Scan gratuit →
FR / EN
Obtenez votre Cyber Health Score
SERVICES / CYBERSÉCURITÉPROTÉGER / AUTOMATISER / UNIFIER

CYBERSÉCURITÉ.CONÇUE AUTOUR
DE VOTRE ENTREPRISE.

20OPTIONS D'ENGAGEMENT

ORAGROL offre la cybersécurité sous forme de quatre forfaits fixes, de douze services individuels ou de mandats spécialisés.
Choisissez la portée qui correspond réellement au fonctionnement de votre entreprise.

04

Forfaits

De Foundation à Elite

12

À La Carte

Offerts séparément

04

Services spécialisés

Offerts sur mandat

CONÇU POUR LES ENTREPRISES CANADIENNESLA CLARTÉ AVANT LA COMPLEXITÉ ↓

VOUS NE SAVEZ PAS PAR OÙ COMMENCER?

La clarté avant
la complexité.

Commencez par vos priorités. Votre évaluation Cyber Health Score peut aider à cerner les points à examiner avant de choisir un forfait, un service individuel ou un mandat spécialisé.

  1. Comprenez votre position
  2. Priorisez ce qui mérite votre attention
  3. Choisissez la portée qui vous convient

4 / CHOISISSEZ VOTRE PROTECTION

Quatre forfaits.
Un point de départ clair.

Sélectionnez un forfait pour découvrir s'il vous convient et les services qu'il inclut. Ajoutez la portée souhaitée pour révision.

Prix en dollars canadiens. Les tarifs ci-dessous sont des tarifs mensuels pour un contrat de 12 mois.

01 / 6 SERVICES EN 1 COUCHE

Foundation

Établissez votre protection de base.

PROFIL IDÉAL Entreprises qui mettent en place des contrôles de sécurité essentiels autour de leur personnel, de leurs appareils et de leur travail quotidien.

View what's included

CYBERSECURITY / FOUNDATION

Foundation

Establish your core security protections.

Foundation brings together six services covering security policies, weaknesses, devices, email, staff awareness and sign-in protection. It combines preventive controls with checks and monitoring appropriate to each service. You receive findings, activity reporting and agreed response or remediation steps for the systems in scope.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield

How action works

Routine protective actions follow the agreed configuration and authorization. Findings that need further investigation or changes are escalated; detection does not mean every issue has been fixed.

Who it suits

Businesses establishing a coordinated baseline of security protection.

Covered users, devices, environments, review frequency and response arrangements are confirmed before service begins.

TARIF MENSUEL · CONTRAT DE 12 MOIS

2 756 $/mois

CE QUI EST INCLUS

Protection de base

Inclus · 6
  • Configuration des règles de sécurité
  • Analyse des vulnérabilités
  • Protection des appareils
  • Bouclier courriel
  • Sécurité du personnel
  • Bouclier d'authentification

Visibilité et accès

Dans Advanced · 6 services
  • Vérification de conformité
  • Surveillance des fournisseurs
  • Surveillance de sécurité IA
  • Veille des menaces
  • Gestion des accès
  • Gouvernance des accès

Infonuagique, applications et données

Dans Comprehensive · 10 services
  • Protection infonuagique
  • Bouclier des charges de travail
  • Protection de l'infrastructure
  • Conformité infonuagique
  • Bouclier applicatif
  • Bouclier Web
  • Protection API
  • Bouclier des données
  • Protection des données
  • Classification des données

Intervention

Dans Elite · 3 services
  • Réponse gérée aux menaces
  • Réponse en sécurité
  • Surveillance des données

Option initiale de trois mois : 3 307 $/mois. Passe ensuite à un contrat standard de 12 mois.

View what's included

CYBERSECURITY / ADVANCED

Advanced

Extend protection into access, vendors and oversight.

Advanced includes Foundation and adds services covering compliance checks, vendor risk, AI security monitoring, threat monitoring and access oversight. It connects core protections with a broader view of security responsibilities and exposure. You receive findings and priorities across these areas, with actions handled under the agreed service scope.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance

How action works

Monitoring, reviews and permitted protective actions follow the agreed rules. Sensitive access changes and issues requiring additional work are escalated. Compliance checks support readiness; they are not an independent attestation.

Who it suits

Businesses needing broader access governance, vendor oversight and compliance visibility.

Twelve listed services. Coverage, review frequency and escalation arrangements are confirmed before service begins.

View what's included

CYBERSECURITY / COMPREHENSIVE

Comprehensive

Connect protection across your technology environment.

Comprehensive extends Advanced into cloud, infrastructure, applications and data. Its 22 services address a wider set of environments and help bring findings into a coordinated security view. You receive monitoring and assessment outputs, priorities and agreed actions across the covered systems.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance
  • Cloud Guard
  • Workload Shield
  • Infra Guard
  • Cloud Compliance
  • App Shield
  • Web Shield
  • API Guard
  • Data Shield
  • Data Guard
  • Data Classifier

How action works

Controls and response actions depend on the connected environment and agreed permissions. Findings needing wider remediation or sensitive changes are referred for review; a broader package does not imply unlimited coverage.

Who it suits

Businesses operating cloud services, infrastructure and customer-facing applications that need coordinated security coverage.

Covered applications, cloud accounts, workloads and data sources are defined before service begins.

View what's included

CYBERSECURITY / ELITE

Elite

Bring broader monitoring and response together.

Elite includes Comprehensive and adds Managed Threat Response, Security Response and Data Watch. These 25 services bring broader monitoring and response coordination into the agreed security program. You receive investigation updates, recorded actions and follow-up priorities for incidents and findings within scope.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance
  • Cloud Guard
  • Workload Shield
  • Infra Guard
  • Cloud Compliance
  • App Shield
  • Web Shield
  • API Guard
  • Data Shield
  • Data Guard
  • Data Classifier
  • Managed Threat Response
  • Security Response
  • Data Watch

How action works

Agreed response procedures define what can happen automatically and what requires review. Investigation and recovery needs outside the package are identified separately; specialist forensic engagements are not automatically included.

Who it suits

Businesses needing the broadest listed package with additional response coordination and data monitoring.

Monitoring coverage, response availability, authorization and escalation targets are agreed before service begins. Do not publish an unverified response-time guarantee.

12 / À LA CARTE

La capacité
dont vous avez besoin.

Choisissez un service individuel, offert seul ou avec un forfait.

TARIF MENSUEL · CONTRAT DE 12 MOIS

SERVICE MENSUEL

Virtual CISO

Un leadership en sécurité pour orienter vos priorités, vos décisions et votre supervision.

View what's included

CYBERSECURITY / À LA CARTE

Virtual CISO

Give your security program clear direction.

A virtual CISO provides security leadership on an agreed basis, reviewing risk, setting priorities and coordinating the security roadmap. The service connects findings with business decisions and accountable owners. You receive prioritized recommendations and progress reporting without assuming a full-time internal appointment.

What's included

  • Risk and priority reviews
  • Roadmap coordination
  • Security reporting and decision support

You stay in control

Leadership advice does not authorize spending or changes on your behalf. Meeting frequency and deliverables are agreed.

Who it suits

Businesses needing security leadership and clearer accountability.

3 500 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

Data Privacy Management

Coordonnez la façon dont les renseignements personnels sont traités et protégés.

View what's included

CYBERSECURITY / À LA CARTE

Data Privacy Management

Put privacy responsibilities into everyday practice.

Coordinate the policies, records and recurring tasks involved in handling personal information. The service helps identify gaps between documented responsibilities and actual data-handling practices. You receive an organized privacy work plan and issues for review, with applicable requirements confirmed for your business.

What's included

  • Privacy-program coordination
  • Records and policy review
  • Issue tracking and improvement recommendations

You stay in control

Sensitive privacy decisions and legal interpretation require appropriate review. Jurisdictions and covered activities are agreed.

Who it suits

Businesses needing a more consistent approach to personal information.

700 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

AI Governance & Risk Mgmt

Définissez les responsabilités et gérez les risques liés à l'utilisation de l'IA en entreprise.

View what's included

CYBERSECURITY / À LA CARTE

AI Governance & Risk Mgmt

Establish clear rules for responsible AI use.

Develop the ownership, review and approval practices needed to govern AI within your business. The service connects identified AI use cases with risk records and practical operating rules. You receive a governance framework and actions to keep responsibilities visible as adoption changes.

What's included

  • AI-use policies
  • Ownership and approval rules
  • Risk tracking and review coordination

You stay in control

Your leadership approves policies and risk decisions. Review cadence and covered use cases are agreed.

Who it suits

Businesses expanding AI use across teams.

900 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

AI Model Security

Traitez les risques de sécurité touchant vos modèles d'IA et leur utilisation.

View what's included

CYBERSECURITY / À LA CARTE

AI Model Security

Address threats to your deployed AI models.

Assess and strengthen the security of supported AI models and their deployment interfaces. The service considers relevant misuse, manipulation and model-access risks within the agreed use cases. You receive findings and protective measures suited to the model environment.

What's included

  • Model security review
  • Relevant protective-control configuration
  • Findings and recommendations

You stay in control

Supported models and test methods are agreed. Model security does not guarantee every generated answer is correct.

Who it suits

Businesses deploying or operating AI models.

700 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

AI Data Security & Privacy

Protégez les renseignements sensibles utilisés par vos systèmes et flux de travail en IA.

View what's included

CYBERSECURITY / À LA CARTE

AI Data Security & Privacy

Protect information used by your AI workflows.

Examine and strengthen handling of data entering, leaving or supporting your AI systems. The service focuses on agreed prompts, outputs, datasets and their access paths. You receive visibility into relevant exposure and practical controls for covered data flows.

What's included

  • AI data-flow review
  • Handling and access controls
  • Exposure findings and recommendations

You stay in control

Covered data sources and permitted processing are agreed. Privacy-sensitive decisions are referred for review.

Who it suits

Businesses using sensitive information in AI workflows.

500 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE PROJET

AI Security Assessment

Évaluez les risques de sécurité liés à votre utilisation de l'IA et déterminez les prochaines étapes concrètes.

View what's included

CYBERSECURITY / À LA CARTE

AI Security Assessment

Understand the risks in your AI use.

A scoped assessment reviews the AI tools and use cases identified for your business. It examines relevant data flows, permissions and security concerns before further adoption or changes. You receive findings and prioritized recommendations for the assessed tools.

What's included

  • Agreed AI inventory review
  • Risk and data-flow assessment
  • Prioritized findings

You stay in control

A one-time assessment of named tools and use cases, not automatic coverage of every AI system.

Who it suits

Businesses evaluating current or proposed AI use.

4 500 $

Ponctuel / projet

SERVICE MENSUEL

Zero Trust Access Security

Appliquez des vérifications d'identité et de contexte à vos décisions d'accès.

View what's included

CYBERSECURITY / À LA CARTE

Zero Trust Access Security

Make access depend on verified context.

Strengthen access decisions using identity, device and other supported context signals. The service applies agreed access policies rather than relying solely on network location. You receive configured controls and visibility into relevant access exceptions.

What's included

  • Access-policy design
  • Supported identity/context checks
  • Exception review

You stay in control

Connections and enforcement policies are agreed. Sensitive access changes follow approval rules.

Who it suits

Businesses managing access across distributed teams and systems.

1 000 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

Privileged Access Mgmt

Renforcez la supervision des comptes disposant de droits d'accès élevés.

View what's included

CYBERSECURITY / À LA CARTE

Privileged Access Mgmt

Strengthen control of powerful accounts.

Apply agreed controls to privileged accounts and the access they enable. The service helps limit unnecessary privileges and monitor supported administrative activity. You receive visibility into covered accounts, exceptions and recommended corrective actions.

What's included

  • Privileged-account scope review
  • Access controls
  • Monitoring and exception reporting

You stay in control

Covered systems, access approvals and emergency access procedures are agreed before changes.

Who it suits

Businesses needing stronger oversight of administrative access.

400 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

Cloud Network Security

Renforcez les contrôles réseau dans votre environnement infonuagique.

View what's included

CYBERSECURITY / À LA CARTE

Cloud Network Security

Strengthen the boundaries in your cloud environment.

Review and configure agreed cloud-network controls to limit unnecessary exposure and movement between resources. The service focuses on the cloud environments and network paths in scope. You receive findings, configured protections where authorized and priorities for further improvement.

What's included

  • Network exposure review
  • Segmentation and access-rule work
  • Monitoring or review as scoped

You stay in control

Cloud accounts and change permissions are defined before work. Segmentation reduces risk; it does not guarantee containment.

Who it suits

Businesses operating cloud networks and connected workloads.

700 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

AI Threat Detection & Protection

Détectez et traitez les menaces touchant votre environnement d'IA.

View what's included

CYBERSECURITY / À LA CARTE

AI Threat Detection & Protection

Watch for suspicious activity in your AI systems.

Monitor supported AI activity for relevant signs of abuse, manipulation or other threats. The service uses available signals and agreed detection rules to identify cases needing investigation. You receive alerts and scoped response guidance or protective actions where authorized.

What's included

  • Supported AI monitoring
  • Alert triage
  • Agreed response and escalation rules

You stay in control

Signal availability, monitoring coverage and response permissions are confirmed at setup. No claim to detect every AI attack.

Who it suits

Businesses needing operational oversight of AI-specific threats.

800 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE MENSUEL

Secure Software Development

Intégrez des pratiques de sécurité à votre processus de développement logiciel.

View what's included

CYBERSECURITY / À LA CARTE

Secure Software Development

Build security into your development workflow.

Integrate agreed security checks into the way your team develops and releases software. The service identifies relevant weaknesses during development and helps route findings to the people who can address them. You receive development-focused findings and guidance within the supported toolchain.

What's included

  • Development security checks
  • Findings triage
  • Remediation guidance and workflow integration

You stay in control

Repositories, checks and release rules are agreed. Your team retains release authority; remediation ownership is defined at setup.

Who it suits

Teams building or maintaining software.

600 $/mois

Tarif mensuel · contrat de 12 mois

SERVICE PROJET

Application Security Testing

Testez la sécurité d'une application et priorisez les constats.

View what's included

CYBERSECURITY / À LA CARTE

Application Security Testing

Identify weaknesses in a defined application.

Test a specific application using methods agreed for its scope and risk profile. The service examines relevant weaknesses and records findings that your team can investigate and address. You receive prioritized remediation guidance supported by the testing evidence.

What's included

  • Application scope confirmation
  • Agreed security testing
  • Findings and remediation guidance

You stay in control

Targets, authorization and methods are agreed. This item is not automatically identical to a full penetration-testing engagement; manual exploitation and retesting must be confirmed in scope.

Who it suits

Businesses preparing to release or improve an application.

3 500 $/application

Ponctuel / projet · par application

4 / MANDATS SPÉCIALISÉS

Une expertise spécialisée.
Des mandats définis.

Offerts sur mandat. Les exigences, les limites et le spécialiste approprié sont confirmés avant le début des travaux.

Tous les tarifs sont en dollars canadiens. Les tarifs de départ s'appliquent à une portée définie. La portée et les tarifs finaux sont confirmés dans votre proposition.

Penetration Testing

Un mandat défini visant à tester les vulnérabilités exploitables et à prioriser les correctifs.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

Penetration Testing

Test how weaknesses could be exploited.

A scoped penetration test examines how an attacker could exploit weaknesses in the agreed systems or application. A qualified tester works within defined authorization and testing boundaries, documenting verified findings and their impact. You receive an evidence-based report with prioritized remediation guidance.

What's included

  • Agreed targets, testing boundaries and permitted methods.
  • Testing and exploitation attempts within that scope.
  • Evidence and impact descriptions for verified findings.
  • Prioritized remediation recommendations.
  • Specialist review of the final report.

Your involvement

Approve the scope and testing authorization before work starts. Remediation and retesting are included only where expressly scoped.

Who it suits

Businesses seeking a practical assessment for their security program or a customer or insurer requirement.

Per-engagement quotation. Testing is bounded in time and scope and does not establish that every weakness has been found.

From $7,500 per engagement

SOC 2 Type II Attestation

Un mandat mené avec un partenaire d'audit CPA qualifié, adapté à votre organisation et à vos besoins de reddition de comptes.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

SOC 2 Type II Attestation

Prepare evidence for an independent examination.

We help organize the controls and evidence needed for a scoped SOC 2 Type II engagement with a qualified CPA audit partner. Preparation and evidence coordination support the examination over the agreed period. The independent auditor performs the examination and determines the resulting report and opinion.

What's included

  • Readiness review against the agreed examination scope.
  • Identification of control and evidence gaps.
  • Evidence organization and coordination.
  • Support during the agreed observation and examination process.
  • Independent CPA engagement as defined in the proposal.

Your involvement

Your organization operates its controls and supplies accurate evidence. Preparation work does not guarantee a favorable audit opinion.

Who it suits

Businesses whose customers or stakeholders request independent assurance about scoped controls.

Readiness work and audit-partner fees must remain clearly distinguished in the existing pricing presentation. Confirm the reporting period and partner responsibilities before engagement.

Setup from $8,000 + annual engagement from $12,000

PCI-DSS QSA Assessment

Une évaluation définie, menée par un QSA qualifié, pour votre environnement de paiement.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

PCI-DSS QSA Assessment

Assess your card-payment environment.

A qualified QSA assesses the agreed card-payment environment against applicable PCI DSS requirements. We help organize scope information, control mapping and supporting evidence for that assessment. You receive the agreed assessment documentation and a clear account of identified gaps and required follow-up.

What's included

  • Confirmation of the assessment scope and validation requirements.
  • Control and evidence review.
  • Evidence organization and gap identification.
  • Assessment by the qualified QSA.
  • The agreed assessment documentation and findings.

Your involvement

Supply accurate environment details and maintain required controls. Required validation documents and assessment approach are confirmed with the relevant payment stakeholders; do not describe this as a blanket legal license to process payments.

Who it suits

Businesses needing a QSA assessment of their card-payment environment.

Requirements and fees depend on the environment and validation scope, not merchant volume alone. No guaranteed compliance result.

From $10,000 per annual engagement

Certified Forensic IR

Une enquête judiciaire spécialisée et une intervention en cas d'incident, avec une portée convenue pour l'incident.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

Certified Forensic IR

Investigate an incident and preserve its evidence.

A scoped forensic engagement investigates the available evidence of a security incident and documents what can be established. Qualified specialists preserve and analyze relevant material, develop a timeline and record findings and limitations. You receive a reviewed report to support recovery and discussions with relevant advisers or insurers.

What's included

  • Initial incident scoping and evidence-preservation planning.
  • Collection and analysis within the agreed scope.
  • Evidence-handling records and an incident timeline.
  • Findings, limitations and relevant response recommendations.
  • Specialist review of the final report.

Your involvement

Authorize access and coordinate with relevant technical, legal and insurance contacts. Availability and mobilization are confirmed for the engagement; do not promise immediate attendance or court/insurer acceptance.

Who it suits

Businesses needing specialist investigation and documented evidence after an incident.

Per-incident engagement; any retainer is separately scoped. Confirm the credential supporting the existing word 'Certified' before publication; if unavailable, flag the title for owner review instead of inventing a credential.

From $12,000 per incident

Optional retainer from $500/month · separately scoped.

Votre prochaine étape la plus claire

La bonne protection commence par comprendre ce qui compte le plus.

Obtenez votre Cyber Health ScoreConstruisez votre portée