Contact The Cyber Friend
Get a custom proposalAffordable Security Consulting for SMBs
The Cyber Friend is a Michigan-based cybersecurity consultancy serving small and medium businesses nationwide. I founded it in 2021, and today it has my full attention.
The problem I built it around is simple. Real expertise has always been priced for enterprise budgets. A full-time CISO costs $250,000 or more in salary alone, and large managed providers sell packages built for someone else, leaving growing businesses exposed and underserved.
What I do:
- CMMC Level 1 and Level 2 consulting for defense contractors and subcontractors, including gap analysis, System Security Plans, POA&Ms, and assessment readiness.
- vCISO and fractional CISO engagements on monthly plans, covering risk assessments, compliance guidance, policy development, and ongoing advisory support.
- HIPAA Security Rule assessments for healthcare providers and business associates.
- Risk assessments built on NIST CSF 2.0, NIST SP 800-171, and NIST SP 800-53, delivered with a prioritized remediation plan.
- Vendor risk management, security awareness training, tabletop exercises, and human-reviewed phishing email analysis.
Part of my work comes through managed service providers who bring me in for compliance depth their teams do not carry. I have built out security programs for MSPs directly and delivered CMMC readiness alongside them for their clients.
I hold CISM, CMMC Registered Practitioner, and Registered Practitioner Advanced credentials, as well as CompTIA Security+, plus a master's degree in cybersecurity and information assurance. The Cyber Friend is listed on the Cyber AB Marketplace.
How this works. You work with me directly, month to month, with 30 days' notice to cancel. No sales handoffs, no junior analysts, no rotating consultants. I cap my client load so nobody becomes a number. If a lighter engagement fits your situation better, or your organization is large enough that an agency would genuinely serve you well, I will tell you that before you sign anything.
-
Min project size
$1,000+
-
Hourly rate
$100 - $149 / hr
-
Employees
Freelancer
-
Year founded
Founded 2021
Service Lines
- Compliance Consulting
- 40%
- Cybersecurity
- 30%
- Business Continuity Management
- 10%
Select Focus Area
- Business Continuity Services
-
- Emergency Preparedness
- 40%
- Business Impact Analysis
- 30%
- Disaster Preparedness
- 30%
- Compliance Consulting
-
- Cybersecurity focus
-
- Digital and IT Strategy Consulting Focus
-
- Virtual CIO Services
- 50%
- IT Governance
- 40%
- IT Assessment
- 10%
Industries
- Manufacturing
- 45%
- Medical
- 25%
- Information technology
- 20%
- Government
- 10%
Clients
- Small Business (<$10M)
- 90%
- Midmarket ($10M - $1B)
- 10%
Have you worked with The Cyber Friend?
Share your experience working with The Cyber Friend on a past project by leaving a review for buyers around the world
Our Story
I started The Cyber Friend in 2021 while working in security operations because I kept watching small businesses get priced out of real help. Today it has my full attention.
I work as a vCISO and CMMC Registered Practitioner (Advanced), guiding manufacturers, software companies, healthcare practices, and MSPs through CMMC, HIPAA, and NIST frameworks.
One practitioner by design. You get the person doing the work on month-to-month terms and an honest answer every time.
Meet the Team
Sam DursoFounder & CEO
Sam holds an MA and a BS in Cyber Security and has worked across MSPs and MSSPs as a Compliance Specialist, CSO, vCISO, Security Consultant, and Security Analyst. He holds CISM, CMMC RP, and RPA, and CompTIA Security+ credentials.
What Sets Us Apart
IT Providers Hire Me for Security Work
Sam handles every engagement personally. No junior staff handoffs, no rotating consultants who need to re-learn your business. Clients get a CISM-certified, master's-level professional who already knows their systems, goals, and risk profile.You Work With the Practitioner, Every Time
I handle every engagement personally. No junior staff handoffs, no rotating consultants relearning your business. I also cap my client load, so you are never one of hundreds. You get someone who knows your systems, your goals, and your risk profile.I Will Tell You When You Do Not Need Me
Everything is month-to-month with 30 days' notice. If you are paying for a tier you barely use, I will move you down. If your organization is large enough that an agency serves you better, I will say so before you sign. No scare tactics and no invented statistics.
Contact The Cyber Friend
If you’re not seeing exactly what you need here, send this company a custom message. You can talk about your project needs, price, and timeline to get started on your project.
Sign in to see which brands trust The Cyber Friend.
Get connected to see updates from The Cyber Friend like new case studies, latest reviews, their latest masterpieces in their portfolio, delivered straight to you.