Pricing

Published prices. Fixed scope.

Every engagement has a written scope and a published price. Start with a free resource or a fixed-fee assessment, then add readiness work, audits or a monthly program when you need them.

Book a free consultation

Free & starter

GRC Maturity Assessment

Free

Scored review across governance, risk and controls.

5 Free Policy Templates

Free

InfoSec, Access Control, Incident Response, Vendor Management, Acceptable Use.

Trust Center Document Checklist

Free

Every document and section a trust center needs, with publish-vs-gate guidance.

SOC 2 Evidence Checklist

$27

The evidence auditors ask for, by control area.

SOC 2 Readiness Toolkit

$37

TSC gap worksheet, policy starter list and evidence checklist (PDF).

Assessments

Compliance Framework Gap Assessment

$497

A fixed-fee gap review against one framework.

Compliance Readiness Assessment

$997

Readiness score and remediation roadmap for SOC 2, HIPAA, PCI DSS or ISO 27001.

ISO 27001 Gap Assessment

$997

Clauses 4–10 and all 93 Annex A controls scored, with a draft SoA.

ISO 22301 Gap Assessment

$797

BIA, RTO/RPO and continuity plans reviewed against ISO 22301.

PCI DSS Gap Assessment

$897

Scoped review against the 12 PCI DSS v4.0 requirements.

HITRUST CSF Gap Assessment

$1,197

Readiness review for HITRUST e1, i1 or r2, with a roadmap.

Trust Center Gap Review

$997

Your existing security docs checked against a full trust-center set.

Cyber Risk Register Build

$297

A scored cyber risk register for your business.

Advisory audits

User Access Review Audit

$1,997

Who has access to your key systems, and whether they should.

Network Security Audit

$3,997

Firewalls, segmentation, remote access and exposure reviewed.

Data Privacy Audit

$3,997

Personal data handling checked against GDPR and US state laws.

IT General Controls (ITGC) Audit

$4,997

Access, change, operations and backup controls tested.

Cloud Security Audit

$4,997

AWS, Azure or GCP identity, network, logging and configuration audit.

Cybersecurity Audit

$5,997

Your security program audited against NIST CSF 2.0 or CIS v8.

Readiness engagements

HIPAA Readiness

$3,997

Risk analysis, safeguards and HIPAA policies.

GDPR Readiness

$3,997

Data mapping, records and privacy program build.

SOC 1 / SOC 2 / SOC 3 Readiness

$4,997

Readiness for your SOC report, start to auditor handoff.

PCI DSS Readiness

$4,997

Scoping and remediation before your SAQ or QSA assessment.

NIST 800-171 / CSF 2.0 Readiness

$4,997

Gap work and documentation for NIST 800-171 or CSF 2.0.

ISO 27001 Readiness

$6,997

ISMS build and certification-audit preparation.

SOC 2 Readiness + Audit

$15,000

Readiness through to an independent CPA firm's SOC 2 report. Invoiced.

Trust center builds

Trust Center Page Build — Security & Compliance Section

$1,497

A security & compliance section built on your website from your real controls.

Cybersecurity Trust Center Build

$4,997

A complete public trust center with policy summaries and request workflow.

Gated Trust Center Build

$6,997

Locked document library with NDA-gated access requests.

Programs & retainers

Continuous Compliance Monitoring

$197/mo

Monthly control check-ins and a status report.

Managed Trust Center + Questionnaire Desk

$1,497/mo

Trust center upkeep plus SIG, CAIQ and custom questionnaires answered monthly.

Virtual CISO Retainer

$1,997/mo

Part-time security leadership for your program.

Continuous Compliance Managed

$1,997/mo

Managed monitoring, evidence collection and control upkeep.

Internal Audit-as-a-Service

$2,997/mo

Risk-based audit plan, scheduled audits, workpapers and reporting.

Outreach Compliance Program (TCPA / DNC)

$1,997 setup + $497/mo

Consent, DNC scrubbing and calling-window rules for outbound teams.

CMMC Level 2 Compliance Program

$7,500 setup + $1,500/mo

NIST 800-171 gap work, SSP, managed detection and assessor-ready evidence.

FedRAMP Authorization Program

$12,500 setup + $4,500/mo

Readiness, documentation and ConMon for cloud providers. Invoiced.

Third-Party Risk Management Program Build

$5,997

Vendor tiering, questionnaires and review workflow.

Internal Audit Program Build

$7,997

Charter, methodology, audit universe and first-year plan.

Frequently asked questions

Is this software?

No. Quantum Audit Engine is a consulting firm. We do the work with you and for you; we do not sell a software platform or subscription.

Do you issue certifications or audit reports?

No. Certifications and attestation reports are issued only by accredited certification bodies, licensed CPA firms or authorised assessors. We prepare you for them.

How does payment work?

Fixed-fee offers are paid through Stripe after we confirm fit. Monthly programs are billed monthly. Larger engagements such as FedRAMP and SOC 2 Readiness + Audit are invoiced after scoping.

What is your refund policy?

Refunds follow our Refund & Returns Policy.

Not sure where to start?

Book a free 30-minute consultation and we will recommend the right first step.

Book a free consultation