Fixed scope. Fixed fee.
Four productized CDA engagements with defined deliverables, a known timeline and a fixed-fee quote, delivered by named CDA practitioners.
Our products
Independent Cyber Risk Assessment
A fixed-scope, independent cyber risk assessment that tells an executive team in three weeks where the program stands against NIST CSF 2.0, what the exposure is worth in dollars, and what to fix first.
Explore SecureStart™ Cyber Risk AssessmentAnnual Security Review and Risk Assessment
The annual cycle that keeps a security program current: the same NIST CSF 2.0 assessment re-run each year, with remediation verified, the risk register refreshed and a new twelve-month roadmap.
Explore CyberAssess™ Compliance & CertificationManaged Cybersecurity Compliance — Operated End to End
CDA takes ownership of your cybersecurity compliance program and operates it — policies, controls, evidence, monitoring and audit coordination — under an annual subscription. Your people approve; CDA does the work.
Explore CyberComply™ Penetration Testing & Offensive SecurityAI-Driven Penetration Testing with Expert Validation
Autonomous offensive security that explores attack paths at machine speed, paired with CDA experts who validate every finding — proof of exploitation, compliance-ready reporting and one remediation retest included.
Explore CyberRecon™How they fit together
Start with a clear baseline, keep it current, operate compliance, and prove your defenses.
Establish the baseline
A three-week independent risk assessment against NIST CSF 2.0.
Refresh it every year
Verify remediation and measure progress on the same scale.
Operate compliance
CDA manages controls, policies, evidence and audit readiness.
Test what is exposed
AI-driven penetration testing, validated by CDA experts.
Test results feed compliance evidence
Each product can be scoped on its own. Build the combination that fits.
Every product
Every product lists exactly what you receive, before you sign.
Phases, durations and client time are set out up front.
Each engagement is scoped and fixed-fee quoted to your environment.
People do the work and sign the results. These are engagements, not software or licenses.
Need something outside these four? Our eleven service families cover tailored advisory, assessment, testing, leadership and resilience work.
Scoped and fixed-fee quoted to your environment