$6,500/mo in 90-day cycles. Assessment first, always. At the end of every cycle you scale, continue, or stop. We make that question easy to ask.
Two 90-minute working sessions each month. Three hours of asynchronous review with a two-business-day turnaround. A quarterly re-score of your baseline so progress is a number, not a feeling. No rollover. No padding. The meter is the point.
What we work on. Roadmap oversight. Vendor decisions and build-versus-buy calls, scored and recommended. Secure deployment guidance as your AI use cases move from shadow mode to supervised to production. The frontline risk view a company your size cannot staff for.
Your incident command platform is included. IR-OS deploys in your first cycle, so the worst day has a system of record before it arrives.
We do not attend your staff meetings. We do not sit in your org chart. We do not do fractional titles. We advise and evaluate. You decide and execute. If a decision needs more room than the meter allows, there is a session pack for that. Nothing expands silently.
We will also never tell you to rip out a system that works. You spent years and real money on your stack. AI and security both go on top of it.
Every 90 days we re-score, show you the delta, and ask directly whether to scale, continue, or stop. Stopping is a clean exit with your roadmap, your scores, and IR-OS continuing on subscription if you want it. Clean exits refer. That is the model working, not failing.
A full-time CISO runs $250,000 to $500,000 a year all-in, and an embedded chief AI officer $180,000 or more. The retainer is $78,000 a year for both judgments plus the incident command platform. You are not paying for a person. You are paying for the decisions.
Nothing expands silently. When more is needed, the price already exists.
The retainer is never sold cold.