Justin Gratto Consulting
A Trusted Security Partner
About
Justin Gratto Consulting
I’m committed to a long term relationship with my clients as their trusted security partner.
I want nothing more than to show you how easy it is for me to help you remove the obstacles bottlenecking your pipeline as you find product-market fit and scale by implementing the right sized security program for your business.
Whether you are a new startup, been around for a few years, or are an SMB that has been around for decades, I can help you achieve your strategic objectives when it comes to cybersecurity.
Purpose-built Services
Incident Response Preparedness
- Preparedness Assessment
- RPG-Inspired Tabletop Exercise
- Incident Response Plan
SOC 2 Implementation
- SOC 2 Gap Assessment
- Implementation Plan
- Implementation Consulting
- Assistance finding an auditor
- Complete set of custom policies relevant to you
- Aligned with SOC 2 & other frameworks or standards upon request
Policies Project
vCISO & Fractional CISO Services
Prices Starting at $1350 / Month
Trusted Security Partner - Core
- Annual Partner Agreement
- Monthly Subscription
- vCISO / Fractional CISO
- Security partner that is integrated into your team
- SOC 2 Readiness Assessment
- SOC 2 Preparation & Referral
- Annual Tabletop Exercise
Trusted Security Partner - Standard
- Everything in Core
- Endpoint Protection Response
- Application Security Solution
- Cloud Security Solution
- Awareness Training
- Phishing Simulations
Trusted Security Partner - Total
- Everything in Standard & Core
- Additional vCISO Engagement
- Threat Hunting
- Managed Detection & Response
- Amortized Annual Penetration Test
- Unlimited Vendor Questionnaires
- Two Annual Tabletop Exercises
Compare
Tiers
Features | Core | Standard | Total |
Compliance Management Platform | |||
vCISO | |||
SOC 2 Gap Assessment | |||
SOC 2 Preparation | |||
SOC 2 Auditor Referral | Save up to 30% on Audit Costs | Save up to 30% on Audit Costs | Save up to 30% on Audit Costs |
Complete Vendor Security Questionnaires FOR You | 2 Questionnaires Per Month | 5 Questionnaires Per Month | Unlimited |
Supplement Cyber Expertise at Board Level | One Annual Board Level Meeting | Quarterly Board Level Meeting | Quarterly Board Level Meeting |
Compare
Tiers - Cont
Features | Core | Standard | Total |
Endpoint Protection & Response (EDR) | |||
Application Security Solution | SAST, DAST, SCA, ETC. | SAST, DAST, SCA, ETC. | |
Cloud Security Posture Management (CSPM) | |||
Awareness Training & Phishing Simulations | |||
Managed Detection & Response + Threat Hunting | |||
Amortized Annual Penetration Test | |||
Incident Response Tabletop Exercise | 1 Annually | 1 Annually | 2 Annually |
