Services Designed For
- Accounting and CPA firms
- Law firms and private legal practices
- Private investigation firms
- Public affairs, lobbying, and political organizations
- Public relations and communications firms
- Medical, dental, and specialty healthcare practices
- Real estate, title, escrow, and property management firms
- Nonprofits, advocacy organizations, and foundations
- Professional services firms handling client or constituent data
What the Base Security Assessment Covers
- External exposure review of domains, cloud services, and internet-facing systems
- Email security configuration review including SPF, DKIM, and DMARC
- Identity and access review for Microsoft 365 or Google Workspace environments
- File sharing and data access configuration review
- Password hygiene and known credential exposure checks
- Backup and ransomware readiness review
- High-level endpoint and device configuration review
We do not perform destructive testing or exploit systems as part of the base assessment. The goal is to identify material risks and configuration gaps that could reasonably lead to data loss, breach, or service disruption.
What You Receive
- An executive summary written in plain language
- Identified risks prioritized by business impact
- Clear explanations of why each issue matters
- Practical remediation recommendations
- Estimated effort and cost ranges to address findings
Pricing
Base security assessments are offered at a fixed fee, typically ranging from $1,500 to $4,500, depending on organization size and complexity.
Optional add-on services may be available for organizations seeking additional depth or coverage. Remediation services are always optional and scoped separately.
Independence and Approach
Stoutsource does not sell security products or managed services. We provide independent assessments and recommendations focused on clarity, defensibility, and practical outcomes.
We regularly work with organizations in Sacramento and throughout California.
Advanced Security Testing
Advanced security testing services, such as penetration testing, phishing simulations, wireless security reviews, and internal network testing, may be available as a separate engagement with explicit authorization and defined scope. Details are provided upon request.
Why Stoutsource
Stoutsource combines software engineering experience with practical security and risk assessment. Our focus is on helping organizations understand and reduce real exposure without unnecessary disruption or fear-based sales tactics.
We provide independent assessments and do not sell security products or managed services.