VAPT Service Engagement & Pricing Framework
gfxtm provides security assessments designed to help organizations understand their exposure, validate security controls, and prioritize remediation. Each engagement is scoped according to infrastructure size, complexity, and operational requirements.
| Service Tier | Focus & Methodology | Primary Deliverables | Pricing |
|---|---|---|---|
| Foundation (VA) | AI-assisted vulnerability analysis, automated scanning, and expert verification. | Verified Vulnerability Report & Remediation Roadmap. | Fixed-Scope Quotation |
| Comprehensive (VAPT) | AI-assisted identification and correlation, expert-led security validation, and authorized exploitation testing. | Technical Assessment, PoC & Attack-Path Analysis. | Asset-Based Quotation |
| Strategic (Expert) | Hybrid-Cloud Security, AI Governance, Infrastructure Risk & Architecture Audit. | Executive Risk Assessment & Security Improvement Strategy. | Custom Engagement |
Engagement Scoping Variables
To provide an accurate estimate, final engagement fees are based on the following:
Infrastructure Density: Total count of unique IP addresses, subdomains, and live endpoints.
Architectural Complexity: Presence of containerized environments or specialized legacy hardware.
Operational Risk: Requirements for testing within specific maintenance windows or on live production systems.
Compliance Frameworks: Reporting tailored for specific regulatory standards (e.g., HIPAA, PIPEDA, PCI-DSS). To perform an immediate self-assessment of your infrastructure, please use our PHIPA-PIPEDA Readiness Checklist. .
Pricing is based on an agreed scope. Remediation, additional testing rounds, and formal compliance certification are quoted separately.
DRP Service Engagement & Pricing Framework
gfxtm helps organizations prepare for infrastructure failures, data loss, and service interruptions through structured backup and disaster recovery planning.
| Service Tier | Focus & Methodology | Primary Deliverables | Pricing (CAD) |
|---|---|---|---|
| Foundation (Assessment) | Review of existing backup infrastructure, recovery procedures, and data protection strategy. | Backup Assessment & Recovery Gap Report. | Fixed-Scope Quotation |
| Integration (DR Planning) | Recovery architecture, application dependencies, RTO/RPO definition, and recovery procedures. | Disaster Recovery Plan & Recovery Runbooks. | Asset-Based Quotation |
| Advanced (Resilience) | Hybrid-cloud recovery architecture, automated recovery workflows, and controlled recovery validation. | Resilience Architecture & Recovery Validation Report. | Custom Engagement |
DRP Pricing & Scoping Variables
To provide an accurate estimate, final engagement fees are based on:
- Data Volume: Total Terabytes (TB) requiring backup, restoration, and integrity validation.
- Recovery Complexity: Number of interconnected applications, databases, and infrastructure dependencies.
- Infrastructure Type: On-premises hardware, cloud-native, or hybrid architecture.
- Recovery Objectives: Required Recovery Time Objective (RTO) and Recovery Point Objective (RPO).
- Compliance Requirements: Data protection, retention, encryption, and recovery documentation requirements.
Key Resilience Considerations
- Air-Gapped Backups: Immutable and isolated backup copies to reduce ransomware-related recovery risks.
- Cloud-Native DR: Leveraging containerized infrastructure and orchestration for service restoration.
- Healthcare Data Protection: Maintaining appropriate encryption, access controls, and privacy safeguards during data restoration.
- Recovery Validation: Regular restoration exercises to verify that backup strategies work as expected.
To perform an initial self-assessment of your infrastructure, please use the PHIPA-PIPEDA Readiness Checklist.
Implementation, cloud storage, hardware, software subscriptions, and ongoing backup management are quoted separately.
Network Infrastructure & Smart Home Integration Pricing
gfxtm provides network design and local infrastructure integration, combining reliable connectivity, security segmentation, and automation.
| Service Tier | Focus & Methodology | Primary Deliverables | Pricing (CAD) |
|---|---|---|---|
| Foundation (Network) | Network architecture, VLAN segmentation, IoT isolation, firewall configuration, and Wi-Fi optimization. | Network Diagram, Security Configuration & Documentation. | Fixed-Scope Quotation |
| Integration (Standard) | Home Assistant OS deployment, Zigbee/Z-Wave integration, device configuration, and core automations. | Local Dashboard & Mobile Access Setup. | Asset-Based Quotation |
| Advanced (Local AI) | Private LLM integration, local NVR with object detection, and local-first automation architecture. | System Documentation & Disaster Recovery Plan. | Custom Engagement |
Network & Automation Scoping Variables
- Infrastructure Size: Number of switches, access points, routers, connected devices, and network segments.
- Architectural Complexity: VLAN requirements, wireless coverage, PoE infrastructure, and integration with existing systems.
- Automation Density: Number of smart devices, communication protocols, and automation workflows.
- Computing Requirements: Local server capacity, GPU requirements, storage, and AI processing requirements.
- Privacy Requirements: Local processing, remote access restrictions, and cloud dependency requirements.
Hardware, cabling, software licences, and third-party subscriptions are excluded from the service price.
Assisted Living Technology & Privacy-First Automation Pricing
gfxtm provides technology integration to support independent living, environmental awareness, and privacy-conscious home automation.
| Service Tier | Focus & Methodology | Primary Deliverables | Pricing (CAD) |
|---|---|---|---|
| Safety Foundation | Occupancy sensing, activity monitoring, configured alerts, and caregiver notifications. | Monitoring Dashboard & Alert Configuration. | Fixed-Scope Quotation |
| Personal Health Data Integration | Integration of supported consumer health devices and local health-data logging. | Secure Local Health Data Dashboard. | Asset-Based Quotation |
| Privacy-First AI | Local AI voice assistance and consent-based sensor notifications without mandatory cloud processing. | Private AI Voice Interface & Local Automation. | Custom Engagement |
Safety & Privacy Scoping Variables
- Sensor Coverage: Number and location of occupancy, motion, environmental, and activity sensors.
- Device Integration: Compatibility with supported Bluetooth, Zigbee, Z-Wave, and ESPHome devices.
- Data Management: Local storage, retention policies, encryption, and authorized data access.
- Automation Complexity: Alert routing, caregiver notifications, and integration with existing home systems.
- Privacy Requirements: Local processing, explicit consent, and restrictions on external data sharing.
This service provides technology integration, not clinical monitoring, medical diagnosis, or a certified emergency-response service. Consumer sensors cannot guarantee detection of every fall or emergency.
General Pricing & Engagement Terms
- Currency: All prices are quoted in Canadian Dollars (CAD).
- Initial Consultation: A complimentary introductory discussion to understand project requirements.
- Technical Advisory: Starting at C$150/hour for consulting and technical planning.
- Fixed-Scope Projects: A final quotation is provided after reviewing the agreed requirements and deliverables.
- Hardware & Licensing: Hardware, third-party services, cloud subscriptions, and software licences are excluded unless explicitly specified.
- Additional Requirements: Work outside the agreed scope requires a separate quotation or approved change request.
- Taxes & Travel: Applicable taxes and additional travel expenses are quoted separately.