Pricing
Our pricing is published because you should be able to budget this without a sales call. Compare it to an IGA platform license, or to what a full-time identity administrator costs.
Estimate
Runs in your browser. Nothing you enter is sent anywhere or recorded. The tables further down are the source of truth.
Figures exclude Hawaii General Excise Tax, which is added as a separate line item. They are estimates subject to scoping.
Three tiers, one feature set
Tiers are set by organization size. The audit is the same audit at every tier. What changes is the included hour bucket, drift detection frequency, certification cadence, readout length, and response commitment.
| Tier 1 | Tier 2 | Tier 3 | |
|---|---|---|---|
| Drift detection | Weekly | Daily | Daily |
| Access certification | Annual | Semi-annual | Quarterly |
| Readout | Monthly, 30 min | Monthly, 60 min | Monthly, 60 min, plus a quarterly executive review |
| Response commitment1 | 2 business days | 1 business day | 4 business hours |
1 The response commitment covers governance requests only. It excludes incident response, which is out of scope.
Monthly retainer
12-month term. Monthly audit cycle, drift detection between cycles, access certification campaigns, joiner-mover-leaver runbook maintenance, evidence packaging, and the included hour bucket below.
| Tier | 1 tenant | 2 tenants | 3 tenants | Each additional |
|---|---|---|---|---|
| Tier 1 · 0–149 users | 1,800 | 2,600 | 3,200 | +550 |
| Tier 2 · 150–500 users | 3,500 | 5,000 | 6,100 | +1,000 |
| Tier 3 · 501+ users | 6,500 | 9,200 | 11,200 | +1,800 |
Tier 3 base covers 501–1,000 users. Above 1,000 users, add $900 per month for each additional 250 users, rounding partial blocks up.
Retainer onboarding
One-time, charged at signature.
| Tier | 1 tenant | 2 tenants | 3 tenants | Each additional |
|---|---|---|---|---|
| Tier 1 · 0–149 users | 3,500 | 4,800 | 5,800 | +900 |
| Tier 2 · 150–500 users | 6,500 | 9,000 | 10,800 | +1,800 |
| Tier 3 · 501+ users | 12,000 | 16,500 | 19,800 | +3,200 |
Included consult and remediation hours
A single combined bucket per month covering both consulting and remediation work. No rollover. Overage bills at the standard rate in 15-minute increments.
| Tier | 1 tenant | 2 tenants | 3 tenants | Each additional |
|---|---|---|---|---|
| Tier 1 · 0–149 users | 4 | 6 | 8 | +2 |
| Tier 2 · 150–500 users | 8 | 11 | 14 | +3 |
| Tier 3 · 501+ users | 14 | 18 | 22 | +4 |
One-time IAM audit
Fixed price, roughly two weeks, no ongoing commitment. The full deliverable set, delivered as a live working session.
if a retainer is signed within 60 days. Nothing paid for the audit is lost by continuing.
| Tier | 1 tenant | 2 tenants | 3 tenants | Each additional |
|---|---|---|---|---|
| Tier 1 · 0–149 users | 2,750 | 3,900 | 4,800 | +800 |
| Tier 2 · 150–500 users | 5,500 | 7,600 | 9,200 | +1,600 |
| Tier 3 · 501+ users | 9,500 | 13,000 | 15,800 | +2,800 |
On-premises Active Directory add-on
Per forest. Covers AD account and group hygiene, Entra Connect sync health and scoping, hybrid join posture, privileged AD group membership, stale objects, and delegation review.
| Tier | Monthly | One-time discovery |
|---|---|---|
| Tier 1 | 450 | 1,200 |
| Tier 2 | 800 | 2,000 |
| Tier 3 | 1,400 | 3,500 |
Rate card
For work outside the included hours, and for fixed-bid projects.
| Standard consulting and project work | 225/hr |
|---|---|
| After-hours, weekend, holiday | 325/hr |
| Emergency identity support2 (4-hour minimum) | 375/hr |
| Fixed-bid projects | Quoted per statement of work |
2 Emergency identity support is identity remediation assistance. It is not incident response, and not detection and response.
Terms
- 12-month term on retainers.
- 8% discount for annual prepayment at signature. Applies to the retainer; onboarding and AD discovery fees are not discounted.
- 4% annual escalator.
- Hawaii General Excise Tax is not included in displayed prices and is added as a separate line item.
- Findings are bounded by your Microsoft licensing. PIM, access reviews, and Entra ID Protection require Entra ID P2 or the Entra ID Governance add-on. Defender modules require their own SKUs. Where a license is absent, the corresponding report section becomes a licensing recommendation.
- All figures on this page are in US dollars and are estimates subject to scoping.
Not sure which tier you are?
The free scan costs nothing, grants us no access, and tells you what you are dealing with.