WorldsCyberSec

Home / Services

Services

6 services, each with a published starting price, a defined set of deliverables and a page that says exactly how it runs. Most clients combine a managed plan with one or two assessments a year.

Managed detection & response

Analysts watching your endpoints, identities, email and cloud around the clock, with containment authority you set.

  • 24×7 staffed SOC in the United States
  • EDR license included
  • Identity and email monitoring
  • Containment under your playbook

From $14 per endpoint per month

What is included

Penetration testing

Fixed-price tests of your external perimeter, internal network, web applications, cloud and wireless, with a free retest.

  • Manual testing by senior testers
  • Scoping call
  • Findings rated with CVSS 4.0 and a plain-English business impact
  • Report delivered in the portal with a readout call for your team

From $2,400 fixed price

What is included

Compliance & vCISO

A fractional security leader and the program behind them: SOC 2, HIPAA, PCI DSS, CMMC and NIST CSF without a full-time hire.

  • Named virtual CISO with 16 or 32 hours a month
  • Policy library mapped to your framework
  • Risk register
  • Evidence collection in Vanta

From $4,500 per month

What is included

Incident response

Prepaid retainers with a one-hour response, and emergency response for companies that call us on their worst day.

  • 24×7 hotline answered by an incident responder
  • One-hour remote response on the retainer
  • Scoping
  • Forensic imaging and log preservation to an evidentiary standard

From $12,000 per year

What is included

Cloud security

Configuration reviews, hardening and continuous monitoring for AWS, Azure, GCP, Microsoft 365 and Google Workspace.

  • Configuration review against CIS Benchmarks for AWS
  • Identity and access review
  • Hardening with your engineers
  • Continuous posture monitoring on Professional and Enterprise plans

From $3,900 fixed price

What is included

Security awareness & phishing

Short monthly training, realistic phishing simulations and reporting that shows the auditor and the board the program works.

  • Monthly five-minute training modules with a quiz
  • Monthly phishing simulations tuned to your industry and vendors
  • Report-a-phish button for Outlook and Gmail
  • Automatic micro-training for users who click

From $2.50 per user per month

What is included

Which plan, which service?

NeedStart withAdd
Nobody is watching our endpoints and emailEssential planMicrosoft 365 or Google Workspace review
A customer or auditor wants a penetration testExternal penetration testWeb application test if you ship software
We need SOC 2 to close dealsSOC 2 readinessProfessional plan for the monitoring evidence
We handle patient dataHIPAA security risk assessmentEssential or Professional plan, awareness training
We supply the Department of DefenseCMMC Level 2 readinessEnterprise plan with SIEM retention
Our insurer asks about incident responseIncident response retainerTabletop exercise
We are in the cloud and not sure it is configured rightCloud configuration reviewProfessional plan for posture monitoring
We are in the middle of an incidentContact us now; a responder scopes within the hour

Not sure which one?

Describe the problem. The scoping call is with an analyst who will tell you if you do not need us.