Six days of work
Up to 70% co-funding for eligible SMEs (CISOaaS)
S$6,000
The plain price list · checked July 2026
Straight prices. No quote forms.
Every fee we charge, published in full sentences. If a price is not on this page yet, that is because the service has not launched, not because we are saving it for the sales call. (say real: price hidden means got catch. we show everything upfront.)
Data Protection Essentials
Price lands here the day our IMDA appointment is confirmed. Same one-sentence rule.
Bundles with Cyber Essentials
Provider-set pricing; no fixed government subsidy published
At launch
Cyber Essentials for clinics
First cohort of 20 clinics gets the launch price first. Join the list on the clinic page.
Mapped to the Health Information Act
Healthcare CISOaaS track exists; we confirm eligibility with you
At launch
Cyber Trust readiness (Tier 2 to 3)
First cohort late 2026.
About twenty days of work
Up to 70% co-funding for eligible SMEs (CISOaaS)
S$22,000
ISO 27001 implementation
From 2027.
About thirty-five days, four to six months
EDG up to 50% for first-time adoption
S$35,000
A named security lead, on retainer
For after the mark, so it never lapses.
vCISO and DPO duty, surveillance-audit support
Retainers sit outside the certification grants
S$36,000 a year
Fees are our published readiness prices as at July 2026. Co-funding depends on scheme eligibility, confirmed before engagement; our CSA CISOaaS onboarding application is in progress.
Ongoing senior security leadership (governance, risk, incident-response planning) without the cost of a full-time Chief Information Security Officer.
Full-time security boss damn ex. So we be yours: part-time, but 2am you call, we still pick up. Something break, we settle. That simple.
How the co-funding works
For an eligible SME on Cyber Essentials, up to seventy of every hundred dollars is co-funded under CSA's CISOaaS programme. We settle the paperwork; you see the net number before signing.
What the grant covers Your share
Money questions, answered plainly
Is anything not included in these prices?
Two things, both named early: the certification body bills its own audit fee (CSA offsets part of it for first certifications), and if a fix needs new software or hardware, you buy it from whoever you like. We never resell tools, so our advice on them stays clean.
What if we are not eligible for co-funding?
Then the published price is the price. The grant calculator shows both numbers before you talk to anyone, and we check eligibility properly, free, before anything is signed.
Does the 30-minute chat cost anything?
No. You leave with a one-page plan and honest advice on whether you need us at all. Some businesses can do this themselves, and we say so when it is true.
Why do you publish prices when nobody else does?
Because price-on-request is where dread grows. Publishing the number is the cheapest way we know to prove the rest of our promises.
Ask us the money question directly.
Thirty minutes, a named consultant, and every number on the table before you decide anything.