That depends on how many vulnerabilities are found and how deep the setup needs to be. A vulnerability audit and basic remediation might take a few days. More comprehensive protection might take a few weeks for setup, testing and tuning.