CinderRook pricing
PCI support that fits how you operate
Start with clear scope, then choose the operating support that keeps PCI evidence, ownership, and follow-through in motion.
Looking for practical PCI scope or operating support instead? Explore CinderRook services.
PCI Scope Clarification
Start here
A focused engagement for operators who need a defensible starting point.
Scoped quote
- Review of your payment flows, systems, and responsibilities
- Practical PCI scope map and assumptions
- Prioritized next steps for readiness work
- Clear handoff for internal owners and assessors
PCI Operations
A monthly retainer for teams that want PCI readiness to stay operational.
Custom monthly
- Recurring evidence and control-readiness support
- Working cadence for owners, reviews, and open actions
- Practical guidance as systems or responsibilities change
- Escalation support when the path forward is unclear
Discuss ongoing support
Retainer scope is shaped around your operating rhythm and responsibilities.
Trusted Partner
For multi-location or higher-complexity operators who need a closer working model.
Custom
- Operating model across locations, teams, or shared services
- Coordinated evidence and accountability across stakeholders
- Flexible support for complex changes and competing priorities
- A senior partner who can stay close to the work
- Practical scope guidance without assessment theater
- Clear owners, evidence expectations, and next steps
- Support shaped around your operating reality
Choose the right working model
Every engagement is practical and scoped to your operating reality. The difference is cadence, complexity, and how closely CinderRook works alongside your team.
| Features | PCI Scope Clarification | PCI Operations | Trusted Partner |
|---|---|---|---|
| Engagement format | |||
| Commercial model | One-time engagement | Monthly retainer | Custom partnership |
| Primary outcome | Scope map and next steps | Steady readiness operations | Coordinated operating model |
| Operating cadence | |||
| Working rhythm | Single engagement | Recurring monthly support | Tailored to the operating model |
| Evidence support | Action-plan handoff | Recurring readiness rhythm | Cross-location coordination |
| Operator complexity | |||
| Best fit | Unclear or changing scope | A team needing steady ownership | Multi-location or higher complexity |
| Ownership model | Your team owns execution | Shared operating support | Close coordination across teams |
| Formal-assessment boundary | |||
| Formal QSA assessment | Not included | Not included | Not included |
| Certification or sign-off | Not provided | Not provided | Not provided |
Pricing is quote-only because the right engagement depends on your payment flows, systems, locations, and operating responsibilities.