Fixila Enterprise · Security
Test your defenses before attackers do.
Penetration testing, risk and vulnerability assessments, and incident response, each with a clear written report your technical team and leadership can both act on.
Priced by proposal
What's the difference between a vulnerability assessment and a penetration test?
A vulnerability assessment scans your systems to find known weaknesses and ranks them by risk. A penetration test goes further: a tester actively tries to exploit weaknesses, the way an attacker would, to show what could really be reached. Many organizations start with an assessment and add penetration testing for critical systems.
What you receive
- A written report in plain English, with an executive summary for owners and leadership
- Every finding ranked by risk, with clear steps to fix it
- Technical detail your IT team or provider can act on
- A walkthrough call to go over the results and answer questions
- A retest to confirm fixes worked, when you choose one
- A summary you can share with customers and insurers
Security assessments and testing
All testing is done only with your written authorization and an agreed scope.
| Service | Price |
|---|---|
| Cybersecurity risk assessment | From $4,000 |
| External vulnerability scan | By proposal |
| Network security assessment | From $3,500 |
| Penetration test, external | From $7,500 |
| Penetration test, internal | From $10,000 |
| Web application penetration test | From $8,000 |
| Phishing and social engineering test | From $5,000 |
| Retest after fixes | From $2,000 |
| HIPAA and compliance risk assessment | From $6,000 |
Ongoing security and response
| Service | Price |
|---|---|
| Two-step sign-in (MFA) rollout project | From $2,500 |
| Incident response | $295 per hour |
| Incident response retainer (priority response, pre-agreed plan) | By proposal |
| Written security policies (information security plan, acceptable use, incident response plan) | From $5,000 |
| Compliance readiness (for example Colorado Privacy Act, PCI, CMMC, SOC 2 readiness) | By proposal |
- Hardware, licenses and parts are extra unless stated.
- Prices are starting points; your quote confirms the final price.
Security awareness training
Monthly training modules and practice phishing emails for your team, with reports on how everyone is doing.
Essentials
$4 per user a month
A short training module and a practice phishing email every month, with a quarterly report on how your team is doing.
Included in managed IT Plus and Pro
Plus
$6 per user a month
Everything in Essentials, plus a larger course library, automatic follow-up lessons for anyone who clicks a practice phish, and a monthly report.
Compliance
$8 per user a month
Everything in Plus, plus compliance courses (for example HIPAA, PCI basics and data privacy), policy acknowledgments, and completion reports ready for an audit.
Minimum 5 users.
How it works
Scoping
Systems, rules of engagement and written authorization.
Testing
Scheduled to avoid disrupting operations.
Report
Findings ranked by risk with remediation steps.
Retest
Confirm fixes worked, if included in scope.
Questions people ask
Do you need our permission before testing?
Yes. All testing is done only with your written authorization and an agreed scope. We agree in writing on which systems, which dates and which methods, and nothing outside that scope is touched.
Is penetration testing safe for production systems?
Testing is scoped and scheduled with you in advance, and risky tests can be limited or run in maintenance windows.
Will we get a report we can share with customers or insurers?
Yes. Reports include an executive summary suitable for leadership, customers and insurers, plus technical detail for your team.
Can you help during an active incident?
Contact us right away. Incident response support is available, and we can help you plan ahead so you're ready.
Related services
Book a free security consultation.
Tell us about your environment, your obligations and what you need to test. You get a written scope, rules of engagement and price.