A sequential engagement path, scoped around the work.
01 / Discovery
Discovery — Process Mapping
$2,000 kickoff + $500/mo
Kickoff, then monthly
Map the job and open the client desk. The $2,000 is kickoff only; $500/month keeps Discovery alive; catalog modules are extra.
Process map + ROI ranking
Privacy/HIPAA-aligned and SecOps gap analysis
Architecture blueprint
Brand/collateral audit
Module add-ons, including redesign of an existing site ($8,000–$24,000), are not inside the $2,000
02 / Engine
Engine — Build & Deploy
$24,500–$48,000 one-time
6–8 weeks · optional milestones
Build the governed system, supporting brand, and operating assets inside the client stack.
Brand kit + web + stationery files
Custom AI in their stack
HIPAA-aligned boundaries, audit log, RBAC, CI/CD
Docs + 30-day hypercare
03 / Governance
Governance — Maintain & Evolve
$3,500–$8,500 / month
12-month agreement
Maintain the system, oversee risk, and keep process and brand work moving.
Model/system care
SecOps oversight
Monthly hours for process work
Monthly hours for marketing/stationery
Coming later Oruanyi toolbox $299–$899/mo. No purchase path in this release.
Scope by stage
Compare the engagement path.
Capability
Discovery
Engine
Governance
Process mapping
Included
Included
Add-on
Architecture blueprint
Included
Included
Add-on
Brand + web
—Not included
Included
Add-on
Stationery/marketing files
—Not included
Included
Included
Custom AI in their stack
—Not included
Included
Add-on
HIPAA-aligned controls
—Not included
Included
Add-on
SecOps-aligned monitoring
—Not included
Add-on
Included
CI/CD
—Not included
Included
Add-on
Data governance
Add-on
Included
Included
Training/handoff
Included
Included
Add-on
Ongoing retainership hours
—Not included
—Not included
Included
Client-supplied directional context, not an independently verified market-average study: enterprise FDE programs can reach $500k–$2M+; AI boutiques may be thinner on brand; studios may be thinner on governed AI.
The operating sequence
The engagement follows the work.
01DISCOVER
02MAP
03DESIGN
04SECURE
05BUILD
06DEPLOY
07GOVERN
08IMPROVE
PHP security
Scan, report and fix a PHP site.
For PHP and WordPress sites. A one-time security engagement, separate from Discovery and Engine. An Oruanyi engineer checks the site by hand, with your permission.
PHP Scan and vulnerability report
$499 non-refundable
Your exact PHP version is checked against PHP2Shell and your host’s build, then you get a written report with recommended fixes, usually one business day after ownership is confirmed and access is granted.
PHP Scan and Fix
$2,499
Fixes PHP2Shell or another critical PHP issue the scan finds. The written quote confirms the terms before any work starts.
The website owner or the management person in charge of authorization must be the point of contact to engage.
Last updated . Planning figures; a person reviews the final scope, agreement and invoice.
Offer
Price
Notes
Discovery — Process Mapping
$2,000 kickoff + $500/month keep-alive
The keep-alive retainer keeps Discovery alive; it is not Engine.
Engine — Build & Deploy
$24,500–$48,000 one-time
Builds the agreed system in your environment, typically in six to eight weeks.
Governance — Maintain & Evolve
$3,500–$8,500/month
Usually after Engine hypercare or a written review of an existing system.
Redesign of an existing site
$8,000–$24,000
Catalog module; not inside the $2,000 Discovery kickoff.
Passive website scan (/scan)
Free
Public pages only, after you confirm by email.
PHP Scan and vulnerability report
$499, non-refundable
Written vulnerability report for a PHP or WordPress site. A one-time security engagement, not Discovery or Engine.
PHP Scan and Fix
$2,499
Fixes PHP2Shell or another critical PHP issue the scan finds; the written quote confirms terms before work.
PHP security engagements: The website owner or the management person in charge of authorization must be the point of contact to engage.
Clear before work begins
How you pay
Engagements are invoiced. ACH Direct Debit is the default. Cards may include a processing surcharge on invoices over $5,000 where permitted by law. Debit and prepaid cards are never surcharged.
Invoices over $5,000 require ACH unless Oruanyi grants a written exception. Bank transfer avoids card-network fees on high-ticket work.
FAQ
Questions before an engagement.
01How do payments work?
Oruanyi invoices engagements. ACH Direct Debit is the default for Discovery, Engine, and monthly Governance drafts. Invoices over $5,000 require ACH unless Oruanyi grants a written exception. Bank transfer avoids card-network costs on high-value work. As an illustration, ACH on a $25,000 invoice is typically a few dollars, while a card fee can run into hundreds depending on the actual cost of acceptance.
02When can a credit-card surcharge apply?
Only credit-card transactions may be considered, with advance disclosure and a separate line item on the invoice and receipt. Oruanyi caps any surcharge at the lower of its actual cost of acceptance or 3%. Debit and prepaid cards are never surcharged. Oruanyi does not surcharge clients in Connecticut, Maine, or Massachusetts. Colorado and Oklahoma are capped at 2% unless a lower limit applies. New York clients receive the full dollar-and-cents card total before payment. California commercial engagements still receive advance disclosure as Oruanyi policy. Fee-free ACH remains available.
03What does HIPAA-aligned mean?
It means the workflow is designed with relevant privacy, security, access, logging, and human-oversight safeguards in mind. It does not mean Oruanyi certifies the client, acts as the client’s covered entity, or guarantees compliance. Final obligations remain specific to the client, its role, and its legal guidance.
04Who owns the intellectual property?
The statement of work defines ownership before delivery. Clients receive the contracted deliverables and implementation rights. Oruanyi retains its pre-existing methods, reusable tools, and general engineering knowledge unless the written agreement says otherwise.
05Does Oruanyi handle print fulfillment?
Yes when included in the statement of work. Oruanyi can coordinate production-ready files, proofing, production, and delivery without making a specific production vendor part of the public engagement promise.
06Can we purchase Discovery only?
Yes. Discovery only is a valid engagement: a $2,000 kickoff plus the $500 per month keep-alive retainer. You receive the process map, ranking, gap analysis, blueprint, and audit described in the scope. Catalog modules, including redesign of an existing site at $8,000–$24,000, are add-ons and are not inside the $2,000. A later Engine build is a separate decision.
07When does a Governance retainer begin?
Governance normally begins after an Engine deployment and its 30-day hypercare period, or after Oruanyi reviews an existing system and accepts a maintenance scope in writing.
08Do we have to buy all three stages?
No. Map → build → govern is the recommended sequence, but each engagement is scoped in writing. Oruanyi may begin with Discovery, accept a qualified build based on existing discovery work, or govern an existing system after review.