People, process,
technology and independent advice.
Four tiers, one model: a named vCISO advisor, a monthly advisory-hour allocation, and full access to deepcurrent GRC™ at no additional cost. Every program is scoped to your environment.
Full assessment + COMPASS workshop
Complete security risk visibility and executive alignment before the retainer begins.
Pick the allocation that fits.
Every tier includes a dedicated vCISO advisor and full deepcurrent GRC™ access.
ESSENTIALS
- Full Security Assessment
- Executive Workshop
- Annual Risk Assessment
- Weekly Cadence
- Monthly Reviews
- Anytime Advisory Contact
- Menu of Services
ENTERPRISE
- Full Security Assessment
- Executive Workshop
- Annual Risk Assessment
- Weekly Cadence
- Monthly Reviews
- Anytime Advisory Contact
- Menu of Services
- Quarterly Board Review
ADVANCED
- Bi-Annual Assessment
- Executive Workshop
- Weekly Cadence
- Monthly Reviews
- Anytime Advisory Contact
- Menu of Services
- Control Solution Research
- Architecture and Implementation
- Quarterly Board Review
AI SECURITY
- AI GRC Plan Management
- AI Operations Review
- Agentic AI Planning
- AI Agent Development
- AI Identity Management Assessment
- Model Protections
- Weekly Cadence
- Monthly Reviews
- AI Architecture
- Tool Evaluations
All tiers include the deepcurrent GRC™ platform at no additional cost. Every program is scoped to your environment.
The full comparison.
| ESSENTIALS | ENTERPRISE | ADVANCED | AI SECURITY | |
|---|---|---|---|---|
| Monthly advisory hours | 10 | 20 | 40 | 20 |
| deepcurrent GRC™ platform | ||||
| Full security assessment | ||||
| Deepwater Assessment | ||||
| COMPASS executive workshop | ||||
| Risk assessment frequency | Annual | Annual | Bi-annual | Annual |
| Weekly cadence | ||||
| Monthly reviews | ||||
| Quarterly board review | ||||
| Menu of services | ||||
| Control solution research | ||||
| Architecture & Implementation Advisory | ||||
| AI GRC plan management | ||||
| Agentic AI planning & development |
Compare it to the alternative.
The point of the model is that people, process and technology arrive together, from one independent party, at a cost that does not require a headcount requisition.
A full-time CISO
Executive salary plus benefits, a hiring cycle measured in quarters, and a single point of failure. A vCISO gives you the seniority on the cadence you actually need it.
A separate GRC tool
Platform license, implementation project, and someone internal to own it. deepcurrent arrives configured and is run co-operatively with your advisor at no additional cost.
A reseller "advisor"
Advice shaped by a product catalog and a commission. We resell nothing, the only thing we are paid for is being right.
Commercial questions.
What does a program actually cost?
It depends on scope. The tier sets your monthly advisory-hour allocation and which specialized services are in scope, and the figure is confirmed once we understand your environment. Talk to us and we will be specific rather than vague.
What is the $19,000 → $0 onboarding?
The upfront onboarding, full security assessment plus the COMPASS Executive Alignment Workshop, is a $19,000 value provided at no upfront fee on 12-month agreements or longer.
Are there hidden platform fees?
No. deepcurrent GRC™ is included at no additional cost on every tier. There is no per-seat charge and no separate platform license.
Can we change tiers mid-term?
Yes: scope commonly moves as the roadmap progresses. Discuss it with your advisor; changes take effect at the next cycle.
Do unused advisory hours roll over?
Confirm the current rollover policy with your advisor before signing. It is a common question and worth putting in writing.
Do you require a 12-month commitment?
The no-upfront-fee onboarding is tied to a 12-month or longer agreement. Shorter arrangements are possible but the onboarding is then priced separately.
Get a number, not a brochure.
Tell us your size, sector and current obligations. We will scope a tier and give you a real figure, and the assessment that gets you there costs nothing.
No cost. No obligation. No vendor pitch. We don't resell anything.