Clear cybersecurity starting points

Cybersecurity pricing for small businesses and professional practices

Clear, fixed-scope starting points without scare tactics, vague retainers, or bloated MSP contracts.

Start with the $199 Website, Email & Domain Security Snapshot Book a free 15-minute call

Based in New York, serving businesses remotely across the United States and internationally where appropriate.

Buyer path

Start small, then move only as far as the situation needs.

The main ladder is an automated public preview, human-verified Snapshot, one focused module, broader Remediation Sprint, then External Security Watch when recurring oversight makes sense.

Step 0

Free Website, Email & Domain Check

Free

An automated preview of publicly observable website, email, and domain signals.

Best for: Owners who want a quick initial signal before paying for human verification.
Includes: Public website, email, and domain signals only
No human review, PDF report, prioritization, implementation plan, or overall cyber-risk rating
No active exploitation, port scanning, credentials, or private access

Run Free Website, Email & Domain Check View sample report

Public-signal check only. It is not a penetration test, malware scan, exploit test, or breach detection service.

Recommended first paid step

Website, Email & Domain Security Snapshot

$199

Human verification of public website, email, and domain controls for one business environment.

Best for: Owners who need a prioritized starting point before hiring IT or security help.
Includes: One business, one primary domain, and one website/email environment
Prioritized report, fix order, and provider-ready instructions
First human-reviewed PDF draft within 24 hours after payment is confirmed and required intake is complete. No implementation, exploitation, or compliance certification.

Start the Snapshot View sample report

One defined module

Focused Security Cleanup

$750

Fixed-price implementation for one Email Trust Setup or Website Trust Cleanup module.

Best for: Owners with a small, known public-facing issue that fits one hard scope.
Includes: One business, one primary domain, one environment, and one implementation module
Email Trust Setup: one domain, up to three approved senders, SPF/DKIM/DMARC where supported
Website Trust Cleanup: one website and up to three pre-agreed HTTPS, redirect, header, form, or DNS fixes
One provider-coordination round, one recheck, and before/after handoff notes

Ask about focused cleanup View Cleanup

Broader remediation

Business Security Remediation Sprint

From $1,500

Broader fixed-scope implementation when the work exceeds one focused module.

Best for: Businesses facing authenticated workspace work, multiple systems or providers, ownership transfers, networks, backups, or significant coordination.
Includes: Two or more implementation modules, or Microsoft 365 / Google Workspace authenticated work
MFA, administrator, recovery, account, ownership, migration, backup, Wi-Fi, or network work where scoped
Completed fix log, remaining constraints, and provider/admin handoff
Typical broader engagements: $2,500-$5,000

Ask about cleanup work View Sprint

Recurring external oversight

External Security Watch

$99/month or From $499/month

One page with an automated tier and a separate human-validated external oversight tier.

Best for: Owners with an agreed baseline who need recurring public-signal visibility without hiring a full MSP.
Includes: Automated External Monitor - $99/month for uptime, key pages, SSL/TLS expiration, DNS availability, alerts, and status summary
Human External Security Watch - From $499/month for monthly drift validation, briefing, evidence history, and one provider escalation note
Quarterly owner/provider review and written business-hours response commitment in the human tier
No SOC, MDR, real-time incident response, or unlimited implementation

Confirm Watch availability View External Security Watch

For paid services, scope and any variable price are confirmed before work starts. Do not send passwords, private keys, recovery codes, or sensitive customer data through public forms.

Supporting paths

Baselines, evidence support, remediation modules, and website projects stay secondary.

Use these only when the trigger is specific. HIPAA-aware website, email, domain, workspace, and vendor-handoff support may be included where relevant; it is not a HIPAA Security Risk Analysis, legal advice, compliance certification, or review of all systems containing ePHI.

Practice Security Baseline

From $1,250

View baseline

One authorized Microsoft 365 or Google Workspace tenant, one primary domain, up to 25 active users, evidence index, scorecard, and prioritized 30/60/90-day plan. Implementation moves into a Remediation Sprint.

Security Evidence & Questionnaire Support

From $750 / From $1,500

Compare evidence support

Cyber Insurance Evidence Review covers an application or renewal. Client/Vendor Security Questionnaire Support covers one non-insurance due-diligence questionnaire with written question and evidence-source caps plus one revision.

Remediation modules and use cases

Scoped within a Sprint or custom project

View Wi-Fi & DNS scope

Secure Wi-Fi & DNS work and website/vendor takeover cleanup remain available as Remediation Sprint modules or carefully scoped partner-delivered work.

Website and technology projects

From $2,500

View website projects

Secure Website Redesign / Rebuild and new-business setup remain secondary project paths when the underlying website, domain, email, and ownership foundation needs replacement.

Specialized assurance

Authorized Web Application Penetration Test

Point-in-time, authorized testing of one agreed custom application or portal and its primary APIs, with an executive and technical report, findings review, and focused retest. This is not a required step in the main buyer ladder.

Final scope and price depend on the agreed targets, user roles, APIs, environments, and testing constraints.

No direct checkout. Qualification, verified scope, written authorization, Rules of Engagement, and exact pricing come before payment or testing.

From $4,500

View penetration test details Request a scoping review

Separate personal service line

Personal Cybersecurity pricing

These services are for individuals and families. They are separate from the business Snapshot and business-service ladder above.

Personal Cyber Lockdown

$299

One person who wants to strengthen important accounts before a compromise happens.

View details Request Personal Cyber Lockdown

Family Cyber Safety Setup

From $499

Parents and households that need a shared plan across people, accounts, and devices.

View details Request Family Cyber Safety Setup

Account Compromise Triage

From $499

A person who is worried that an account may already have suspicious or unauthorized activity.

View details Request Account Compromise Triage

Focused add-ons

Password Manager + MFA Setup

Focused guided setup for a password manager, stronger unique passwords, authenticator-app MFA, and customer-controlled backup-code organization.

From $249

Request Password Manager + MFA Setup

Credit Freeze + Fraud Alert Guidance

A guided checklist for customer-controlled credit freezes, fraud alerts, credit-report review, identity-theft prevention steps, and official reporting paths.

From $149

Request Credit Freeze + Fraud Alert Guidance

Compare Personal Cybersecurity services Send personal intake

Pricing FAQ

Practical answers before you choose.

Why start with the Snapshot?

The $199 Website, Email & Domain Security Snapshot gives you a plain-English baseline before you buy cleanup, watch, questionnaire, or insurance-readiness work. It keeps the next step practical instead of guessing.

Are you an MSP?

No. CyberBit provides scoped cybersecurity review, cleanup, readiness, and oversight. We do not sell unlimited helpdesk support, device management, or broad MSP contracts.

Do you replace my IT provider?

No. The work is designed to give owners, vendors, and IT providers a clearer fix order, cleaner evidence, and IT-ready handoff notes.

Is this HIPAA compliance?

No. CyberBit can support HIPAA Security Rule readiness, security risk analysis preparation, BAA hygiene review, and documentation support, but this is not legal advice or compliance certification.

Why are prices lower than large firms?

The offers are scoped for small professional practices and public-facing business systems. Clear boundaries keep the work focused and avoid enterprise consulting overhead.

What happens after I buy?

First human-reviewed PDF draft within 24 hours after payment is confirmed and required intake is complete. Larger work starts with scoped access, ownership, and priority confirmation.

What if we already have Microsoft 365 or Google Workspace?

Use the Practice Security Baseline for an authorized evidence-based review of one Microsoft 365 or Google Workspace tenant, one primary domain, and up to 25 active users.

Can you help with insurance or vendor questionnaires?

Yes. Cyber Insurance Evidence Review covers applications and renewals. Client/Vendor Security Questionnaire Support covers non-insurance due-diligence questionnaires. Neither package guarantees approval.

When does a web application penetration test make sense?

Use it for an authorized custom application, portal, SaaS product, e-commerce application, or primary API that needs active point-in-time testing. Brochure sites generally remain on the Snapshot and Cleanup path. Pricing starts at $4,500 after qualification and scope review.

Which option should I choose first?

If you are unsure, start with the Website, Email & Domain Security Snapshot. If a deadline, questionnaire, insurer, or known cleanup problem is already driving the request, book a free call or choose the matching service path.