Can you get us SOC 2 certified?

We prepare you for it: gap analysis, policies, controls and evidence. The report itself is issued by an independent CPA firm, which we help you select and work with.

We are small. Is this overkill?

A two-week assessment is usually enough for smaller companies, and it answers most customer questionnaires. We size the work to your risk and your customers’ demands.

How do you handle what you find?

Findings are shared only with named contacts, stored encrypted and deleted at the end of the engagement unless you ask us to keep them.

How long does SOC 2 readiness take?

Typically two to four months to be ready for a SOC 2 Type I audit, depending on how many controls already exist.

Cybersecurity

Name: Texas Solutions
Address: 401 W Kentucky Ave, Midland, TX, 79701, US
Telephone: (838) 910-3147
Price range: $$

Know where you are exposed, fix what matters first, and prove it to customers.

Get an EstimateTalk to a specialist (838) 910-3147

Starting price · US dollars

$35per hour

Cybersecurity specialist

Assessment: 2-4 wks
Frameworks: SOC 2 · ISO
Certified tests: Accredited

Assessment 2-4 weeks · SOC 2 readiness 2-4 months · managed security ongoing

The problem

A security questionnaire you cannot answer

A large prospect sends a security questionnaire, or an insurer asks for evidence, and nobody is sure how access is controlled, where the data lives or whether backups actually restore.

No inventory of systems or data
Shared accounts and old access never removed
Vulnerabilities found by customers, not by you
Deals stalled on security reviews

What we do about it

Assess, prioritise, fix, evidence

A structured assessment against a recognised framework, a risk-ranked fix list, hands-on remediation and a pack of evidence that answers questionnaires and satisfies auditors.

Assessment against CIS, NIST or ISO 27001 controls
Findings ranked by real business risk
Remediation done, not just recommended
Evidence pack for customers and auditors

What is inside

5 ways we run cybersecurity

Each one has its own page explaining what is delivered and how it is priced.

Security assessment

A clear picture of where you are exposed.

Penetration testing

Certified tests, coordinated end to end.

SOC 2 and ISO 27001 readiness

Policies, controls and evidence ready for the auditor.

Managed security

Continuous monitoring and response.

Always included

What comes with every engagement

Not an upsell list. These are part of the price, on every package.

Assessment against a recognised framework

Findings ranked by business risk

Hands-on remediation support

Evidence pack for questionnaires

Accredited partners for certified tests

Retest after fixes

Plain-language executive summary

Developer and staff awareness training

Incident response plan

Confidential handling of all findings

Packages

Three ways to start

All prices in US dollars. Project ranges are confirmed in a written proposal after scoping; monthly plans are capacity allocations, not unlimited work.

Starter

Assessment and a ranked fix list.

Quoted per scope

USD one-time project · based on: Security assessment

Scoped assessment
Vulnerability scanning
Risk-ranked report
Remediation roadmap
Executive briefing

Estimate this package

Most chosen

Growth

Readiness for SOC 2 or ISO 27001.

Quoted per scope

USD one-time project · based on: SOC 2 or ISO 27001 readiness

Gap analysis
Policies and procedures
Control implementation
Evidence collection
Auditor coordination

Estimate this package

Pro

Managed security programme.

Quoted per scope

USD per month · based on: Ongoing security support

Continuous monitoring
Quarterly penetration testing
Access reviews
Incident response on call
Named security lead

Estimate this package

Full price table

Specialist work is hourly. Specialist assessments, formal audits and third-party certification fees require separate quotes.

All prices in USD

Cybersecurity pricing in US dollars
Item and scope	Price (USD)	Billed
Fixed-scope projects (one-time, confirmed in a written proposal)
Security assessmentCloud, identity, applications and process. Quoted per scope	Quoted per scopeproject	project
Penetration test, accredited partnerDelivered with a specialist partner. Quoted per scope	Quoted per scopeproject	project
SOC 2 or ISO 27001 readinessReadiness preparation, not certification. Quoted per scope	Quoted per scopeproject	project
Ongoing security supportQuoted per scope; not 24/7 monitoring	Quoted per scopeper month	per month
Hourly rates
Cybersecurity specialistHourly, for ad-hoc and short engagements	$35 – $60per hour	per hour

Audit and certification fees charged by the certifying firm, and partner penetration-test fees, are separate. Hours above an allocation are billed at the hourly rate shown for that role, and only after you approve them in writing. Prices exclude any sales tax, VAT or withholding tax that applies to your invoice.

Try it yourself

Security project ballpark

Move the inputs and the numbers move with them. Nothing is submitted until you choose to.

Cybersecurity specialist · USD

$35 – $60

per hour

Typical timelines: Assessment 2-4 weeks · SOC 2 readiness 2-4 months · managed security ongoing

Ballpark only. Scope, integrations, data readiness and compliance move the figure, and the full calculator asks about each of them.

Get a detailed estimate

Process

How the work actually runs

1Week 1
Scope
Assets, data and obligations mapped. Framework and success criteria agreed.
2Weeks 2-4
Assess
Controls reviewed, systems scanned, findings ranked by risk.
3Weeks 4-10
Remediate
Highest risks fixed first, with retesting to confirm.
4Ongoing
Evidence
Policies, logs and reports assembled for customers and auditors.

Tools and platforms we work in

OWASP ZAPBurp SuiteSnykTrivyWizMicrosoft DefenderCrowdStrikeVantaDrataAWS Security HubOkta1PasswordOWASP ZAPBurp SuiteSnykTrivyWizMicrosoft DefenderCrowdStrikeVantaDrataAWS Security HubOkta1Password

Illustrative example — not a client result

Example engagement

Sample profile: B2B SaaS, 40 staff

Two enterprise deals were stalled on security reviews, and the company had no policies, no access reviews and no evidence to show.

What we would do

Ran a gap analysis against SOC 2 criteria
Wrote the policy set and implemented missing controls
Coordinated an accredited penetration test and retest
Built an evidence pack for security questionnaires

Example target: Critical findings open

140

Closed

Example target: Questionnaire turnaround

3 weeks2 days

-90%

Example target: SOC 2 Type I

NonePassed

Achieved

Example target: Stalled deals

Unblocked

This is an illustrative example of how we would approach this kind of work and the outcome we would aim for. It is not a client result, and the figures are targets, not achieved numbers.

Cybersecurity for growing software companies

What should a first security assessment cover?

A useful first assessment reviews cloud configuration, identity and access, endpoints, your main applications and security processes against a recognised framework such as CIS, NIST or ISO 27001, then ranks findings by business risk so the most dangerous gaps are fixed first.

Which regulations and frameworks apply to us?

It depends on your industry and the data you hold. Common requirements include GDPR for personal data, HIPAA for health information, PCI DSS for card payments, and SOC 2 or ISO 27001 when enterprise customers ask for assurance. We map your controls to the rules that apply to your customers and data.

Cybersecurity: your questions answered

Formal certified tests are delivered through accredited partners, with scoping, triage, remediation and retesting managed by us. We will not present our own review as an accredited certificate.

Put a number on it

The calculator opens on cybersecurity already selected. A few questions and you have a range in US dollars.

Estimate CybersecuritySee all pricing

Rough estimate only. Final pricing is confirmed after a consultation.

Cybersecurity

A security questionnaire you cannot answer

Assess, prioritise, fix, evidence

5 ways we run cybersecurity

Security assessment

Application security

Penetration testing

SOC 2 and ISO 27001 readiness

Managed security

What comes with every engagement

Three ways to start

Starter

Growth

Pro

Full price table

Security project ballpark

How the work actually runs

Scope

Assess

Remediate

Evidence

Sample profile: B2B SaaS, 40 staff

Cybersecurity for growing software companies

What should a first security assessment cover?

Which regulations and frameworks apply to us?

Cybersecurity: your questions answered

Do you issue penetration test certificates?

Can you get us SOC 2 certified?

We are small. Is this overkill?

How do you handle what you find?

How long does SOC 2 readiness take?

Put a number on it