Plans & engagements
Pricing that meets Microsoft-based orgs where they are.
Four subscription tiers cover stand-up + steady-state for global small and mid-size orgs — starting with Microsoft-based government, defence, and healthcare. Subscription tiers from $499/mo, plus a usage-based Enterprise tier for multi-entity / multi- subsidiary orgs. Bespoke Readiness Sprint and Remediation engagements handle prime-contractor evidence flows and pre-audit remediation.
- Microsoft-first rubric for government, defence, and healthcare tenants.
- AI-drafted SSP and POA&M between formal engagements.
- Auditor-ready evidence pack, scoped to your framework mix.
- Enterprise tier for multi-entity / multi-subsidiary orgs — usage-priced, no fixed rate.
Subscription plans
Subscribed from a browser with one click — no quote required. Cancel from your dashboard at any time. Enterprise prospects send scope into the inquiry form below for a usage-based quote.
Launch
Stand up an MSSP-aligned Microsoft 365 baseline in 30 days.
$499/ month
- Microsoft 365 hardening rubric: identity, Exchange, SharePoint, Teams, OneDrive
- Gap report mapped to CMMC Level 1 / NIST 800-171 r3 (110 practices)
- Weekly evidence reviews + remediation queue
- AI-drafted SSP and POA&M between formal engagements
Growth
Most popular
Defence-grade Microsoft 365 + Azure tenant for growing primes.
$999/ month
- Everything in Launch, plus Azure / Intune / Defender configuration baseline
- Microsoft-based government, defence prime, and DIB subcontractor evidence flows
- Quarterly tabletop walk-throughs + policy rollouts
- Always-on readiness dashboard with single-tenant evidence vault
Managed
Multi-tenant managed compliance for primes and global mid-market.
$2,500/ month
- Everything in Growth, plus multi-tenant / multi-subsidiary posture controls
- Healthcare / HIPAA + Government (FedRAMP, StateRAMP) coverage overlay
- Named compliance lead with a 4-hour response SLA
- C-suite quarterly briefing + auditor-ready evidence pack
Enterprise
Multi-entity / multi-subsidiary posture controls for primes, MSSPs, and global mid-market — usage-priced so overage tracks what your team actually assesses.
Customusage-based
Base platform fee + per-framework, per-entity, per-activity overage
- Everything in Managed, plus working posture controls across every entity, region, and MSSP scope
- Multi-entity / multi-subsidiary rollouts — each legal entity, region, and MSSP scope on its own rubric
- Usage-based pricing — base platform fee + overage per framework assessed, per legal entity / location, and per evidence & engagement activity beyond your bundled allotment
- Dedicated compliance pod with named lead + 1-hour SLA + quarterly board readout
Need a custom scope, a multi-tenant deployment, or a defence-prime engagement? Skip the plan and send us a brief below.
Bespoke engagements
Need a deeper posture than a monthly plan delivers?
The plans above cover stand-up + steady-state. Custom engagements fit prime-contractor evidence flows, multi-tenant rollouts, or pre-audit remediation. Enterprise prospects — multi-entity, multi-subsidiary orgs — use the same inquiry form below to send scope and receive a usage-based quote. We hand-route every brief within one business day.
Readiness Sprint
A two-week posture map. Best when you need a gap report and an action plan before a bid, an assessment, or a renewal.
- • Scoped rubric against CMMC, NIST 800-171, FedRAMP / StateRAMP, or HITRUST.
- • Evidence-pack review + remediation queue, scoped to one tenant.
- • Final artefact: gap map, action plan, and bid-ready cost bounds.
Remediation
Sustained engineering on controls and evidence. Best when you already have a plan and need a partner to close the gaps across your tenant.
- • Multi-subsidiary / multi-tenant posture controls.
- • Named compliance lead with a 4-hour response SLA.
- • Auditor-ready evidence pack delivered per engagement.
Enterprise platform
Usage-based pricing for multi-entity / multi-subsidiary orgs. Send the scope and we come back with a base platform fee plus overage sized to what your team actually assesses.
- • Base platform fee + per-framework, per-entity, per-activity overage.
- • Dedicated compliance pod with a 1-hour response SLA.
- • Quarterly board readout and auditor-ready evidence per entity.
Tell us what you need
We hand-route every inquiry to a Keepgrade lead. Expect a reply within one business day.