Pricing — Prices in CAD
Fixed-fee packages. No metered surprises.
Three anchor tiers by firm size. Annual billing, calendar-year-aligned by default. Household coverage for every attorney is included at every tier.
1–10 attorneys
Solo & Small Firm
CA$10,500 / year
Up to 15 staff + each household
- Firm Security Risk Assessment (annual, CIS Controls v8.1 / NIST CSF-aligned)
- Written Information Security Program (WISP), kept current
- One Outside Counsel Guidelines / client-questionnaire response per year + reusable answer library
- Security awareness training + monthly phishing simulation, up to 15 seats
- Trust-account wire-fraud control setup + free triage + household coverage for every attorney
11–50 attorneys
Mid-Size Firm
CA$25,500 / year
Up to 60 staff + each household
- Everything in Solo & Small for up to 60 seats
- Up to 3 client-questionnaire / OCG responses per year
- One firm tabletop exercise per year
- 8 hours of incident advisory per year, bookable 24/7
- Quarterly security review with the managing partner/administrator and your MSP
- Breach Readiness Pack (pre-staged client/regulator notification templates + wire-recall runbook)
51–100 attorneys; multi-office
Regional / Large Firm
From CA$51,000 / year (quoted)
Up to 120 staff + each household
- Everything in Mid-Size for up to 120 seats
- Unlimited client-questionnaire / OCG responses
- Two tabletops per year (one internal, one multi-office or co-counsel)
- Priority incident advisory, named incidents retainered
- Monthly reviews + management-committee briefings + SOC 2-readiness support
- Per-office vendor/co-counsel risk reviews on request
Above 100 attorneys? Custom engagement — email Travis directly.
Available add-ons
- IR Retainer — named on-call IR lead, SLAs, quarterly drill.from CA$8,500 / year
- vCISO — ongoing security oversight. Learn more →from CA$1,800 / month
What’s not included at any tier
- No legal advice. We are a security advisory and incident-response-readiness service, not a law firm. Nothing we provide constitutes legal advice, and engaging us creates no attorney-client relationship.
- Forensic investigation, malware reverse-engineering, and litigation-grade evidence collection (coordinated with a DFIR partner when needed).
- Custody of client data, trust funds, or original incident evidence.
- 24×7 SOC monitoring (referred to a partner when required).
- Bar-counsel representation, malpractice defense, or any regulator-facing legal filings.
Prices in CAD. Annual billing, calendar-year-aligned by default (fiscal-year on request). Quarterly billing available on Mid-Size and Regional on request. Multi-office firms quoted per office with a volume break beginning at three offices. Renewals at list price unless contracted otherwise. No metered usage, no overage charges, no surprise bills.