Build Secure Packages
Compare Launch, Scale, and Enterprise packages. Request custom pricing or book a workshop to find your fit.
Not sure which package fits your team?
Book a Build Secure WorkshopBuild Secure Packages
Choose the package that fits your engineering team's stage of growth. Every package is tailored to your needs.
- Secure engineering foundations (SDLC, code review, threat modeling)
- Developer enablement to build security habits
- A practical, prioritized starting roadmap
- Everything in Launch
- DevSecOps and release security integrated into CI/CD
- Continuous secure engineering and supply-chain controls
- Everything in Scale
- AI-assisted development and secure AI systems engineering
- Security champions, governance, and maturity programs
Which package fits your team?
Enter a few engineering metrics — we map them to Launch, Scale, or Enterprise using the same drivers we use in workshops.
Pricing driver reference
| Capability | Launch | Scale | Enterprise |
|---|---|---|---|
| Applications | 1–5 | 6–20 | 20+ |
| Repositories | 1–10 | 11–50 | 50+ |
| Developers | 5–25 | 26–150 | 150+ |
| CI/CD pipelines | 1–5 | 6–25 | 25+ |
Based on Build Secure pricing drivers. Final scope is confirmed in a workshop or proposal.
Package comparison
| Capability | Launch | Scale | Enterprise |
|---|---|---|---|
| Secure SDLC baseline | Included | Included | Enterprise-wide |
| Architecture review | Light | Priority systems | Architecture board support |
| Threat modeling | Light | Product-level | Program-level |
| Secure code review process | Basic | Full workflow | Enterprise standard |
| Developer security enablement | Basic | Role-based | Champions + continuous enablement |
| DevSecOps setup | Basic | Advanced | Enterprise standard |
| CI/CD pipeline security | Basic | Advanced | Enterprise policy |
| Software supply chain security | Basic | Included | Full governance |
| AI-assisted development security | Optional | Included | Advanced |
| AI coding policy | Basic | Included | Enterprise governance |
| Secure AI SDLC | Optional | Optional | Included |
| Security champions | Intro | Program design | Program operation |
| Secure Engineering as a Service | Optional | Retainer | Dedicated model |
| Reporting | Summary | Monthly dashboard | Executive dashboard |
| Maturity review | Optional | Quarterly | Quarterly + annual roadmap |
What determines your package scope
Final pricing depends on engineering scope — not a fixed price list. We use the parameters below in workshops and proposals.
More applications increase design review, threat modeling, and release-gate coverage.
Repository count drives toolchain rollout, policy-as-code breadth, and supply-chain monitoring.
Developer count shapes training cadence, champions coverage, and coaching capacity.
Pipeline count and complexity determine DevSecOps integration and SLSA maturity effort.
Platform choice affects integration patterns, native security features, and rollout playbooks.
Stack diversity influences secure coding baselines, scanner selection, and lab design.
Higher criticality requires stronger gates, evidence, and review depth.
AI tool adoption adds policy, validation, and PR-review scope beyond traditional AppSec.
AI products require Secure AI SDLC, model/data controls, and agentic security engineering.
Compliance drives reporting cadence, evidence packs, and maturity program depth.
Existing capability changes how much enablement vs operated service you need.
Commercial structure is setup fee + monthly retainer; scope follows support level.
Questions we ask to recommend a package
Share these details in a Build Secure Workshop or your request form so we can map you to Launch, Scale, or Enterprise.
- How many applications are in scope?
- How many repositories do you maintain?
- How many developers contribute code regularly?
- Which CI/CD platform do you use (GitLab, GitHub, Bitbucket, Azure DevOps, other)?
- How many CI/CD pipelines need security integration?
- Do your developers use AI coding tools (Copilot, Cursor, ChatGPT, etc.)?
- Are you building AI-powered products (LLM, RAG, agents)?
- Do you need compliance evidence or audit-ready reporting?
- Do you already have an AppSec team or security champions program?
- Do you need one-time setup or ongoing support (retainer)?
What affects pricing
We do not publish fixed prices. Your proposal depends on scope and complexity.
Number of developers, squads, and products in scope affects enablement depth and coaching cadence.
More repos and apps require broader toolchain integration and governance models.
Platform choice, number of pipelines, and release frequency drive DevSecOps and release security effort.
Use of AI coding tools and AI-powered products determines AI governance and secure AI SDLC depth.
Regulated industries and audit cycles increase reporting, evidence packs, and maturity program scope.
One-time setup vs ongoing retainer vs dedicated pod — each maps to a different commercial structure.
Contact us for a tailored proposal based on your engineering context.
Extend your package
Extend your Build Secure package with specialized services.