Four services for businesses, each with a fixed price in writing.

A build, the infrastructure under it, someone to run it every month, and a security review for what already acts on your systems. Prices are on this page in USD. Every one starts with a written plan and ends with a handoff you own.

The four services

Pick the one that matches where you are. If it is not obvious, the section below sorts it out.

AI agent and automation build

from $2,500 USDtypically $2,500 to $6,000

An agent or workflow that does one job end to end on Shopify, Meta, Google Workspace, your CRM, or your database. Fixed price agreed before work starts.

  • Spec with acceptance criteria you approve first
  • Verification on real data with the evidence attached
  • Security pass before it runs unattended
  • Handoff docs and runbook, you own the code and prompts
Agent build

Infrastructure cleanup and migration

from $1,500 USDmigrations from $3,000

Cloud, identity, email, and access put in order: Google Workspace and Microsoft 365 admin, tenant and email migrations, connected-app review, offboarding gaps.

  • Read-only inventory first, then approved fixes
  • A written report with evidence for every finding
  • Access map of who can reach what, after the work
  • Migrations with a stated downtime window
Infrastructure

AI Ops retainer

from $1,500 USD a monthtiers $1,500 / $2,500 / $5,000

Someone runs, fixes, and keeps secure the agents and automations you already have. Hours capped in writing, no surprise invoices.

  • Monitoring and fixes for what is already running
  • Small changes inside the monthly cap
  • Monthly written report and a security re-check
  • Month to month, the runbook stays with you
AI Ops retainer

AI agent security review

from $2,500 USDthe plan sets the final quote

A scoped review of one agent system: what it can read, send, delete, and pay for; tool and connector exposure; prompt-injection paths. Mapped to the OWASP Agentic Top 10.

  • Findings ranked with evidence and a fix for each
  • Six checks: scopes, secrets, actions, inputs, connectors, gate
  • Read-only access plus a sandbox copy where possible
  • Fix pass quoted separately or done under a retainer
Security review

Which one you need

Four situations, four answers. Send the situation in writing if none of them fits and the plan will say which service, or that it is not a fit.

You want something built

A report that writes itself, a monitor that pages someone, a sync between two systems, a workflow that runs without a person pushing it. That is an agent build. It ships with a security pass, so the build and the review are one price.

The tools under it are the mess

Admin roles nobody remembers granting, an old tenant to leave, mailboxes to move, connected apps with more access than anyone meant to give. That is infrastructure. Automation built on top of a mess inherits the mess, so this often comes first.

It exists and nobody owns it

Agents and automations someone built, maybe a contractor who left, maybe a tool that grew. They run until they do not. The AI Ops retainer starts with a review of what is there, then owns it month to month.

It acts on real systems and you need to know what it can do

An agent that reads customer email, touches money, or writes to production, or a customer asking you to fill in a security questionnaire about it. That is the agent security review.

What every service includes

The same six steps every time. They are what make a fixed price possible.

  • A written plan within two business days of your message, with a fixed price and what is out.
  • A spec with acceptance criteria that you approve before anything is built or changed.
  • Verification with evidence: real runs on real data, screenshots, logs, and the checklist, attached to the handoff.
  • A security pass: the six checks (scopes, secrets, actions, inputs, connectors, gate) written down.
  • Handoff documentation: what was built or changed, an access map, and the runbook. You own it.
  • Least access, removed at the end unless you keep VXSec on a retainer. Admin actions are logged and reported.

Questions about prices

Which currency?

USD, for clients in the US and Canada. Canadian clients can be invoiced in CAD at the rate stated in the written plan.

What does "from" mean?

The lowest price that service has been quoted at. The typical range is on each page along with the one thing that moves the price most. Your written plan carries one number, and that number does not change unless the scope does.

What happens if the scope grows?

New work gets its own written line with its own price before it starts. Nothing is added to an invoice that was not agreed in writing first.

How is payment handled?

Payment terms are in the written plan, agreed before work starts. Retainers are billed monthly in advance.

Do you do smaller jobs?

Single workflows below the build floor get bundled into a build or declined with a note on who might fit better. Small fixes to something VXSec already runs are covered by the retainer.

Send the problem in writing.

What you are running, what is wrong or what you want built, and links if you have them. A plan and a fixed price come back within two business days.

Or email [email protected] directly.

  • You send: the tools involved, what should happen, what happens instead.
  • You get back: a plan in plain words, a fixed price, what is out, and how it will be verified.
  • Then: a call if you want one, or straight to the spec.