling

Turnaround. monthly

Subscribe ($3,900 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Scope

Deliverables, limits, and standards

Standards mapping

NIST CSF 2.0; NIST AI RMF for AI-using clients.

Exclusions

  • Incident response
  • signing attestations
  • on-call

Acceptance

Monthly report states hours used and decisions logged.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Book a call All security services

More in Retainers

Not sure this tier is the one?

Email [email protected] with the system you want reviewed. We will point at a tier in this catalog, or tell you if the work is outside it.

Book a call All security services