Request a proposal
Free Analysis
Cyber Security Services
Risk Assessments
Security Risk Assessment WorkbookFreeSMB Cyber ScoreFreeSMB Security Health Check$300Compliance Readiness Review$1,000
Vulnerability Management
Dark Web Exposure Report$300NOC Readiness Report$300External Attack Surface Assessment$1,497Patch & Vulnerability Management Program$997/mo
Incident Response
Cyber Incident Response ChecklistFreeIncident Response Plan Build$2,497Ransomware Readiness Tabletop Exercise$1,997Incident Response Retainer$1,500/mo
Cyber Defense Protections
Zero Trust
Zero Trust Audit$1,997Zero Trust Starter Assessment$397Network Segmentation Design$3,497Zero Trust Roadmap Sprint$4,997
Identity Management
Identity-First Starter Bundle$300Privileged Access Review$1,497Identity Lifecycle & Offboarding Audit$897MFA & SSO Rollout Program$2,997
Email Security
Phishing Exposure Report$300Email Authentication Hardening (SPF, DKIM, DMARC)$1,297Phishing Simulation & Awareness Program$497/moBusiness Email Compromise Defense Build$2,497
Application & AI Security
Secrets Detection & Remediation$2,497CI/CD Pipeline Security Hardening$2,997AI Model Security Assessment$4,997Penetration Test: Web Application$4,997
Cyber Security Programs
vCISO & Advisory
vCISO Lite — Monthly Security Advisory$750/moStonePath vCISO Complete$1,500/mo
GRC & Compliance
Security Compliance Suite$2,497/moRegulatory Compliance GRC$2,997/moSOC 2 Readiness & Automation Program$9,500
Vendor & Third-Party Risk
Vendor Security Risk ChecklistFreeTrust Center Care Plan$197/moCybersecurity Trust Center Build$4,997Trust Center Fit Check$197Trust Center Platform SetupBy applicationTrust Center Updates Desk$97/mo
Cloud & Data Security
Data Loss & Insider Risk Program$4,997Data Security Posture Management Build$5,997Cloud Security Posture Program$6,997
Cyber Security Solutions
Threat Intelligence
Free Training: Incident Readiness BriefingFreeDefender Circle$47/mo · $397/yrMulti-Modal Threat Intelligence Program$3,500/moAutonomous Threat Detection Deployment$2,500/mo
Managed SMB Security
Managed SMB Security Plans$97–$797/moOperator Subscription Bundle$397/moSMB Security Servicesfrom $497Managed Security Programs$597–$3,497/mo
Security Policies & Templates
SMB Security Policy Template PackFree
HomeAboutBlogContactRequest a proposal

vCISO Lite — Monthly Security Advisory

StonePath Cyber · Fractional Security Leadership

vCISO Lite: Senior Security Leadership, Without the Full-Time Hire

A named virtual CISO who owns your security roadmap, answers your questions, and keeps you audit-ready — scoped for small and mid-size businesses.

$750/month · month-to-month, cancel anytime

Start vCISO Lite → Secure checkout via Stripe · Kickoff call scheduled within 1 business day

What Your vCISO Handles Every Month

A full-time CISO costs $200K+ a year. Most SMBs don’t need 40 hours a week of security leadership — they need the right decisions made consistently. That’s vCISO Lite.

Monthly Advisory Session

A scheduled 60-minute working session with your named vCISO: priorities, open risks, decisions that need an owner.

Security Roadmap Ownership

A living 12-month roadmap, re-prioritized every month against your budget and business changes — not a shelf document.

Policy & Framework Library

Right-sized policies (acceptable use, access control, incident response, vendor risk) mapped to CIS Controls, maintained for you.

Vendor & Client Questionnaires

We draft your responses to security questionnaires and review the ones you send vendors — the work that stalls deals.

Quarterly Risk Review

A scored risk register refreshed each quarter, with a written summary you can hand to leadership, insurers, or auditors.

On-Call Email Advisory

Security question mid-month? Email your vCISO and get a documented answer within 1 business day.

How It Works

  1. Subscribe & Kick Off

    Check out below. Within 1 business day we schedule your kickoff call and send your intake worksheet.

  2. Baseline & Roadmap

    In your first month we baseline your current posture and deliver your initial 12-month security roadmap.

  3. Monthly Cadence

    From month two: your advisory session, roadmap updates, policy maintenance, and on-call answers — every month.

Built For

  • SMBs with compliance pressure — clients, insurers, or regulators asking about your security program and nobody who owns the answer.
  • Teams outgrowing DIY security — IT handles the tools, but nobody sets strategy, priorities, or policy.
  • Companies preparing for SOC 2, HIPAA, or cyber insurance renewal — who need a defensible program, not a binder of templates.

Need 24/7 monitoring and response too? vCISO Lite pairs with our MDR plans — and your vCISO coordinates them.

Questions

Is there a contract or minimum term?

No. vCISO Lite is month-to-month. Cancel anytime from your Stripe receipt.

Who is my vCISO?

A named senior security practitioner assigned at kickoff — the same person every month, not a rotating help desk.

Does this include hands-on tooling or monitoring?

vCISO Lite is advisory: strategy, roadmap, policy, and decision support. Managed detection and response is available separately through our MDR plans, and your vCISO will tell you honestly whether you need it.

Can this get us SOC 2 or HIPAA certified?

We build and run the program that certification requires and prepare you for the audit. Certification itself is issued by independent auditors/assessors.

Put a Name Next to “Security” on Your Org Chart

Start this month. Your kickoff call is scheduled within 1 business day of checkout.

Start vCISO Lite — $750/mo →
Editorial & AI Disclosure