Interactive tools.

Why we publish these

Most vendor calculators are marketing dressed as math. The numbers are set to make the vendor look cheaper, the assumptions are hidden two layers deep, and the output is a PDF that lands in procurement with no audit trail. That is not useful. The tools on this page run entirely in your browser, show their work, and use default cost ranges drawn from engagements we actually priced and delivered. You can change every input. Nothing is sent to us unless you decide to start a conversation about the output.

The other reason these exist is that we get asked the same three questions every week: in-house SOC vs. MDR, CMMC and AI governance readiness, and PCI scope. Writing the answer once in a tool that anyone can run is more honest than charging a retainer to answer it again in a slide deck.

How to use the output

Treat every number as directional. A TCO calculator cannot see your specific contract terms, your specific ramp curve, or the political cost of a failed in-house build. A readiness quiz cannot substitute for a gap assessment against documented evidence. A scope analyzer cannot replace a QSA review of your actual network diagram. What these tools do is get you to a shared starting point with whoever signs the check. The next conversation is then about the gap between the estimate and reality rather than starting from scratch.

If you want to pressure-test the output against your environment, the button at the bottom of every tool routes to a 30-minute working session with one of our engineers. No deck, no discovery call template (the tool output is the discovery). Indicative managed-services pricing is published if you want to translate tool output to a budget conversation before the call.

What the tools do not do

None of these produce a procurement-grade number on their own. The TCO model does not price in-kind contributions (office space, shared IT overhead, benefits load variance by geography). The CMMC quiz does not produce an SSP or POA&M. The PCI analyzer does not substitute for a QSA ROC or a SAQ-D self-assessment. They are decision aids for the first conversation, not the last one. If a vendor hands you a single-page calculator output and tells you the procurement decision is done, that is the signal to ask a harder question. For real engagements see our case studies and the US AI Vendor Governance Index.