NorthSecure AI's published starting prices range from $995 CAD for a limited External Security QuickCheck to $7,500 CAD for a typical standard Complete Security & AI Readiness Assessment. These are NorthSecure's own prices, not a Canadian market average or a quote for your organization. A smaller, simpler combined engagement starts at $4,950 CAD. Final scope is agreed before work begins.

Five starting points by buyer question

  • What is visible from our public domain? External Security QuickCheck: up to one public domain and a prioritized summary. From $995 CAD.
  • How is Microsoft 365 configured? Microsoft 365 Security Assessment: a read-only identity, sharing, email, device, and domain review; entry tier up to 25 users. From $1,995 CAD.
  • What needs attention across defined public-facing systems? External Security Assessment: analyst review, executive report, technical appendix, and roadmap. From $2,500 CAD.
  • What are our broader business security risks? Cybersecurity Risk Assessment: governance, people, technology, vendors, incident readiness, and a risk register. From $5,500 CAD.
  • How do security, Microsoft 365, and workplace AI fit together? Complete Security & AI Readiness Assessment: relevant components selected for an agreed engagement. Smaller, simple environments from $4,950 CAD; typical standard engagements from $7,500 CAD.

These are different scopes, not a ladder of upgrades. The combined assessment's $4,950 starting point does not include every item in each standalone service. Ask for a written scope and deliverables before comparing totals.

What changes the price?

  • The decision and deliverable. An exposure snapshot answers a narrower question than a leadership-ready risk register and 30/60/90-day plan.
  • The environment. Tenant user count, number of public domains and IPs, and business units or locations affect review effort.
  • The evidence available. Policies, asset lists, vendor records, and access to the right stakeholders help define the scope.
  • Workplace AI use. Copilot, ChatGPT, sensitive-data handling, vendor choices, and approved-tool rules require an agreed governance scope.
  • Depth of follow-up. Name technical appendices, leadership briefings, and a remediation roadmap in the proposal if you need them.

Compare proposals by the systems and people in scope, evidence reviewed, deliverables, and exclusions as well as price.

Which assessment should you request first?

Focused external review: choose this when your public-facing footprint is the immediate concern. NorthSecure's testing is authorized, controlled, and non-destructive; it is not a penetration test.

Microsoft 365 review: choose this when access, sharing, email, device, or domain configuration is the decision. The entry tier covers up to 25 users.

Broader risk review: choose this when leadership needs priorities across governance, people, technology, vendors, and incident readiness.

Combined security and AI assessment: choose this when the questions are connected and you need one scoped roadmap. Agree on the relevant portions of external security, Microsoft 365, AI governance, risk review, and policy readiness first.

What to send before asking for a quote

A short brief is enough: your Canadian organization size, Microsoft 365 user count if relevant, approximate public footprint, workplace AI use, the event driving the review, and the decision deadline. Do not send passwords, sensitive client data, or detailed security findings through the inquiry form.

Request a scoped assessment. If you are unsure which review fits, describe the decision you need to make and ask for a recommended scope.

Frequently asked questions

Is $995 CAD enough for a full cybersecurity assessment?

No. NorthSecure's $995 External Security QuickCheck is a limited snapshot for up to one public domain. A broader risk or combined review has a different scope and starting price.

Is a security assessment the same as a penetration test?

No. NorthSecure's security assessments are authorized, controlled, and non-destructive. They are not penetration tests.

Does a Microsoft 365 review change our settings?

The published Microsoft 365 Security Assessment is read-only. It reviews identity, sharing, email, device, and domain configuration. Any follow-on changes need a separate scope.

Does the combined assessment include every standalone service?

No. It selects relevant components for an agreed scope. Smaller, simple environments start at $4,950 CAD; a typical standard engagement starts at $7,500 CAD. Request a written scope and price for your environment.