Services

Senior security expertise, packaged so you know what you are buying.

Each service has a defined scope, a typical timeline and a published starting price. Final pricing depends on your size and complexity and is confirmed in a written proposal.


Risk & compliance

Cybersecurity Risk & Compliance Assessments

Timeline
3–6 weeks
Starting at
$6,500
Frameworks
NIST CSF 2.0, FTC Safeguards Rule
Best for
First step for any client

An independent, evidence-based view of your security program, scored for maturity and mapped to the regulations and contracts you are held to.

Packages

  • Safeguards Readiness for dealerships, from $6,500
  • Cyber Risk Assessment, $8,500–$18,500 by size

You receive

  • Written risk assessment
  • Control-by-control gap analysis
  • Prioritized 12-month roadmap
  • Executive readout and one-page summary
Ongoing leadership

Virtual CISO Consulting

Term
12 months, billed monthly
Starting at
$2,750 / month
Cadence
Monthly leadership meeting
Best for
Firms without a full-time CISO

A named senior advisor who owns your security program: sets priorities, oversees vendors and remediation, and reports to leadership in language they can act on.

Typical responsibilities

  • Security strategy and annual roadmap
  • Policy ownership and upkeep
  • Vendor and third-party risk reviews
  • Insurance and customer questionnaires

For dealerships and lenders

  • Qualified Individual support under the Safeguards Rule
  • Annual written report to the board or owners
  • Testing and monitoring oversight
Readiness & response

Incident Response & Digital Forensics Advisory

Readiness
3–5 weeks
Starting at
$7,500
IR retainer
$1,250 / month
Emergency
$425 / hour

Prepare before an incident, then lead decisively during one. We coordinate with your counsel, insurer, IT providers and forensic specialists so leadership can make informed decisions quickly.

Readiness

  • Incident response plan and playbooks
  • Ransomware, email compromise and data exposure scenarios
  • FTC 30-day notification workflow
  • Executive tabletop exercise

During an incident

  • Incident command and executive briefings
  • Scoping and evidence-preservation guidance
  • Coordination with counsel and forensic firms
  • Post-incident review and hardening plan
Governance

Security Governance & Compliance Readiness

Timeline
6–10 weeks
Range
$12,000–$30,000
Targets
GLBA, SOC 2, CCPA
Best for
Audits and customer reviews

The documented program that auditors, examiners, insurers and enterprise customers expect to see, built to fit how your company actually operates.

You receive

  • Information security policy suite
  • Risk register and treatment plan
  • Vendor risk management process

Readiness support

  • Control-to-evidence map
  • SOC 2 or GLBA readiness review
  • Planning for California CCPA cybersecurity audits
Architecture

Cloud & Enterprise Security Architecture

Timeline
3–6 weeks
Range
$9,500–$22,000
Platforms
Microsoft 365, Entra ID, AWS, Azure
Approach
Vendor-neutral

Practical reviews and target-state designs for identity, cloud and network security, prioritized so your IT team or provider can implement them.

Reviews

  • Microsoft 365 and Entra ID configuration
  • AWS or Azure security posture
  • Network segmentation and remote access

You receive

  • Findings ranked by risk
  • Target-state architecture
  • Implementation roadmap for IT
vCISO retainers

Choose the level of leadership you need.

All tiers are 12-month terms billed monthly. Hours beyond the included amount are billed at $295 per hour. Onboarding is included when you start with an assessment.

Foundation

$2,750 / month

Single-store dealerships and small financial firms.

Up to 8 hours per month
  • Qualified Individual support
  • Annual written report to leadership
  • Policy upkeep
  • Quarterly risk review
  • Up to four vendor reviews a year
Discuss Foundation

Enterprise

$9,500 / month

Lenders and firms of 250–1,000 people.

Up to 36 hours per month
  • Everything in Growth
  • Board and audit committee reporting
  • Audit and examination support
  • M&A and partner due diligence
  • Mentoring for your security staff
Discuss Enterprise
Questions

Frequently asked

Can Clearline serve as our Qualified Individual under the FTC Safeguards Rule?

The rule allows the Qualified Individual to work for a service provider. Your company still remains responsible for compliance and designates a senior member of your team to oversee the provider. Our Foundation and Growth retainers are built around that arrangement, and the engagement terms spell out both sides' responsibilities.

Do you sell security software or hardware?

No. Clearline is vendor-neutral. We help you choose and oversee tools and providers, and we do not take commissions from them.

Do you replace our IT provider or MSP?

No. We work alongside your IT team or managed service provider. They operate systems; we set direction, verify controls and report to leadership.

What if we have an incident right now?

Call the incident line on the contact page. We will help you contain the situation, engage counsel and your insurer, and bring in forensic specialists where needed.

Do you work outside Orange County?

Yes. We are based in Orange County, California and serve clients nationwide, with most work delivered remotely and on-site visits when they add value.

Next step

Thirty minutes to a clearer picture of your security risk.

Book a Security Leadership Briefing. You leave with a candid read on where you stand and, if it fits, a fixed-fee proposal within 48 hours.