Right-sized oversight. Priced to match.
Three tiers, one platform — from an annual exposure snapshot to quarterly Fractional CISO guidance for your board.
Transparent, flat pricing. No per-seat surprises, no implementation fees.
Starter
Get a clear snapshot of your organization's cyber exposure profile with benchmarking against industry peers.
- External Attack Surface Scan
- Inherent Exposure Review
- Microsoft 365 Security Integration
- Peer Analysis & Benchmarking
- Executive Reporting
Core
Full risk assessment with a live dashboard, automated policy generation, and ongoing visibility into your security posture.
- Risk Dashboard
- Policy & Procedure Generator
- Insurance Readiness Check
- Vendor & Third-Party Assessments
- Remediation Tracking
- Email Support
Stewardship
AI-powered insights and executive-ready reporting to align security initiatives with executive decision-making.
- AI Insights
- Threat Intel & Monitoring
- Executive Oversight Portal
- Framework Mapping
- Custom Integrations
- Priority Chat Support
Every capability, side by side.
The full matrix across Starter, Core, and Stewardship — so you can pick the right tier with confidence.
| Capability | Starter | Core | Stewardship |
|---|---|---|---|
Governance | |||
| Risk Dashboard | |||
| Executive Reporting | |||
| Automated Policy & Procedure Generator | |||
| Executive Oversight Portal | |||
| Fractional CISO Advisory— Add-on Module | + | + | |
Risk Management | |||
| External Attack Surface Scan | |||
| Inherent Exposure Review | |||
| Cyber Risk Assessment | |||
| Peer Analysis & Benchmarking | |||
| AI Insights— Future | |||
| Threat Intel & Monitoring— Future | |||
Compliance | |||
| Cyber Insurance Readiness | |||
| Pen Testing as a Service— Add-on Module POWERED BY CLAUDE OPUS 4.8 · ANTHROPIC CYBER VERIFICATION PROGRAM | + | + | |
| Modules — SOC 2, CMMC, CIS v8.1— New | |||
| Vendor & Third-Party Assessments | |||
Integrations | |||
| ProPublica Nonprofit Explorer API | |||
| Microsoft 365 Security Integration | |||
| Custom Integrations | |||
Platform & Scale | |||
| Dedicated Account Manager | |||
| Support Level | Community | Priority Chat | |
Pen testing, augmented by frontier models.
Pen testing (penetration testing) is a controlled, simulated cyberattack on your systems — run by ethical hackers to find weaknesses before real attackers do.
Our hybrid pen testing service combines certified offensive security engineers with Claude Opus 4.8 — the latest frontier model from Anthropic . As an officially enrolled participant in the 
Cyber Verification Program, we run multi-tier engagements with model-assisted reconnaissance, exploit reasoning, and reporting.
Hybrid delivery
Human pentesters paired with model-assisted analysis at every stage of the engagement.
Tiered access
Black-box, gray-box, and white-box engagement modes — scoped to your environment and goals.
Verified program
Officially enrolled in the Cyber Verification Program for responsible offensive AI use.
Need hands-on security guidance?
Partnership pairs the platform with a deeper operating cadence — executive briefings, policy work, and audit support tailored to your organization. A Fractional CISO is available as a retainer add-on layered on top.
Partnership engagements are scoped individually. They build on everything in Stewardship and are priced on a retainer basis to match the depth of involvement you need.
Talk to us about a Partnership engagementIT Team Empowerment
Strategic coaching that strengthens internal IT managers and builds long-term capability.
Executive Alignment
Regular briefings and clear communication that translate cyber exposure into business terms.
Senior Advisor Access
On-demand senior expertise for strategy and hands-on support. Fractional CISO retainer available as an add-on.
Predictable Cost
Enterprise-grade leadership delivered at a fraction of the cost of a full-time executive.
Continuous Exposure Oversight
Regular reviews of exposures and trends, with TitanDef surfacing what matters most.
Insurance Readiness
Ensure your organization meets core underwriting requirements and stays policy-legible.
Incident Preparedness
Playbooks and tabletop exercises that keep IT and leadership ready to respond with confidence.
Policy & Governance Development
Right-sized policies and governance standards, tracked and maintained through TitanDef.
Don't have a security leader in-house? Add a Fractional CISO.
The platform runs without one. If you'd rather not staff the operator role internally, a Fractional CISO is available as a separate retainer — layered onto any tier.
Talk to us about the add-onWhat's included in the retainer↓
Program ownership
A named senior security leader accountable for your security program — its roadmap, its KPIs, and its outcomes.
Board & executive reporting
Quarterly board materials and executive briefings that translate exposure, controls, and incidents into business terms.
Audit, regulator & insurer liaison
Represents your security posture in front of auditors, regulators, and cyber insurance underwriters. Owns evidence requests end-to-end.
Third-party & contract review
Reviews MSAs, DPAs, and security questionnaires. Flags language that shifts cyber liability onto your organization.
Incident response leadership
Leads response when an incident occurs — coordinating internal IT, legal, communications, and external forensics through containment and recovery.
Security hiring & tooling decisions
Advises on hiring security staff, selecting MSPs, and evaluating tools so investment matches your exposure profile.
See your indicative exposure in two clicks.
Pick who you are and what you hold. The reading updates as you go. Nothing is stored and nothing is sent.
Pick your organization in step 1 and the reading appears instantly. Adjust the rest to see it move.
Indicative only. The Inherent Exposure Review is a 20-minute guided session that produces the scored, defensible profile.
Common questions.
See what attackers see. Free for nonprofits.
Qualified 501(c)(3) nonprofits start free. All other organizations start at $2,499/year. Upgrade as you grow.