Foxx Cyber

Pricing

One price per system boundary.

Level 1 and Level 2 in every plan. No framework add-ons, no per-user fees, no headcount tiers — just the plan that matches who you are.

Small businesses

14 Day Free Trial

vCISO - Starter

$99.99/mo

per business

Start free

Virtual CISO Starter package

  • - Advice in your own words. Ask about a suspicious invoice, an insurer's questionnaire, a customer asking about security, or whether you need any of this
  • at all. Answers come back in plain language with the reason behind them, never in framework jargon.

Registered Practitioners

RP Partner Program

Free

with a partnership agreement

Apply for partnership

Bring your clients onto Bedrock and earn on every one of them.

  • RP workspace, client grants, and prospect sandboxes
  • Your own firm's compliance package included
  • 15% recurring commission on referred boundaries
  • Clients pay contractor pricing — nothing extra for them

C3PAOs

Self-hosted

Bedrock C3PAO

$4,800/yr

per instance, everything included

Get started

The self-hosted assessment platform for C3PAOs — one flat price per instance, everything included.

  • Self-hosted container, air-gap ready
  • Complete CMMC assessment workflow
  • Structured findings and report generation
  • Handoff from Bedrock CMMC packages
  • Seats and assessments included
  • 90-day pilot available

Prime contractors

Bedrock Flowdown

Bedrock Flowdown is a roster of your subcontractors' CMMC and DFARS status — SPRS scores, C3PAO certifications, annual affirmations, 7012 attestations — evaluated against the level each contract flows down. Subs update it themselves, by link. You get the roll-up and the audit trail. Learn more →

Contact us per prime

Talk to sales

Need more evidence room?

Every boundary includes 20 GB. Add a 25 GB block whenever you need it — it applies to every package in your organization, and you can cancel any time.

$10/mo per 25 GB block

In every plan

What you never pay extra for.

Level 1 and Level 2

Both CMMC levels and the full NIST 800-171 objective set. No framework add-ons.

Unlimited users

Your IT lead, your executives, your RP — everyone who needs to touch the package.

20 GB per boundary

Evidence storage that covers a typical Level 2 evidence set, expandable in blocks.

Assessor handoff

Hand the finished package to your C3PAO without exporting or rebuilding anything.

Continuous monitoring

Health score, review schedules, and overdue alerts between assessments.

Rev 3 migration

Move to NIST 800-171 Rev 3 side by side with your current package when you're ready.

Questions

How the pricing works.

What is a system boundary?

The set of systems you are getting assessed as one unit — one CMMC package in Bedrock. Most contractors have one. If you run separate enclaves that are assessed separately, each is a boundary.

Are users really unlimited?

Yes. Your IT lead, your executives, your RP — bring everyone who needs to touch the package. We never charge per seat.

What counts against storage?

Evidence files you upload. Controls, SSP text, POA&Ms and assets don't count. 20 GB per boundary covers a typical Level 2 evidence set; add 25 GB blocks if you outgrow it.

Can I change plans?

Add boundaries or storage from your account at any time; the change applies immediately. Cancel any time — you keep access until the end of the period you paid for.

What does the 15% RP commission apply to?

Every boundary a referred client pays for, for as long as they stay a customer. Your clients pay standard contractor pricing — the commission comes out of our side.

Sizing a multi-boundary contractor or an enterprise agreement? Ask us directly — we reply within one business day.