Services & Pricing

Security progress on your terms

Choose a clear next step: build your NIST policy foundation, keep monitoring current, prepare for CMMC, govern AI, or add senior CISO leadership.

Not Sure Which Path You Need?
Start with the free 2-minute NIST readiness assessment.
Get your A–F score across all 6 NIST functions — then choose the path that matches your gaps.
Take the Free Assessment →
Five buyer paths

Choose the security path that fits your next decision.

Each path makes the intended buyer, outcome, cadence, price, and next action explicit. Start with the smallest useful commitment and add leadership or modules when the work calls for it.

NIST Policy Package

A practical NIST CSF policy foundation for teams that need usable security documentation now.

Choose your package →
Built forTeams that need a practical NIST CSF policy foundation now
OutcomeReceive a customized eight-policy package and instant portal access
CadenceOne-time purchase
Price$299–$599 one-time
NIST Policy Package (Starter)
AI-customized NIST CSF policy package
$299 one-time
AI-generated in under 60 seconds
  • ✓ 8 NIST CSF-aligned security policies
  • ✓ Industry / size / regulatory customization
  • ✓ Instant portal access
Get Your Policies →
NIST Policy Package (Pro)
AI-customized NIST CSF policy package with extended scope
$599 one-time
Extended templates and annual refresh entitlement
  • ✓ Everything in Starter
  • ✓ Extended scope (DIB, healthcare, fintech templates)
  • ✓ Annual refresh entitlement
Get Pro Package →
Continuous Monitoring

Keep security work current between reviews with a self-directed workflow or a named advisor.

Compare monitoring options →
Built forOrganizations that want security work to stay current between reviews
OutcomeKeep posture, policy, and vulnerability priorities moving on a repeatable cadence
CadenceMonthly monitoring
Price$399–$1,199 /mo
Self-Service
Quarterly self-checks and monthly policy updates
$399 /mo
Billed monthly · annual save available
  • ✓ Quarterly NIST CSF 2.0 self-check
  • ✓ Progress dashboard and gap report
  • ✓ CISA KEV monitored against your stack
  • ✓ Email support
Start Self-Service →
Advisor-Led
Named-advisor review and executive-ready security reporting
$1,199 /mo
Billed monthly · 3-month minimum
  • ✓ Everything in Self-Service
  • ✓ Quarterly advisor-led review call
  • ✓ Executive briefing & board-ready recap
  • ✓ Threat escalation & KEV response
  • ✓ Slack channel with 24-hour response SLA
Start Advisor-Led →
CMMC Advisor-Led

A focused path for defense contractors preparing for CMMC readiness, with the underlying CMMC Module SKU preserved for checkout and detail pages.

Start CMMC readiness →
Built forDefense contractors preparing for CMMC Level 1 or Level 2 readiness
OutcomeMap NIST SP 800-171 controls into an advisor-led CMMC readiness cadence
CadenceMonthly monitoring with advisor review
Price$1,899 /mo
CMMC Module (Advisor-Led)
CMMC 2.0 Level 1/2 readiness for defense contractors
$1,899 /mo
Billed monthly · 3-month minimum
  • ✓ NIST SP 800-171 control mapping for CMMC Level 1/2
  • ✓ Quarterly advisor-led review tied to the CMMC SSP/SRP cadence
  • ✓ DoD-prime-ready posture summary for contracting officers
  • ✓ KEV/incident-response escalation against CUI handling
Start CMMC Module →
AI Module

An add-on for teams that need repeatable, audit-ready evidence for AI governance and related compliance work.

Start the AI Module →
Built forTeams that need audit-ready evidence for AI governance
OutcomeGenerate reusable AI compliance evidence across NIST CSF, AI RMF, and CMMC
CadenceMonthly add-on
Price$349 /mo
AI Module
Audit-ready AI compliance evidence in 60 seconds
$349 /mo
Billed monthly · 14-day trial
  • ✓ Audit-ready control evidence in 60 seconds
  • ✓ NIST CSF 2.0 + AI RMF + CMMC crosswalk
  • ✓ Re-runnable on regulatory updates
  • ✓ Stacks with Self-Service + Advisor-Led
Start AI Module →
Fractional CISO

Senior security leadership for higher-acuity environments where priorities, risk, and executive communication need a single owner.

Scope your engagement →
Built forOrganizations that need senior security leadership without a full-time CISO
OutcomeSet direction, prioritize risk, and communicate security progress to leadership
CadenceScoped engagement cadence
PriceCustom pricing
Fractional CISO
Bespoke CISO leadership for higher-acuity environments
Custom
Scoped per engagement
  • ✓ Bespoke engagement scoping
  • ✓ Senior advisor assigned to your account
  • ✓ Standing advisory cadence
  • ✓ Board-ready executive briefings
  • ✓ Incident response & escalation
How Advisor-Led works

A named advisor, a monthly cadence, recurring artifacts.

Advisor-Led is the human-guided option inside Continuous Monitoring and the CMMC Advisor-Led path. Brian Rhodes is the named advisor: each month the cycle repeats with a posture review, executive-ready gap report, CISA KEV escalation review when it applies, and a synchronous cadence call.

How Advisor-Led works on RhodigitalOS →
  • ✓ Named advisor — Brian Rhodes, Founder
  • ✓ Monthly cadence call + posture review
  • ✓ Board-ready recap + gap report every cycle
  • ✓ CMMC SSP/SRP updates tied to the same cadence
RhodigitalOS capabilities

Security leadership, strategy, and products in one operating model.

RhodigitalOS combines named senior-advisor leadership with practical security program delivery, compliance support, and products that keep the work moving between review cycles.

Fractional CISO leadership

Named senior-advisor leadership for board-ready recaps, vendor reviews, and program oversight — without full-time overhead. Explore Fractional CISO consulting →

Security program strategy

NIST CSF-based roadmaps, governance, risk prioritization, and recurring posture reviews turn security work into an operating cadence. See platform services →

Compliance support

Support for NIST CSF 2.0, CMMC / NIST SP 800-171, and related compliance evidence, with readiness support rather than a promise of certification. Scope compliance support →

Practical cybersecurity products

Practical products include the NIST Policy Package, Continuous Monitoring paths, and the AI Module for repeatable policy and governance workflows. See the named-advisor model →

Supported integrations & workflow touchpoints

These are documented delivery paths and generated configurations in the current product surface, not claims of unverified native connectors.

Slack communication

Advisor-Led engagements include Slack communication with the existing 24-hour response SLA.

CISA KEV monitoring

Continuous Monitoring checks CISA KEV against the customer stack as part of the posture workflow.

Generated AI/CI policy artifacts

Generate policy artifacts for .cursorrules, AGENTS.md, GitHub Actions, GitLab CI, and Bitbucket Pipelines.

AI-Powered Product

NIST Security Policy Package

Stop paying consultants $20,000 to draft policies you'll spend 6 months reviewing. Our AI engine generates 8 NIST CSF-aligned security policies — customized to your industry, company size, regulatory environment, and risk appetite. Done in under 60 seconds.

  • 📈
    Access Control Policy
  • 🛡
    Incident Response Policy
  • 🔒
    Data Protection Policy
  • ⚖
    Risk Management Policy
  • 🎓
    Security Awareness & Training Policy
  • 💾
    Asset Management Policy
  • 🔁
    Business Continuity Policy
  • 🤝
    Vendor Risk Management Policy
AI-generated in under 60 seconds
Starting at $299 one-time
Generation fee scoped to profile depth; one-time, instant portal access.
Get Your Policies
Across Every Path

What's included

Every path is built around your business, not a template. Here's what you get regardless of the path you choose.

🌟

Senior Security Executive

Not a project manager or junior analyst. You work directly with a practitioner who has built and run security programs at scale.

📋

Clear Documentation

Policies, procedures, and roadmaps you can actually use. No binders collecting dust on a shelf.

💬

Direct Communication

Slack, email, and calls — not a ticketing system. You reach the person doing the work.

📊

Progress Reporting

Quarterly reviews with metrics that matter to your business, not generic compliance checklists.

🛡

Incident Response

When something goes wrong, you have a seasoned responder on the line — not a panic button that rings an answering service.

🌐

Flexible Engagement

Scale up or down as your needs evolve. No multi-year contracts locking you in before you've seen results.

Powered by RhodigitalOS — generated policies, scoring, continuous monitoring.

Backed by Rhodigital Limited — advisor calls, board briefings, escalation. Brian Rhodes, Founder, is the principal on every advisor-led engagement.

Find the right fit for your organization

A free 30-minute assessment to map your security needs to the right path. Whether you're a growing business or a mission-driven non-profit — no pitch deck, no pressure. Just a conversation about where you are and where you need to go.

Book a Free Assessment
Typical response within 24 hours
FAQ

Common questions

Straight answers to the questions we hear most when teams compare the five RhodigitalOS buyer paths.

Continuous Monitoring, CMMC Advisor-Led, and AI Module are recurring monthly paths; Advisor-Led options begin with a 3-month minimum. The NIST Policy Package is a one-time purchase, while Fractional CISO is scoped per engagement.
Managed security providers (MSSPs) operate tools and respond to alerts. We provide strategic direction — the person who decides which tools to buy, what compliance means for your roadmap, and how to communicate security to your board. Think of us as the CISO, not the SOC.
The NIST Policy Package suits teams establishing a policy foundation. Continuous Monitoring fits organizations that need a repeatable operating cadence; CMMC Advisor-Led is for defense contractors; AI Module is for AI governance evidence; and Fractional CISO is for organizations that need senior security leadership.
Yes. The NIST Policy Package is available standalone starting at $299 one-time. It can also serve as the policy foundation for Continuous Monitoring, CMMC Advisor-Led, AI Module, or Fractional CISO work.
Yes. We routinely sign BAAs for HIPAA-regulated clients and can accommodate other standard contractual security requirements. Fractional CISO engagements typically include a full security questionnaire response process.
Common scenario. We embed as a senior advisor who mentors your team, fills gaps in expertise (cloud security, incident response, compliance), and handles things your team doesn't have bandwidth for. You keep the institutional knowledge; we bring the depth.
Research Hub

Every RhodigitalOS price maps to a published research artifact — see the framework comparisons, pillar guides, and pricing teardowns that drive these numbers.

See the research behind these numbers →