Why can't you give me a price before the call?

The fee depends on details a form can't capture, such as how many interfaces the device has, whether there's a cloud or app, and what evidence you already have. The call lets us scope it properly so the fixed fee is accurate.

Is the discovery call really free?

Yes. There's no charge and no obligation to hire us.

Who will I speak with?

A senior member of our team who works on medical device cybersecurity every day, not a salesperson reading a script.

What does fixed-fee mean?

The proposal states one price for the scope we agree on. If the scope doesn't change, the price doesn't change.

Should I share confidential details on the call?

Share what you're comfortable with. We can sign an NDA before going into design details.

What if I only need penetration testing?

That's fine. Penetration testing is one of our most requested services. Simple devices with no travel start at about $15k, and the call sets the exact fee.

Free 30-minute call

Book your discovery call

Tell us about your device. After the call, you get a written scope and a fixed-fee proposal, so you know the full cost before any work starts.

How it works

1
Book a time
Pick a 30-minute slot below. The call is free and there's no obligation.
2
Talk with a senior expert
We go over your device, its connections, your FDA pathway, your timeline, and what you already have.
3
Get a written scope
After the call, we write up exactly what the work covers, so nothing is left to guesswork.
4
Receive a fixed-fee proposal
The scope comes with one fixed fee. You know the full cost before any work starts.

What to have ready

A short description of the device and what it does
How it connects: Bluetooth, Wi-Fi, cellular, USB, cloud, or apps
Your FDA pathway (510(k), De Novo, PMA, or IDE) and target submission date
Any FDA letter or questions you've received
What you already have: threat model, SBOM, risk file, or test reports

Don't have all of it? Book anyway. We'll work through it together.

Ways to work with us

Pick a single project, a project followed by ongoing support, or ongoing support from day one.

Short term

One-time project

A fixed-fee project with a clear scope, such as a penetration test, threat model, or FDA premarket package. You approve the proposal before anything is billed.

Fixed fee after scoping

Short then ongoing

Project, then retainer

We deliver the project, then stay on to keep your threat model, SBOM, and risk file current through FDA questions, hospital reviews, and new releases.

Fixed fee, then monthly

Long term

Ongoing retainer

A senior advisor who already knows your device, available every week for decisions, reviews, and FDA or hospital questions.

Starting at $5,000 a month

About the MedTech Cybersecurity Advisory

FAQ

Why can't you give me a price before the call?: The fee depends on details a form can't capture, such as how many interfaces the device has, whether there's a cloud or app, and what evidence you already have. The call lets us scope it properly so the fixed fee is accurate.
Is the discovery call really free?: Yes. There's no charge and no obligation to hire us.
Who will I speak with?: A senior member of our team who works on medical device cybersecurity every day, not a salesperson reading a script.
What does fixed-fee mean?: The proposal states one price for the scope we agree on. If the scope doesn't change, the price doesn't change.
Should I share confidential details on the call?: Share what you're comfortable with. We can sign an NDA before going into design details.
What if I only need penetration testing?: That's fine. Penetration testing is one of our most requested services. Simple devices with no travel start at about $15k, and the call sets the exact fee.

Prefer to read first? See our FDA premarket cybersecurity services or medical device penetration testing.