One path. No add-ons. Every price in writing.
Every firm gets the full program for the rules it answers to, with no add-ons to negotiate. The assessment and onboarding are fixed prices. The monthly rate starts at $165 per user, and your agreement states it before you sign.
Security & compliance assessment
Where every engagement begins. About three weeks, and the first payment toward onboarding.
- ✓Review of your Microsoft 365 tenant, devices, vendors and written program
- ✓Scored against your rule and your insurer's application
- ✓Ranked findings report written for principals and a board
- ✓Readout call and a remediation plan in priority order
Onboarding & remediation
Closing the gaps the assessment found and putting the program in place, at a per-user price set before you sign.
- ✓Identity protection and conditional access in Entra
- ✓Device compliance in Intune and data protection in Purview
- ✓Managed detection and response on every identity and device; backup with a first restore test
- ✓Written policies that match the configured controls
Managed compliance
A monthly price per user for security, policies, evidence and the security support line.
- ✓Everything under one agreement, with no add-ons
- ✓24/7 managed detection, response and identity protection
- ✓Annual tabletop exercise, awareness training, penetration test and vendor reviews
- ✓Evidence pack on demand and support through exams and renewals
One line item instead of a vendor list.
Most firms are already paying for several of these separately, and nobody is reconciling them against a rule. The monthly price covers the tools, the person reading them and the paperwork that proves it.
Not included: Microsoft 365 Business Premium, which every user needs. It is billed separately from the per-user price.
Monthly starts at $165 per user and adjusts as people join and leave. Your agreement sets the rate for your firm. Onboarding for 18 people is $3,600: $995 at signing and $2,605 at the readout. Microsoft 365 Business Premium is billed separately.
Term and exit
Every term is in the one agreement you sign before the assessment, including the readout checkpoint, the transition period, and how your data and evidence binder come back to you if you leave. Nothing is a surprise at signing.
Straight answers.
- +
What do I need to prepare for the fit call?
Nothing. Know roughly how many people you have, whether you're on Microsoft 365, and which rule you answer to. If an exam, a renewal or a questionnaire is coming up, bring the date.
- +
Why is there only one offer?
Because a smaller version is not compliant. Every control in the program maps to something your rule or your carrier asks for; removing one creates the gap you hired us to close. Our job is to qualify the right firms, not to sell the wrong ones a lighter version.
- +
We already have an IT company. Do we have to leave them?
Not necessarily. Alden covers security and compliance, not general IT. Many firms keep their IT provider for printers, line-of-business apps and hardware, and we document the hand-over so each side knows what it owns.
- +
What if the assessment finds nothing serious?
Then you have a dated, third-party report saying so, which is worth having at your next renewal or exam. You can stop at the readout and keep the report; the $995 is all you'll have paid.
- +
Do you work with firms on Google Workspace?
No. Our controls are built on Microsoft 365. If you are willing to move to Microsoft 365, the migration is quoted as a separate project.
- +
Does the monthly price include our Microsoft licenses?
No. Microsoft 365 Business Premium is required for every user and is billed separately from the per-user price. You can keep your current subscription or buy it through Alden as a Microsoft partner.
Twenty minutes decides it.
Every number is in the agreement before you sign: $995 to start, onboarding at $200 per user, then a monthly rate starting at $165 per user. The fit call is where we find out whether to send one.
How we describe our work
Alden's assessments are point-in-time observations against named standards. We build and operate controls and produce the evidence behind them. We do not audit or certify your firm, and we do not provide legal advice. Your firm reviews and signs its own attestations. Regulators and insurance carriers make their own determinations; our work supports insurability and exam readiness, it does not guarantee either. Our controls reduce the likelihood and impact of the attacks described; no control prevents all of them.