Free Scan →
EN / FR
Get Cyber Health Score
SERVICES / CYBERSECURITYPROTECT / AUTOMATE / UNIFY

CYBERSECURITY.BUILT AROUND
YOUR BUSINESS.

20WAYS TO ENGAGE

ORAGROL delivers cybersecurity as four fixed packages, twelve individual services or specialist engagements.
Choose the scope that fits how your business actually operates.

04

Packages

Foundation to Elite

12

À La Carte

Available standalone

04

Specialist Services

Available by engagement

BUILT FOR CANADIAN BUSINESSCLARITY BEFORE COMPLEXITY ↓

NOT SURE WHERE TO START?

Clarity before
complexity.

Start with your priorities. Your Cyber Health assessment can help identify areas to review before choosing a package, individual service or specialist engagement.

  1. Understand your position
  2. Prioritize what needs attention
  3. Choose the scope that fits

4 / CHOOSE YOUR PROTECTION

Four packages.
One clear starting point.

Select a package to explore its fit and included services. Add your preferred scope for review.

Prices in CAD. Package rates below are monthly rates for a 12-month contract.

01 / 6 SERVICES IN 1 LAYER

Foundation

Establish your core protection.

IDEAL FIT Businesses putting essential security controls around their people, devices and everyday work.

View what's included

CYBERSECURITY / FOUNDATION

Foundation

Establish your core security protections.

Foundation brings together six services covering security policies, weaknesses, devices, email, staff awareness and sign-in protection. It combines preventive controls with checks and monitoring appropriate to each service. You receive findings, activity reporting and agreed response or remediation steps for the systems in scope.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield

How action works

Routine protective actions follow the agreed configuration and authorization. Findings that need further investigation or changes are escalated; detection does not mean every issue has been fixed.

Who it suits

Businesses establishing a coordinated baseline of security protection.

Covered users, devices, environments, review frequency and response arrangements are confirmed before service begins.

MONTHLY RATE · 12-MONTH CONTRACT

$2,756/mo

WHAT'S INCLUDED

Core protection

Included · 6
  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield

Visibility & access

In Advanced · 6 services
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance

Cloud, apps & data

In Comprehensive · 10 services
  • Cloud Guard
  • Workload Shield
  • Infra Guard
  • Cloud Compliance
  • App Shield
  • Web Shield
  • API Guard
  • Data Shield
  • Data Guard
  • Data Classifier

Response

In Elite · 3 services
  • Managed Threat Response
  • Security Response
  • Data Watch

Initial three-month option: $3,307/mo. Then moves into a 12-month standard contract.

View what's included

CYBERSECURITY / ADVANCED

Advanced

Extend protection into access, vendors and oversight.

Advanced includes Foundation and adds services covering compliance checks, vendor risk, AI security monitoring, threat monitoring and access oversight. It connects core protections with a broader view of security responsibilities and exposure. You receive findings and priorities across these areas, with actions handled under the agreed service scope.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance

How action works

Monitoring, reviews and permitted protective actions follow the agreed rules. Sensitive access changes and issues requiring additional work are escalated. Compliance checks support readiness; they are not an independent attestation.

Who it suits

Businesses needing broader access governance, vendor oversight and compliance visibility.

Twelve listed services. Coverage, review frequency and escalation arrangements are confirmed before service begins.

View what's included

CYBERSECURITY / COMPREHENSIVE

Comprehensive

Connect protection across your technology environment.

Comprehensive extends Advanced into cloud, infrastructure, applications and data. Its 22 services address a wider set of environments and help bring findings into a coordinated security view. You receive monitoring and assessment outputs, priorities and agreed actions across the covered systems.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance
  • Cloud Guard
  • Workload Shield
  • Infra Guard
  • Cloud Compliance
  • App Shield
  • Web Shield
  • API Guard
  • Data Shield
  • Data Guard
  • Data Classifier

How action works

Controls and response actions depend on the connected environment and agreed permissions. Findings needing wider remediation or sensitive changes are referred for review; a broader package does not imply unlimited coverage.

Who it suits

Businesses operating cloud services, infrastructure and customer-facing applications that need coordinated security coverage.

Covered applications, cloud accounts, workloads and data sources are defined before service begins.

View what's included

CYBERSECURITY / ELITE

Elite

Bring broader monitoring and response together.

Elite includes Comprehensive and adds Managed Threat Response, Security Response and Data Watch. These 25 services bring broader monitoring and response coordination into the agreed security program. You receive investigation updates, recorded actions and follow-up priorities for incidents and findings within scope.

What's included

  • Security Rules Setup
  • Security Weakness Check
  • Device Guard
  • Mail Shield
  • Staff Security
  • Login Shield
  • Compliance Check
  • Vendor Watch
  • AI Security Monitoring
  • Threat Watch
  • Access Manager
  • Access Governance
  • Cloud Guard
  • Workload Shield
  • Infra Guard
  • Cloud Compliance
  • App Shield
  • Web Shield
  • API Guard
  • Data Shield
  • Data Guard
  • Data Classifier
  • Managed Threat Response
  • Security Response
  • Data Watch

How action works

Agreed response procedures define what can happen automatically and what requires review. Investigation and recovery needs outside the package are identified separately; specialist forensic engagements are not automatically included.

Who it suits

Businesses needing the broadest listed package with additional response coordination and data monitoring.

Monitoring coverage, response availability, authorization and escalation targets are agreed before service begins. Do not publish an unverified response-time guarantee.

12 / À LA CARTE

The capability
you need.

Choose an individual service, available standalone or alongside a package.

MONTHLY RATE · 12-MONTH CONTRACT

MONTHLY SERVICE

Virtual CISO

Security leadership to guide priorities, decisions and oversight.

View what's included

CYBERSECURITY / À LA CARTE

Virtual CISO

Give your security program clear direction.

A virtual CISO provides security leadership on an agreed basis, reviewing risk, setting priorities and coordinating the security roadmap. The service connects findings with business decisions and accountable owners. You receive prioritized recommendations and progress reporting without assuming a full-time internal appointment.

What's included

  • Risk and priority reviews
  • Roadmap coordination
  • Security reporting and decision support

You stay in control

Leadership advice does not authorize spending or changes on your behalf. Meeting frequency and deliverables are agreed.

Who it suits

Businesses needing security leadership and clearer accountability.

$3,500/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

Data Privacy Management

Coordinate how personal information is handled and protected.

View what's included

CYBERSECURITY / À LA CARTE

Data Privacy Management

Put privacy responsibilities into everyday practice.

Coordinate the policies, records and recurring tasks involved in handling personal information. The service helps identify gaps between documented responsibilities and actual data-handling practices. You receive an organized privacy work plan and issues for review, with applicable requirements confirmed for your business.

What's included

  • Privacy-program coordination
  • Records and policy review
  • Issue tracking and improvement recommendations

You stay in control

Sensitive privacy decisions and legal interpretation require appropriate review. Jurisdictions and covered activities are agreed.

Who it suits

Businesses needing a more consistent approach to personal information.

$700/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

AI Governance & Risk Mgmt

Define responsibilities and manage risks around business use of AI.

View what's included

CYBERSECURITY / À LA CARTE

AI Governance & Risk Mgmt

Establish clear rules for responsible AI use.

Develop the ownership, review and approval practices needed to govern AI within your business. The service connects identified AI use cases with risk records and practical operating rules. You receive a governance framework and actions to keep responsibilities visible as adoption changes.

What's included

  • AI-use policies
  • Ownership and approval rules
  • Risk tracking and review coordination

You stay in control

Your leadership approves policies and risk decisions. Review cadence and covered use cases are agreed.

Who it suits

Businesses expanding AI use across teams.

$900/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

AI Model Security

Address security risks affecting AI models and their use.

View what's included

CYBERSECURITY / À LA CARTE

AI Model Security

Address threats to your deployed AI models.

Assess and strengthen the security of supported AI models and their deployment interfaces. The service considers relevant misuse, manipulation and model-access risks within the agreed use cases. You receive findings and protective measures suited to the model environment.

What's included

  • Model security review
  • Relevant protective-control configuration
  • Findings and recommendations

You stay in control

Supported models and test methods are agreed. Model security does not guarantee every generated answer is correct.

Who it suits

Businesses deploying or operating AI models.

$700/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

AI Data Security & Privacy

Protect sensitive information used by AI systems and workflows.

View what's included

CYBERSECURITY / À LA CARTE

AI Data Security & Privacy

Protect information used by your AI workflows.

Examine and strengthen handling of data entering, leaving or supporting your AI systems. The service focuses on agreed prompts, outputs, datasets and their access paths. You receive visibility into relevant exposure and practical controls for covered data flows.

What's included

  • AI data-flow review
  • Handling and access controls
  • Exposure findings and recommendations

You stay in control

Covered data sources and permitted processing are agreed. Privacy-sensitive decisions are referred for review.

Who it suits

Businesses using sensitive information in AI workflows.

$500/mo

Monthly rate · 12-month contract

PROJECT SERVICE

AI Security Assessment

Assess security risks in your AI use and identify practical next steps.

View what's included

CYBERSECURITY / À LA CARTE

AI Security Assessment

Understand the risks in your AI use.

A scoped assessment reviews the AI tools and use cases identified for your business. It examines relevant data flows, permissions and security concerns before further adoption or changes. You receive findings and prioritized recommendations for the assessed tools.

What's included

  • Agreed AI inventory review
  • Risk and data-flow assessment
  • Prioritized findings

You stay in control

A one-time assessment of named tools and use cases, not automatic coverage of every AI system.

Who it suits

Businesses evaluating current or proposed AI use.

$4,500

One-time / project

MONTHLY SERVICE

Zero Trust Access Security

Apply identity and context checks to access decisions.

View what's included

CYBERSECURITY / À LA CARTE

Zero Trust Access Security

Make access depend on verified context.

Strengthen access decisions using identity, device and other supported context signals. The service applies agreed access policies rather than relying solely on network location. You receive configured controls and visibility into relevant access exceptions.

What's included

  • Access-policy design
  • Supported identity/context checks
  • Exception review

You stay in control

Connections and enforcement policies are agreed. Sensitive access changes follow approval rules.

Who it suits

Businesses managing access across distributed teams and systems.

$1,000/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

Privileged Access Mgmt

Strengthen oversight of accounts with elevated permissions.

View what's included

CYBERSECURITY / À LA CARTE

Privileged Access Mgmt

Strengthen control of powerful accounts.

Apply agreed controls to privileged accounts and the access they enable. The service helps limit unnecessary privileges and monitor supported administrative activity. You receive visibility into covered accounts, exceptions and recommended corrective actions.

What's included

  • Privileged-account scope review
  • Access controls
  • Monitoring and exception reporting

You stay in control

Covered systems, access approvals and emergency access procedures are agreed before changes.

Who it suits

Businesses needing stronger oversight of administrative access.

$400/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

Cloud Network Security

Strengthen network controls across your cloud environment.

View what's included

CYBERSECURITY / À LA CARTE

Cloud Network Security

Strengthen the boundaries in your cloud environment.

Review and configure agreed cloud-network controls to limit unnecessary exposure and movement between resources. The service focuses on the cloud environments and network paths in scope. You receive findings, configured protections where authorized and priorities for further improvement.

What's included

  • Network exposure review
  • Segmentation and access-rule work
  • Monitoring or review as scoped

You stay in control

Cloud accounts and change permissions are defined before work. Segmentation reduces risk; it does not guarantee containment.

Who it suits

Businesses operating cloud networks and connected workloads.

$700/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

AI Threat Detection & Protection

Identify and address threats involving your AI environment.

View what's included

CYBERSECURITY / À LA CARTE

AI Threat Detection & Protection

Watch for suspicious activity in your AI systems.

Monitor supported AI activity for relevant signs of abuse, manipulation or other threats. The service uses available signals and agreed detection rules to identify cases needing investigation. You receive alerts and scoped response guidance or protective actions where authorized.

What's included

  • Supported AI monitoring
  • Alert triage
  • Agreed response and escalation rules

You stay in control

Signal availability, monitoring coverage and response permissions are confirmed at setup. No claim to detect every AI attack.

Who it suits

Businesses needing operational oversight of AI-specific threats.

$800/mo

Monthly rate · 12-month contract

MONTHLY SERVICE

Secure Software Development

Bring security practices into your software delivery process.

View what's included

CYBERSECURITY / À LA CARTE

Secure Software Development

Build security into your development workflow.

Integrate agreed security checks into the way your team develops and releases software. The service identifies relevant weaknesses during development and helps route findings to the people who can address them. You receive development-focused findings and guidance within the supported toolchain.

What's included

  • Development security checks
  • Findings triage
  • Remediation guidance and workflow integration

You stay in control

Repositories, checks and release rules are agreed. Your team retains release authority; remediation ownership is defined at setup.

Who it suits

Teams building or maintaining software.

$600/mo

Monthly rate · 12-month contract

PROJECT SERVICE

Application Security Testing

Test an application's security and prioritize the findings.

View what's included

CYBERSECURITY / À LA CARTE

Application Security Testing

Identify weaknesses in a defined application.

Test a specific application using methods agreed for its scope and risk profile. The service examines relevant weaknesses and records findings that your team can investigate and address. You receive prioritized remediation guidance supported by the testing evidence.

What's included

  • Application scope confirmation
  • Agreed security testing
  • Findings and remediation guidance

You stay in control

Targets, authorization and methods are agreed. This item is not automatically identical to a full penetration-testing engagement; manual exploitation and retesting must be confirmed in scope.

Who it suits

Businesses preparing to release or improve an application.

$3,500/app

One-time / project · per application

4 / SPECIALIST ENGAGEMENTS

Specialist expertise.
Defined engagements.

Available by Engagement. Confirm requirements, boundaries and the appropriate specialist before work begins.

All fees in CAD. Starting fees apply to a defined scope. Final scope and fees are confirmed in your proposal.

Penetration Testing

A scoped engagement to test for exploitable weaknesses and prioritize remediation.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

Penetration Testing

Test how weaknesses could be exploited.

A scoped penetration test examines how an attacker could exploit weaknesses in the agreed systems or application. A qualified tester works within defined authorization and testing boundaries, documenting verified findings and their impact. You receive an evidence-based report with prioritized remediation guidance.

What's included

  • Agreed targets, testing boundaries and permitted methods.
  • Testing and exploitation attempts within that scope.
  • Evidence and impact descriptions for verified findings.
  • Prioritized remediation recommendations.
  • Specialist review of the final report.

Your involvement

Approve the scope and testing authorization before work starts. Remediation and retesting are included only where expressly scoped.

Who it suits

Businesses seeking a practical assessment for their security program or a customer or insurer requirement.

Per-engagement quotation. Testing is bounded in time and scope and does not establish that every weakness has been found.

From $7,500 per engagement

SOC 2 Type II Attestation

An engagement with a qualified CPA audit partner, scoped to your organization and reporting needs.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

SOC 2 Type II Attestation

Prepare evidence for an independent examination.

We help organize the controls and evidence needed for a scoped SOC 2 Type II engagement with a qualified CPA audit partner. Preparation and evidence coordination support the examination over the agreed period. The independent auditor performs the examination and determines the resulting report and opinion.

What's included

  • Readiness review against the agreed examination scope.
  • Identification of control and evidence gaps.
  • Evidence organization and coordination.
  • Support during the agreed observation and examination process.
  • Independent CPA engagement as defined in the proposal.

Your involvement

Your organization operates its controls and supplies accurate evidence. Preparation work does not guarantee a favorable audit opinion.

Who it suits

Businesses whose customers or stakeholders request independent assurance about scoped controls.

Readiness work and audit-partner fees must remain clearly distinguished in the existing pricing presentation. Confirm the reporting period and partner responsibilities before engagement.

Setup from $8,000 + annual engagement from $12,000

PCI-DSS QSA Assessment

A scoped assessment with a qualified QSA for your payment environment.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

PCI-DSS QSA Assessment

Assess your card-payment environment.

A qualified QSA assesses the agreed card-payment environment against applicable PCI DSS requirements. We help organize scope information, control mapping and supporting evidence for that assessment. You receive the agreed assessment documentation and a clear account of identified gaps and required follow-up.

What's included

  • Confirmation of the assessment scope and validation requirements.
  • Control and evidence review.
  • Evidence organization and gap identification.
  • Assessment by the qualified QSA.
  • The agreed assessment documentation and findings.

Your involvement

Supply accurate environment details and maintain required controls. Required validation documents and assessment approach are confirmed with the relevant payment stakeholders; do not describe this as a blanket legal license to process payments.

Who it suits

Businesses needing a QSA assessment of their card-payment environment.

Requirements and fees depend on the environment and validation scope, not merchant volume alone. No guaranteed compliance result.

From $10,000 per annual engagement

Certified Forensic IR

Specialist forensic investigation and incident response, with scope agreed for the incident.

View what's included

SPECIALIST ENGAGEMENT / SPECIALIST ENGAGEMENT

Certified Forensic IR

Investigate an incident and preserve its evidence.

A scoped forensic engagement investigates the available evidence of a security incident and documents what can be established. Qualified specialists preserve and analyze relevant material, develop a timeline and record findings and limitations. You receive a reviewed report to support recovery and discussions with relevant advisers or insurers.

What's included

  • Initial incident scoping and evidence-preservation planning.
  • Collection and analysis within the agreed scope.
  • Evidence-handling records and an incident timeline.
  • Findings, limitations and relevant response recommendations.
  • Specialist review of the final report.

Your involvement

Authorize access and coordinate with relevant technical, legal and insurance contacts. Availability and mobilization are confirmed for the engagement; do not promise immediate attendance or court/insurer acceptance.

Who it suits

Businesses needing specialist investigation and documented evidence after an incident.

Per-incident engagement; any retainer is separately scoped. Confirm the credential supporting the existing word 'Certified' before publication; if unavailable, flag the title for owner review instead of inventing a credential.

From $12,000 per incident

Optional retainer from $500/month · separately scoped.

Your clearest next step

The right protection begins with understanding what matters most.

Get Your Cyber Health ScoreBuild Your Scope