Medium Companies
What does your company need at this stage?
For companies with 31 to 100 devices that already run IT, we take security maturity to the next level.
Price criteria
31–100 devices · review with an expert
Investment range
From $40,068.69 up to $69,261.59+ USD gross (no taxes included)
Jump to a phase
Every phase of this plan, in order. Pick one to read its scope.
Phase 0 — Security Audit
Establish a baseline of controls and compliance with local and international regulations.
- Complete diagnosis of the security level.
- Guaranteed regulatory compliance.
- Reduction of operational and financial risk.
- Continuous improvement and organizational maturity.
- Accreditation and trust from clients and partners.
- Significant savings on remediation costs.
- Independent and objective validation.
- Legal and contractual protection.
- Certification (ISO 27001).
- Strengthening of business resilience.
- Documentation.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 1 — IT Services (Follow-up)
We review or take over your IT operation: tools, configuration, and processes.
- Business baseline.
- Physical and connectivity base.
- Basic identity and user management.
- Core IT services.
- Enterprise applications.
- Server, cloud and platform layer.
- Data, analytics and reporting.
- IT operations, governance and standardization.
- Pre-cybersecurity preparation.
- Continuous improvement.
Note: User licenses and software or hardware licenses are not included. The price only covers the expert for the implementation and management of all technologies.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 2 — IAM + Endpoint Protection
Access control inside and outside the corporate network, and protection across every device.
- Identity and access management (IAM).
- Endpoint hardening (Windows/MacOS/Linux).
- Network segmentation and secure configuration.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 3 — Visibility and Detection
You cannot protect what you cannot see. We deploy visibility, monitoring, and detection.
- Agentic SOC (Centralised logging and SIEM, Endpoint detection and response (EDR), Network detection and response (NDR)).
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 4 — Vulnerability Management
Continuously discover, prioritize, and remediate vulnerabilities.
- 3 scans in one month.
- Vulnerability analysis.
- Executive and technical report.
- 3 sessions with the vulnerability specialist.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
- Unlimited scans.
- Up to 250 IPs/Devices.
- Vulnerability analysis.
- 1 specialist fully dedicated to your company.
- Monthly reports.
- Dashboards.
- Regular sessions with the remediation teams.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
- Everything in Plan 250.
- Unlimited number of devices.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 5 — Cloud
We secure your cloud environments and embed security across the entire development lifecycle: protection for AWS, Azure, and GCP, and end-to-end DevSecOps practices.
- AWS, Azure, and GCP.
- Cloud security.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 6 — Data Protection & Privacy
We protect your company's sensitive information and ensure privacy compliance: data loss prevention, encryption, and key management.
- Data loss prevention (DLP).
- Encryption and key management.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 7 — Incident Response & DRP
Production-ready incident response and disaster recovery capability.
- Incident response platform.
- Backup and disaster recovery.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Phase 8 — Awareness, Security Testing & Assurance
We validate your security posture with penetration testing and compliance checks, and strengthen team awareness to ensure your defenses hold up against real attacks.
- Up to 2 pentests within the same month (starting on the 16th day of the 1st pentest).
- Up to 3 vulnerability scans within the same month.
- Vulnerability assessment.
- Web application pentest (OWASP Top 10).
- Infrastructure pentest (microservices).
- Cloud pentest (AWS, Azure, GCP).
- Container pentest (Kubernetes).
- IoT pentest (SCADA).
- Wi-Fi pentest.
- Windows and Linux pentest.
- Mobile pentest (Android, iPhone).
- Executive and technical report.
- Up to 100 devices/IPs.
- 3 pentests per year.
- Everything in the Basic Plan.
- PCI-DSS
- SOX
- COBIT
- BASEL II
- CIS
- DISA
- FISMA
- FDCC
- GLBA
- HIPAA
- ISO 27001/17799
- ITIL
- NIST
- NSA
- SDP
- USGCB
- US State Laws
Pentest price calculator
Select your assets and options to estimate the price instantly.
Select at least one asset to see your estimate.
Send your pre-simulation
Get this quote by email and our team will follow up with you.
Non-binding reference estimate. Final price may vary based on scope. Prices in USD.
This course is designed for any knowledge level, from people who have never had any contact with cybersecurity to industry professionals.
This is a direct but rigorous method where you will learn to understand all information security concepts and how to apply them at every corporate level.
You will learn all the basic cybersecurity concepts in:
- Corporate Governance.
- Information Security.
- The risk landscape.
- Risk Management.
- Information Security Development Program.
- Information Security Management Program.
- Secure Design and its Implementation.
- Incident Management.
- Attack Vectors.
- Incident Response.
PRICE - $5,724.10 USD for all executives (C-Level, board and management) or $572.41 USD per person/module.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
You will learn all the basic cybersecurity concepts in:
- Malware.
- Social Engineering.
- Digital Infrastructure Attacks.
- Validation Attacks.
- Environmental Impact.
PRICE - $44.02 USD per person.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Talk to a representative for more information
Talk to a specialist →DevSecOps
DevSecOps (Development, Security, and Operations) is a software engineering philosophy that integrates security practices into the development lifecycle (SDLC) from the very first moment. Traditionally, security was the "last step" before launch; DevSecOps breaks that model under the premise that security is a shared responsibility and not a final bottleneck. Its core pillar is Shift Left: moving security testing and controls to the early stages of development. The sooner a vulnerability is detected, the cheaper and easier it is to fix.
- Governance and Security Foundation.
- Shift-Left (CI - Continuous Integration).
- Containers and Infrastructure Security.
- Dynamic API Security (CD - Continuous Delivery).
- Secrets, IAM, and Zero Trust.
- SIEM, Incident Response, and Automation.
- Maturity, Audits, and Continuous Improvement.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Cyber Threat Intelligence
Proactive monitoring of the threat landscape to detect risks before they reach your organization. We track exposed assets, leaked credentials, malware activity and emerging threats across the surface, deep and dark web, delivering early-warning alerts and actionable reports so you can respond before an incident occurs.
- Weekly
- Monthly
- Early warning
- Exposed surface
- Malware monitoring
- Surface Web
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
- Weekly
- Monthly
- Early warning
- Exposed surface
- Malware monitoring
- Exposed credentials
- Cyber Squatting
- Surface Web, Deep Web and Dark Web
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Recruitment and Selection
Today, and for many years now, the recruitment and selection of highly qualified technology personnel has been of very poor quality. If we add to this the use of AI to pre-select candidates, we will end up with a disaster in the recruited staff.
- Technical theoretical-practical interviews conducted by an expert in that position who has years of experience and certifications in the role.
- CV analysis.
- Practical evaluation results.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
- Implant: Becomes part of the Lyon & Fiurex LLC Group team but works inside your organization and is a specialist in the position with years of experience and certifications.
- Savings: Your organization does not pay employer payroll taxes since the person is part of our organization.
À-la-Carte Evaluations
Additional Selection Services
Select the services you need for your selection process. The base price is in USD; the USD equivalent is shown as a reference only.
$0.00 USD
Request your Quote
Fill in your details and we will get in touch with you.
vCTO / vCISO / vCIO as a Service
Many micro and small companies cannot afford a full-time technology, security, or information systems director. With our vCTO / vCISO / vCIO as a Service, you get the executive expertise you need, when you need it, at a fraction of the cost of hiring in-house.
- Weekly strategic session with your Virtual Executive (vCTO, vCISO, or vCIO): priority review and executive decision-making.
- Ongoing cyber risk management, regulatory compliance oversight, and cybersecurity program supervision (vCISO).
- Weekly alignment of information systems with business objectives, vendor management, and IT spend optimization (vCIO).
- Follow-up on GRC initiatives, control frameworks, and regulatory policies applicable to your industry.
- Available individually or combined — choose the role or roles your company needs.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
- Virtual Chief Technology Officer (vCTO): defines your company's technology strategy, systems architecture, and innovation roadmap.
- Virtual Chief Information Security Officer (vCISO): manages cyber risk, designs and oversees the cybersecurity program, and ensures regulatory compliance.
- Virtual Chief Information Officer (vCIO): aligns information systems with business objectives, manages vendors, and optimizes IT spending.
- Governance, Risk & Compliance (GRC): control frameworks and policies tailored to your industry and applicable regulations.
- Available individually or combined — choose the role or roles your company needs.
Request your Pre-Order
Fill in your details and we will process your pre-order right away.
Not your company size?
Compare the other business segments.
Ready to secure your enterprise?
Talk to our advisory team about custom training and consulting.
Contact Us