Netskope professional services

Every Netskope engagement, one architect-led partner.

From a single-day tune-up to a multi-region rollout, and the run-state that follows. Fixed-price where the outcome is clear, time and materials where it isn't, and a senior Netskope Architect on every one.

SWG · CASB · DLP · DSPM · NPA · UEBA · Enterprise Browser · AI Security Architect-led delivery, every engagement
The engagement lifecycle

Four stages, from project to run. One delivery standard.

Most engagements move left to right: a targeted fixed-price start, a full implementation, retained capacity for the work that flexes, then managed run-state. Start at whichever stage fits today. Every one is scoped by a Co-Director and delivered by a senior Netskope Architect.

Principle 01

Priced ahead of time

Fixed price at scoping, or a transparent day rate for T&M. No surprises, no padded reports.

Principle 02

Shipped in days

Tune-ups finish within a week. Platform projects close within three. Run-state keeps improving.

Principle 03

Always an artefact

Every engagement leaves a document, a configuration change, or a tested artefact. Nothing is purely advisory.

Principle 04

No lock-in

We design, build and hand over a platform your team can run. Stay for run-state only if you choose to.

Fixed-price engagement catalogue

Seventeen engagements, priced ahead of time.

Every offer is delivered by a senior Netskope Architect, scoped for outcome, and calibrated at $2,500 per architect day. No retainer required, no minimum spend, no change-request wrapper. All prices AUD, ex GST.

Prices shown are starting points. A scoping consultation confirms your scope and final price before any work begins.

Plan it as one programme

Engagements combine well: Lightning Audit into Shadow AI Hunt into an Architecture Documentation Sprint. Commit to any three Expert Sprint or Platform Project engagements together and we sequence them as a single coordinated programme, with more delivered capacity per dollar committed. If an engagement reveals scope beyond the fixed boundary, a small follow-on is offered at the same transparent day rate. Never a surprise.

All pricing on this page is starting-from pricing, AUD ex GST. Your price is fixed at a scoping consultation, then it does not move. Book the conversation.

Implementation

Two delivery models. One scope of work.

Every Netskope rollout delivers the same technical outcome. The work breakdown, the policies and the tenant architecture are identical. What changes is how much of the lift your team carries, and every engagement ships under a fixed-price ceiling defined in a Statement of Work before we start. If we run over our estimate, that is our risk, not yours.

Guided

You lead your environment.

Cornerstone owns the architecture and tuning that decide the outcome. Your team runs the commodity work, with our playbook and our eyes on every step.

Best when

  • A capable IT team wants to own the platform after handover
  • You want enterprise-grade expertise without outsourcing control
  • Budget discipline is a priority and internal capacity is available
Managed

You sign off the scope. We deliver it.

Cornerstone runs the whole engagement and absorbs the commodity work, adding a Transition phase: Learning Mode, pilot, wave-based cutover and hypercare. Your team signs off at Discovery and Design and stays on BAU.

Best when

  • Internal operational bandwidth is limited or already committed
  • You want a white-glove rollout with minimal disruption to BAU
  • Speed of clean delivery matters more than internal knowledge build

Three tiers, matched to your starting point

Tier 1 · Launch4 to 6 weeks

New build

New to Netskope, nothing to migrate. Greenfield, single site and IdP, policy from the Cornerstone baseline, under 500 seats.

Tier 2 · Switch6 to 10 weeks

Single cutover

Replace a legacy SSE, proxy or VPN in one decisive cutover, no parallel run. Standard IdP and MDM, 500 to 2,000 seats.

Tier 3 · Shift10 to 12 weeks

Phased migration

Multi-wave migration with parallel running, complex policy or regulatory overlay, multi-site or multi-IdP, 2,000+ seats.

Fixed-price starting points · from pricing at the 500-seat Launch baseline, AUD ex GST

Documentation, optional by default

As-Built $3,750 and High-Level Design $2,500 are included by default; Detailed Design $5,000 and a 4-hour operator training handover $1,250 are optional. Don't need one? It comes straight off the quote.

Project management

13.5 setup hours plus 4 hours per engagement week at $1,500 per day, covering initiation, planning, RAID, weekly status, governance and closure. Runs concurrently with delivery, so it never extends the calendar.

Time & materials · the retainer

Capacity for the work that won't sit in a fixed box.

Commit a block, then draw down its full capacity across any role at transparent day rates: Consultant $2,200, Netskope Architect $2,500, Project Management $1,500. The larger the block, the more capacity each dollar buys, and the higher your priority on our schedule. Unused balance carries for 12 months. All prices AUD, ex GST.

Run-state · managed services

Once it's live, keep it sharp.

A Netskope platform earns its value in run-state, as policies drift, traffic shifts and new modules come online. Cornerstone manages the whole run-state journey, orchestrating delivery through our trusted partner network while we own the architecture, the relationship and the assurance. One point of accountability. Priced on application.

Model A · Hybrid, shared accountability

Your team runs day-to-day Level 1: user requests, first-line triage, BAU policy tweaks and end-user communications. Cornerstone manages Levels 2 and 3: architecture and policy authoring, DLP, UEBA and threat tuning, escalations and incident response, and monthly value reporting.

Model B · Full managed service

Cornerstone manages all Level 1, 2 and 3 operations: policy, DLP, threat and UEBA management, monitoring, change execution and incident response, with monthly value reporting and an executive review. Your team keeps view-only dashboard access, full transparency on every change, and an annual Value Assurance Review.

Cornerstone-owned oversight

Cornerstone Architects own the design and stay across run-state assurance on both models.

Change work on your retainer

Uplift and project work draws on published retainer day rates. Transparent, never a surprise.

Built to hand back

Even full management is structured to exit cleanly. No mystery systems, no permanent dependency.

Who delivers it

Led by the engineer who has done it at 35,000 seats.

Michael Webster

Michael Webster

Chief Netskope & Microsoft Engineer

Thirty years in IT, fifteen in cybersecurity, spanning architecture, design, networking, information protection, project delivery and analytics. Known for engaging technical peers and senior management alike, and steering both towards the outcome.

Netskope at scale

Netskope deployments including the NSW Department of Communities and Justice, a 35,000-seat rollout across one of Australia's largest government agencies.

Microsoft Security at scale

Microsoft 365 E5 security programs for the Australian Taxation Office, the Department of Foreign Affairs and Trade, Queensland government departments including emergency services, and Blackstone Financial Services.

Depth across the stack

Secure web gateways, data loss prevention, identity and access management, firewall and network security, endpoint protection and Azure architecture.

End to end

From initial assessment through requirements, design and implementation, for large, geographically distributed organisations. Assess, plan, build and hand over.

Scoping is led by a Co-Director. Delivery is led by Michael and the Cornerstone architect team. The people you meet at scoping are the people who do the work.

From a single tune-up to run-state, start with a conversation.

Thirty minutes with a Co-Director. No obligation, no pressure.