Incident Response Pricing: $3,500 Fixed per Service
Eight services, one price each. The Incident Advisory Retainer is $3,500 per month. No hourly billing, no product resale.
No hourly meter during a stressful week
The scope and the price are agreed in writing before work starts.
We assess and advise. Fixing is your choice.
OC Security Audit is read-only and resells no products. IT Perfection can help with installation and support if you want it.
Fixed price per service · read-only · scope agreed in writing
- Incident Response Readiness Assessment, Plan and Playbooks, Tabletop Exercise
- Business Impact Analysis and BCDR Readiness, Ransomware Resilience, Cloud and SaaS Outage Resilience
- Incident Response Advisory, per engagement
- Incident Advisory Retainer: $3,500 per month
What incident response services cost
Incident response cost is easiest to control before an incident. Every service here has one published price, so you can budget readiness the same way you budget insurance.
Not included
- Promises about data retention, restore times or recovery outcomes. These are discussed and agreed with you.
- Software, backup or security products. We do not resell any application or product.
- Making the changes. IT Perfection can help with installation and ongoing support under its own agreement, if you want it.
- Legal advice and litigation-grade forensic investigations, which stay with your counsel and a qualified forensic firm.
Price by service
| Service | What you receive | Stage | Price |
|---|---|---|---|
| Incident Response Readiness Assessment | 17 administrative controls scored against NIST SP 800-61 Rev. 3 and your frameworks, with a 90-day roadmap. | Prepare | $3,500 fixed |
| Incident Response Plan & Playbooks | A written plan, roles and decision authority, a notification decision tree and six scenario playbooks. | Prepare | $3,500 fixed |
| Tabletop Exercise | An executive or technical exercise built on your own systems and vendors, with an after-action report. | Prepare | $3,500 fixed |
| Business Impact Analysis & BCDR Readiness | Critical systems ranked, recovery targets set by your business owners, downtime procedures and a restore-test plan. | Withstand and recover | $3,500 fixed |
| Ransomware Resilience Assessment | Initial access, containment and recovery readiness, including backup separation and restore-test evidence. | Withstand and recover | $3,500 fixed |
| Cloud & SaaS Outage Resilience Review | A dependency map of Microsoft 365, cloud, DNS, internet and key vendors, single points of failure and outage playbooks. | Withstand and recover | $3,500 fixed |
| Incident Response Advisory | Triage guidance, evidence preservation and coordination with your counsel, insurer and IT team during an incident. | Respond and prove | $3,500 fixed |
| Incident Advisory Retainer | Yearly readiness review, one tabletop a year, plan upkeep and priority advisory when something happens. | Respond and prove | $3,500 per month |
From call to roadmap
Scoping call
30 minutes to pick the right service and confirm who takes part.
Written proposal
Scope, deliverables and the fixed price, before any work starts.
Evidence and interviews
Documents you provide and short sessions with your team. Read-only.
Review
Ali reviews every finding and maps it to your frameworks.
Walkthrough
Reports and a roadmap, walked through with your owner and IT lead.
Pricing questions
Is every service really $3,500?
Yes. Each service in the incident response and outage resilience line is $3,500 fixed, and the Incident Advisory Retainer is $3,500 per month. The scope is confirmed in a written proposal before work starts.
Is there a discount for booking several services?
Each service is a fixed $3,500. At the scoping call we suggest which combination fits your situation.
Is incident response advisory during an active incident also fixed?
Yes: $3,500 per advisory engagement, with the scope agreed in writing at the start. Longer support continues under a new written scope or the retainer.
Do you guarantee recovery or restore times?
No. We do not promise data retention periods, restore times or recovery outcomes. Targets are discussed and agreed with you.
Do you sell software, backup or security products?
No. We do not resell any application or product.
Does the price include fixing the gaps?
No. The services are read-only. If you want help with installation and ongoing support, IT Perfection can assist under its own agreement.
From findings to working controls
OC Security Audit supports you through the audit. If you need it, IT Perfection, a managed IT business also owned by Ali Hassani, can help with installation and ongoing support. Using it is optional, and we do not resell any application or product.
One price, agreed before work starts
Schedule a consultation. We scope the right service in 30 minutes and confirm the fixed price in writing.
Read-only, independent and vendor-neutral. On-site across Irvine, Orange County and Southern California; remote nationwide.