We scope every engagement. Here's how the number is built.
No two boundaries cost the same, so we don't publish a price that would be wrong for you. What we will do — before you commit to anything — is show you exactly what drives your number and give you a fixed quote.
Four things decide what compliance costs you.
How much of your environment touches CUI. A tight enclave can cut the total by half versus certifying everything.
CUI Basic sits on a standard baseline. ITAR and export-controlled data add US-person controls, which raise the floor.
Your current SPRS score. The more controls already in place, the less remediation the build carries.
Building where your workloads already live avoids a second estate. Re-platforming is the most expensive path.
Three engagements, priced independently.
DoD estimates a Level 2 assessment cycle near $105,000 for a small business — the triennial assessment plus annual affirmations.
In our experience, that assessment fee is only about a quarter of the real total. The other three-quarters is the build, the tooling, and the run — the work most firms underestimate. We price all of it up front so there are no surprises after the contract is signed.
Want a real number? It starts with a readiness check.
Ninety minutes gets you a scoped, fixed quote for exactly what your boundary needs.