Request a proposal
Managed Security
Managed SMB Security PlansManaged Security ProgramsvCISO LiteOperator Subscription BundleRegulatory Compliance GRCSecurity Compliance Suite
Assessments & Programs
SMB Security Health CheckFree Ransomware Readiness CheckFree Threat AnalysisMulti-Modal Threat IntelligenceZero Trust AuditCompliance Readiness Review
Trust Center
Cybersecurity Trust Center BuildTrust Center Care Plan
Company
Managed PlansFree AnalysisAboutBlogContactRequest a proposal

vCISO Lite — Monthly Security Advisory

StonePath Cyber · Fractional Security Leadership

vCISO Lite: Senior Security Leadership, Without the Full-Time Hire

A named virtual CISO who owns your security roadmap, answers your questions, and keeps you audit-ready — scoped for small and mid-size businesses.

$750/month · month-to-month, cancel anytime

Start vCISO Lite → Secure checkout via Stripe · Kickoff call scheduled within 1 business day

What Your vCISO Handles Every Month

A full-time CISO costs $200K+ a year. Most SMBs don’t need 40 hours a week of security leadership — they need the right decisions made consistently. That’s vCISO Lite.

Monthly Advisory Session

A scheduled 60-minute working session with your named vCISO: priorities, open risks, decisions that need an owner.

Security Roadmap Ownership

A living 12-month roadmap, re-prioritized every month against your budget and business changes — not a shelf document.

Policy & Framework Library

Right-sized policies (acceptable use, access control, incident response, vendor risk) mapped to CIS Controls, maintained for you.

Vendor & Client Questionnaires

We draft your responses to security questionnaires and review the ones you send vendors — the work that stalls deals.

Quarterly Risk Review

A scored risk register refreshed each quarter, with a written summary you can hand to leadership, insurers, or auditors.

On-Call Email Advisory

Security question mid-month? Email your vCISO and get a documented answer within 1 business day.

How It Works

  1. Subscribe & Kick Off

    Check out below. Within 1 business day we schedule your kickoff call and send your intake worksheet.

  2. Baseline & Roadmap

    In your first month we baseline your current posture and deliver your initial 12-month security roadmap.

  3. Monthly Cadence

    From month two: your advisory session, roadmap updates, policy maintenance, and on-call answers — every month.

Built For

  • SMBs with compliance pressure — clients, insurers, or regulators asking about your security program and nobody who owns the answer.
  • Teams outgrowing DIY security — IT handles the tools, but nobody sets strategy, priorities, or policy.
  • Companies preparing for SOC 2, HIPAA, or cyber insurance renewal — who need a defensible program, not a binder of templates.

Need 24/7 monitoring and response too? vCISO Lite pairs with our MDR plans — and your vCISO coordinates them.

Questions

Is there a contract or minimum term?

No. vCISO Lite is month-to-month. Cancel anytime from your Stripe receipt.

Who is my vCISO?

A named senior security practitioner assigned at kickoff — the same person every month, not a rotating help desk.

Does this include hands-on tooling or monitoring?

vCISO Lite is advisory: strategy, roadmap, policy, and decision support. Managed detection and response is available separately through our MDR plans, and your vCISO will tell you honestly whether you need it.

Can this get us SOC 2 or HIPAA certified?

We build and run the program that certification requires and prepare you for the audit. Certification itself is issued by independent auditors/assessors.

Put a Name Next to “Security” on Your Org Chart

Start this month. Your kickoff call is scheduled within 1 business day of checkout.

Start vCISO Lite — $750/mo →