STATECRAFT

TECHNOLOGY PARTNERS

Municipal & Critical Infrastructure

À la Carte Pricing

Two tiers with realistic timelines, aligned to cyber insurance readiness and budget certainty.

Small City or Town (pop < 20k or ≤150 users)

Critical Infrastructure Agency(20–60k or 150–500 users)

Note: Ranges reflect typical scope; legacy systems or multi-tenant complexity may increase effort.

A. Foundational Services

Service

Criteria

Town

Regional/ Authority

Typical Timeline

MFA Rollout & Enforcement

per platform (M365, VPN, RDP, Firewall)

$12,000–$16,000

$18,000–$24,000

2–3 weeks

.gov Domain Migration
per domain

$18,000–$24,000

$28,000–$36,000
2–4 weeks
Baseline Cyber Gap Assessment
single engagement
$8,000–$12,000
$12,000–$16,000
1–2 weeks
Cyber Policy Pack
up to 7 policies
$7,000–$9,500
$9,500–$12,000

1–2 weeks

Security Awareness Training
per 100 users

$3,500–$5,000

$3,500–$5,000

~1 week prep & delivery

Scope notes: standard identity/email/DNS; custom curriculum and reporting included for Training.

B. Backup & Recovery

Service

Criteria

Town

Regional/ Authority

Typical Timeline

Backup Validation & Test Restore
per environment
$7,000–$9,000
$9,000–$12,000
1–2 weeks
Immutable Backup Configuration
per backup system
$8,000–$11,000
$11,000–$15,000
1–2 weeks
Quarterly Backup Verification
recurring
$2,000/qtr
$3,000/qtr
~2–3 days/qtr

C. Logging, Audit & Visibility

Service

Criteria

Town

Regional/ Authority

Typical Timeline

Logging Enablement
per platform (M365, firewall, servers)
$9,000–$12,000
$14,000–$18,000

1–2 weeks

Centralized Log Storage Setup
per 50 endpoints
$12,000–$16,000

$20,000–$30,000

2–3 weeks
Quarterly Log Retention Validation

recurring

$1,800/qtr
$2,600/qtr
~1–2 days/qtr
Evidence Report Compilation
per binder
$8,000–$10,000
$10,000–$12,000
1–2 weeks

Scope notes: price covers setup & initial configuration. Extensive source onboarding/tuning may require additional services.

D. Incident Response & Planning

Service

Criteria

Town

Regional/ Authority

Typical Timeline

IR Plan (IRP)
per organization

$18,000–$24,000

$26,000–$32,000
2–4 weeks
Tabletop Exercise (TTX)
1 session
$8,000
$12,000
~1–2 weeks prep + 1 day
Annual IRP + TTX Update

recurring

$22,000/yr
$32,000/yr
~2–4 weeks/yr
Cyber Insurance Readiness Binder
full evidence kit
$12,000–$16,000
$16,000–$22,000
2–3 weeks

Scope notes: price covers setup & initial configuration. Extensive source onboarding/tuning may require additional services.

E. Vulnerability & Endpoint

Service

Criteria

Town

Regional/ Authority

Typical Timeline

Vulnerability Scan

per 100 IPs

$5,000–$7,000

$5,000–$7,000

~1 week
Patch Validation Review
per environment
$4,000–$5,500
$5,500–$7,500
~1 week
Quarterly Vulnerability Refresh

recurring

$2,600/qtr
$3,600/qtr
~1 week/qtr

F. Advisory & Governance

Service

Criteria

Town

Regional/ Authority

Typical Timeline

BIA / COOP (Lite)
per department
$6,000–$8,000
$8,000–$12,000
1–2 weeks
Grant & Funding Alignment
per application support
$5,000–$7,500
$7,500–$10,000
1–2 weeks
Quarterly Cyber Posture Review
per engagement
$3,500
$5,000
~3–5 days

G. Recurring “Lite Managed” Options

Package

Description

Town

Regional/ Authority

Cycle

Evidence Maintenance Subscription
Quarterly backup tests, log checks, policy refresh
$2,400/mo
$3,400/mo
Annual
Training & Phishing Simulation
Two campaigns + reporting
$5,000/yr
$7,000/yr
Annual
Cyber Posture Dashboard
Board-ready metrics
$6,000 setup + $900/mo
$9,000 setup + $1,300/mo
Quarterly

Subscriptions focus on validation and evidence. We do not offer 24/7 monitoring in this tier.

How to Buy

Bundle — Save 10%

Select any 3–5 services across buckets A–E to receive a bundle discount.

Fast Start Trio

MFA + Backup Test + IRP/TTX — delivers core insurer-ready artifacts.

Pricing reflects typical project scope and may adjust based on environment complexity. Each service is designed to strengthen readiness, resilience and compliance confidence.