Skip to main content
Services & pricing

Defined assessments.
Clear deliverables.

Start with the level of visibility you need. Every assessment is authorized, rate-limited, non-destructive, and reviewed before delivery.

Free starting point

Free Website Security Diagnostic

A quick review of your public website, domain, HTTPS, and email-protection signals to flag obvious issues worth a closer look.

This diagnostic does not establish a usable baseline for Continuous Monitoring.

  • Visible website protections
  • Domain and DNS signals
  • HTTPS and certificate posture
  • Email-protection signals
FreeQuick diagnostic reviewStart the free diagnostic
01

Business Email Security Check

Best for a small business that wants a plain-language check of email impersonation defenses.

  • SPF, DKIM, and DMARC evaluation
  • Mail-provider and routing analysis
  • Spoofing and impersonation exposure review
  • Secure customer report with prioritized fixes
$99One-time baseline assessmentLimited-time offer

Continuous Monitoring $29/monthAvailable after the corresponding baseline is completed and accepted.

One business email domainAuthorized, non-destructive external checksStart assessment
02

Basic External Website Security Scan

Best for a small business that wants a practical baseline of one primary public website.

  • Website and DNS exposure review
  • TLS, certificate, and security-header checks
  • Externally observable technology findings
  • Reviewed report with prioritized next steps
$149One-time baseline assessment

Continuous Monitoring $49/monthAvailable after the corresponding baseline is completed and accepted.

One registered domainOne primary public websiteStart assessment
03

Advanced External Website Security Scan

Best for a modern website or web application that needs a broader external assessment.

  • Expanded external attack-surface review
  • Application and exposed-service analysis
  • Configuration and technology risk analysis
  • Executive and technical reporting
$399One-time baseline assessment

Continuous Monitoring $99/monthAvailable after the corresponding baseline is completed and accepted.

One registered domainOne primary web applicationStart assessment
04

External Exposure & TLS Review

Best for a business that wants to understand its publicly reachable TCP services and transport security.

  • Public TCP service inventory for the named target
  • Service identification and exposure review
  • TLS and STARTTLS checks where applicable
  • Reviewed findings and prioritized next steps
$149One-time baseline assessment

Continuous Monitoring $49/monthAvailable after the corresponding baseline is completed and accepted.

One exact public targetSigned, target-specific full TCP-range authorization required before testingStart assessment
Assessment bundle

Advanced Website + Email Trust

One coordinated assessment of the approved organization and its website and email domain creates a combined baseline. You receive one report with Website Security and Email Trust sections. Basic website coverage is included without a separate charge.

See what is included →
$499One-time baseline bundle
Complete Security Monitoring$109/monthSeparate monthly subscription, available after the combined baseline is completed and accepted.
Choose bundle
After your baseline

Continuous monitoring

Every Continuous Monitoring plan is a monthly subscription. Track new, changed, persistent, and resolved conditions against an accepted baseline. Monitoring has its own recurring authorization, scope, and stop controls.

Continuous monitoring is not sold as a standalone first service. The corresponding baseline assessment must be completed and accepted first.

Basic website monitoring$49/month
Advanced website monitoring$99/month
Email trust monitoring$29/month
Advanced website + email trust$109/month
External Exposure & TLS monitoring$49/month
Monitoring requires the corresponding completed and accepted baseline. Exposure & TLS monitoring follows only its specifically authorized target and scope.
After your Email baseline

Email Security Remediation · $399

One-time help with email-authentication findings for the assessed domain. This option appears in your client portal only after a paid Email baseline is completed and its report is published. We confirm the work and required access before payment or changes begin. Complex migrations and third-party fees are separate.

Need something broader?

Professional services remain available by conversation.

Internal testing, authenticated testing, implementation work, incident response, and compliance certification are not included in these fixed-price assessments. Have something else that needs attention? Tell us what you’re working on—we may be able to help through a separately scoped professional-services engagement.

Discuss your needs

Questions about your report—or another technology issue?

We can explain the findings, help prioritize your next steps, or discuss other technology challenges affecting your business. You do not need to know where to start.

Ask SunTzu for help

Asking a question does not commit you to paid work. Any proposed scope and cost will be explained first.

Keep track of changes after your assessment.

An assessment reflects the evidence collected at that time. We recommend ongoing monitoring and scheduled reassessments to identify meaningful changes and verify agreed fixes.

Discuss ongoing monitoring

We will help define the assets, checks, schedule and notification process that fit your needs.