Remediation quotes priced by the findings themselves
Findings by severity × your hours × your rate, in a spreadsheet inside the quote that sets each line's description and price.
- 5/5 on G2
- 4.2 on Capterra
- Building QuoteCloud since 2013
In QuoteCloud a security firm prices remediation in a Spreadsheet block inside the quote: findings by severity, the hours each takes and your rate. Any cell connects to a price line's description and unit price, the total comes back into a cell, and the client ticks a retest, signs and pays a deposit. Zapier can write the counts into the cells.
Last reviewed by the QuoteCloud team
An engineered drawing: on the left the findings as four stacks of flat slabs, one per finding (2 critical, 7 high, 18 medium, 31 low). Beside them the quote's pricing sheet as a plate of cells: column B holds the counts and column E the line prices, $2,220, $3,885, $4,995 and $2,867.50, with the total $14,781.80 in E8. A green line runs from each stack into its count cell, from each price cell off the sheet to its price line, and from the price table total back into E8. Beside it the remediation quote NL-Q-2614 for Tessaly Logistics: fix 2 critical findings, est. 12 h, $2,220; 7 high-severity findings, 21 h, $3,885; 18 medium-severity findings, 27 h, $4,995; change control and coordination $888, each showing the cells it comes from; the retest ticked at $1,450; total $14,781.80 inc tax; signed by both, 30% deposit $4,434.54 paid.
Your remediation calculator, inside the quote
Northlatch's pricing sheet is a Spreadsheet block in the quote template, imported from the .xlsx they already used. The Findings tab multiplies each severity's count by the hours a fix takes and the engineer rate; the Rates tab holds the rate card.
Click a cell to see its formula. Row 2 builds the first line's description, "Fix 2 critical findings · est. 12 h", and its price, $2,220. Quantities stay on the price table as usual.
- Formulas, tabs and .xlsx import
- Typed-in counts, your assumptions, estimates
- Cells connected to price lines
Spreadsheet block: Essentials and up
Importing a spreadsheet into a Spreadsheet blockRemediation pricing sheet
="Fix "&B2&" critical findings · est. "&D2&" h"
Findings
| Row | A | B | C | D | E | F |
|---|---|---|---|---|---|---|
| 1 | Severity | Findings | Hours each | Hours | Line price | Line description |
| 2 | Critical | 2 | 6 | 12 | $2,220 | Fix 2 critical findings · est. 12 h |
| 3 | High | 7 | 3 | 21 | $3,885 | Fix 7 high-severity findings · est. 21 h |
| 4 | Medium | 18 | 1.5 | 27 | $4,995 | Fix 18 medium-severity findings · est. 27 h |
| 5 | Low | 31 | 0.5 | 15.5 | $2,867.50 | Clean up 31 low-severity findings · est. 15.5 h |
| 6 | Coordination | 8% | $888 | Change control & coordination | ||
| 7 | Engineer rate /h | $185 | Northlatch's rate card | |||
| 8 | Quote total | Price table$14,781.80 | Brought back from the price table | |||
| 9 | Per finding fixed | $547.47 | Estimate |
Rates
| Row | A | B | C |
|---|---|---|---|
| 1 | Role | Rate /h | Used for |
| 2 | Security engineer | $185 | Fixes and hardening |
| 3 | Senior consultant | $240 | Design changes |
| 4 | Retest (fixed fee) | $1,450 | Catalogue item RT-STD |
- Counts typed in or written by Zapier
- Your assumption
- Estimate
- Connected to the price table
Each line knows which cell it came from
In the editor, link chips show where a line's description and unit price come from: Findings!F2 and Findings!E2 for the critical fixes. Connect any cell to a line's description and unit price, and bring the price table total back into a cell.
Tick the low-severity clean-up or untick the retest: the total changes, comes back into Findings!E8, and the estimated cost per finding fixed follows.
- Cell → description and unit price
- Price table total → a cell
- Options stay the client's choice
Spreadsheet block and price tables: Essentials and up
Findings tab
$14,781.80
Findings
| Row | A | B | C | D | E | F |
|---|---|---|---|---|---|---|
| 1 | Severity | Findings | Hours each | Hours | Line price | Line description |
| 2 | Critical | 2 | 6 | 12 | $2,220 | Fix 2 critical findings · est. 12 h |
| 3 | High | 7 | 3 | 21 | $3,885 | Fix 7 high-severity findings · est. 21 h |
| 4 | Medium | 18 | 1.5 | 27 | $4,995 | Fix 18 medium-severity findings · est. 27 h |
| 5 | Low | 31 | 0.5 | 15.5 | $2,867.50 | Clean up 31 low-severity findings · est. 15.5 h |
| 6 | Coordination | 8% | $888 | Change control & coordination | ||
| 7 | Engineer rate /h | $185 | Northlatch's rate card | |||
| 8 | Quote total | Price table$14,781.80 | Brought back from the price table | |||
| 9 | Per finding fixed | $547.47 | Estimate |
Remediation, priced from the findings Editor view · link chips show where each line comes from
| Item | Qty | Rate | Amount |
|---|---|---|---|
| Fixes | $11,988 | ||
Fix 2 critical findings · est. 12 hF-01, F-02 · this week
Description ← Findings!F2 Unit price ← Findings!E2
|
1 lot | $2,220 | $2,220.00 |
Fix 7 high-severity findings · est. 21 hF-03 to F-05 and four more
Description ← Findings!F3 Unit price ← Findings!E3
|
1 lot | $3,885 | $3,885.00 |
Fix 18 medium-severity findings · est. 27 hGrouped by system, within 30 days
Description ← Findings!F4 Unit price ← Findings!E4
|
1 lot | $4,995 | $4,995.00 |
Change control & coordinationChange requests, out-of-hours windows, sign-off
Unit price ← Findings!E6
|
1 lot | $888 | $888.00 |
| Options Tick to add | |||
| 1 lot | $2,867.50 | $2,867.50 | |
| 1 lot | $1,450 | $1,450.00 | |
- Subtotal
- $13,438.00
- Tax (10%)
- $1,343.80
- Total Total → Findings!E8
- $14,781.80
- Plus, monthly
- $0.00/mo
- Deposit on signing (30%)
- $4,434.54
The formulas a security firm uses
It's a full spreadsheet, so your existing calculator moves across as it is.
Hours × rate
=D2*$C$7: the hours for a severity times the engineer rate on the sheet.
Descriptions from counts
="Fix "&B2&" critical findings" writes the line the client reads.
ROUND and percentages
Coordination as 8% of the fixes, rounded to whole dollars.
Lookups
Look up the rate for each role on the Rates tab instead of typing it.
IF for minimums
A minimum charge when only one or two findings need fixing.
The total, back
E8 receives the price table total; the estimate per finding uses it.
Bring your remediation calculator into QuoteCloud
Free for 14 days, no credit card. Import your .xlsx, connect the cells once, and every quote prices itself from the counts.
Let a Zap write the counts
When the export lands in a folder, a Zap counts the findings by severity and writes the four numbers into Findings!B2:B5 of the quote your assistant or analyst created. The sheet recalculates and the connected lines follow.
Your analyst still checks each count against the export before the quote goes out. Writing cells is done by Zapier; writing them through the API or MCP isn't claimed.
- Zapier writes values into cells
- Formulas and links do the rest
- An analyst checks before sending
API & Zapier: Essentials and up · per-document fees for documents created through the API or Zapier
Integrations & automationA Zap writes the counts Illustrative · set up in your own Zapier account
- 1Trigger · Your file storageNew file in a folder
tessaly-ext-int-2026-10-14.csv - 2Step · ZapierCount rows by severity
2 · 7 · 18 · 31 - 3Action · QuoteCloudWrite values into spreadsheet cells
NL-Q-2614 · Findings!B2:B5
Zapier writes the values; your formulas, the connected lines and the total do the rest.
Findings!B2:B5 after the Zap
2
Findings
| Row | A | B | C | D | E | F |
|---|---|---|---|---|---|---|
| 1 | Severity | Findings | Hours each | Hours | Line price | Line description |
| 2 | Critical | 2 | 6 | 12 | $2,220 | Fix 2 critical findings · est. 12 h |
| 3 | High | 7 | 3 | 21 | $3,885 | Fix 7 high-severity findings · est. 21 h |
| 4 | Medium | 18 | 1.5 | 27 | $4,995 | Fix 18 medium-severity findings · est. 27 h |
| 5 | Low | 31 | 0.5 | 15.5 | $2,867.50 | Clean up 31 low-severity findings · est. 15.5 h |
Setting up a quote that prices itself
Once per template; every quote after that uses it.
Import your sheet
Add a Spreadsheet block to the quote template and import your .xlsx.
Connect the lines
Connect each price cell to its line's unit price and each description cell to its description.
Bring the total back
Point a cell at the price table total for your per-finding figures.
Save the template
Every new quote starts with the sheet already connected to its lines.
Fill the counts
Your analyst types them, or a Zapier step writes them.
Remediation quote questions
How does the spreadsheet set the price lines?
Connect any cell of a Spreadsheet block to a price table line's description and unit price. When the cell changes, the line follows. You can also bring the price table total back into a cell. Quantities, options and choices stay on the price table as usual.
Can I use my existing remediation spreadsheet?
Yes. Import the .xlsx into a Spreadsheet block. It's a full spreadsheet with formulas, functions and several tabs, so your calculator keeps working. The Spreadsheet block is on Essentials and up.
Can the finding counts be filled in automatically?
Zapier can write values into Spreadsheet block cells, for example the counts from your scanner's export. Writing cells through the API or MCP isn't confirmed. Your analyst should still check the counts before the quote is sent.
Is the price calculated by QuoteCloud?
By your formulas, your hours and your rate. QuoteCloud runs the spreadsheet and passes the results to the lines; the estimates are yours and are labelled as estimates.
Can clients choose a retest or the low-severity clean-up?
Yes. They're optional lines the client ticks before signing. The total and the deposit update, and the new total comes back into the sheet.
Can I lock the pricing sheet?
Content locking (Business plan) works per block, not per cell, so a locked sheet can't be edited at all. Most firms lock their terms and methodology blocks and keep the pricing sheet editable for the analyst who checks the counts.
More for security firms
Where the findings come from, and what happens after signing.
-
Vulnerability scan reportsMonthly and quarterly scan results as a branded report: severity summary, findings, trend and what to fix first.Explore
-
AI-drafted reports & quotes with MCPYour AI assistant, connected through QuoteCloud's MCP service, drafts the report and the priced quote for an analyst to review.Explore
-
Authorisation to test & signingRules of engagement and written authorisation signed by every party, then a deposit or full payment on signing.Explore
- Penetration test reportsExecutive summary, findings with evidence and retest status, and the client's sign-off in one document.
- Compliance gap auditsControls against your chosen framework, current and target maturity, and the roadmap priced as options.
- Monthly managed security reportsThe month in alerts, incidents and patching from your monitoring platform, with next month's recommendations to tick.
- Penetration test & assessment proposalsScope by IPs, apps and APIs, days worked out in your scoping sheet, and extra tests as options.
- Managed security service proposalsEndpoints and users × service tier → the monthly price, on a term, with renewals you can see coming.
- vCISO & advisory retainersAdvisory days a month as packages the client chooses, with the board reporting and roadmap in writing.
- Integrations & automationMCP, the API, Zapier and Make, plus CRM, accounting, Slack and Teams, connected the way each one really connects.
- Cybersecurity templatesReal QuoteCloud cybersecurity, SLA and consulting templates, ready for your report and quote layouts.
- QuoteCloud implementation for security firmsReport and quote templates, your pricing sheet, the MCP connection and analyst training, step by step.
- FAQAnswers to the questions MSSPs, pen-testers, security consultancies and vCISO firms ask most.
Price the fix while the report is still fresh
Start a free 14-day trial: import your remediation calculator and send your first quote priced from the findings.