Windows laptops · Macs · Linux servers

Fixed-price baseline for Windows laptops, Macs and Linux servers

Score your machines in two minutes. See the price before anyone calls you.

We set each machine so people can do their jobs and nothing else: no admin rights for daily work, installs from an approved list, AI tools you signed off on, and encrypted disks with keys you hold.

Step 1 of 5 Machines

Which machines should we check first?

Pick one. Running more than one kind? Score the one that worries you most, then come back for the next.

Windows laptops Windows 10 or 11. Desktops count too.
Macs MacBooks, iMacs, Mac minis.
Linux servers Ubuntu, Debian, RHEL and the rest, in the cloud or a closet.

No email until step 5.

What least privilege stops

Least privilege means every account, app and server gets the access its job needs and no more. On machines people use every day, that shuts four things down.

Privilege escalation

One phished account stays one account. Without admin rights for daily work, whatever someone clicks runs with the same limits they have.

Unsanctioned AI

Company files go to the AI tools you approved, not to whichever browser extension offered to summarise them.

Shadow IT

Every app on every machine is one you know about, because installs come from a list instead of a download button.

Data leakage

A lost laptop costs you a laptop. The disk is encrypted, the recovery key is yours, and USB sticks need permission.

How it works

From the first question to locked-down machines, in three steps you can stop after.

  1. 1

    Score it

    Pick the machine type, say roughly how many, and answer yes, no or not sure. The score, your biggest gaps and a price range appear on the spot.

  2. 2

    Check it

    Ask for the fix plan and we look at one machine with you, read-only, so the plan matches what is installed. You get a fixed price within one business day.

  3. 3

    Fix it

    PCDrama applies the baseline machine by machine and hands over the list of settings it changed, so the next person to touch those machines starts from a known state.

Baseline and harden these machines: the price list

Two prices for every machine count. New machines cost less because there is nothing to work around yet. A mix of new and in-use machines is priced as in use.

New machines, set up from scratch

Nothing is in daily use yet, so we build the baseline in before anyone logs in.

1 to 9 machines
$2,500 to $4,500 1 week
10 to 25 machines
$5,000 to $8,500 2 weeks
26 to 100 machines
$9,000 to $18,000 3 to 4 weeks
More than 100 machines
Fixed quote within one business day

Machines already in use

People are working on them today, so we find what is there first and harden around the work.

1 to 9 machines
$4,000 to $7,500 2 weeks
10 to 25 machines
$8,000 to $15,000 3 to 4 weeks
26 to 100 machines
$15,000 to $32,000 5 to 8 weeks
More than 100 machines
Fixed quote within one business day

What we change on each machine

The price covers every item on the list for the machine type you scored.

Windows laptops

  • Local accounts and admin rights
  • Disk encryption and recovery keys
  • Update, firewall and endpoint protection policy
  • App, browser extension and AI tool controls
  • USB storage and cloud sync rules
  • The image you rebuild from
More on Windows laptops →

Macs

  • Admin and standard accounts
  • FileVault and recovery key escrow
  • MDM enrolment and configuration profiles
  • App, browser extension and AI tool controls
  • USB storage and cloud sync rules
  • Offboarding and wipe
More on Macs →

Linux servers

  • SSH, root and sudo access
  • Firewall rules, inbound and outbound
  • Automatic security updates
  • Running services and who owns them
  • Log shipping and file integrity
  • Backups and restore tests
More on Linux servers →

Common questions

What does the score measure?

Which least-privilege controls are in place on your machines, weighted by how much damage each missing one allows. It comes from your answers alone, so it is a first read, and "Not sure" counts as a gap.

Do you need access to our machines to score them?

No. The score runs on your answers and nothing gets installed. Access comes later, for the read-only check, and only if you ask for the fix plan.

We run Windows laptops and Macs. Which do I pick?

Score each one on its own; every machine type has its own questions. For pricing, a mix of new and in-use machines counts as machines already in use.

What if we have more than 100 machines?

There is no published price at that size. Tell us the count and we send a fixed quote within one business day.

Who does the work?

PCDrama, the security firm behind OS Machine. OS Machine finds the gap and PCDrama fixes it, reachable at the number at the bottom of this page.

Two minutes from here to a price.

OS Machine finds the gap. PCDrama fixes it.