Services

When you need people, not another dashboard.

Software cannot make a decision at two in the morning or sit in a board meeting. These are the engagements we take on alongside the platform — priced as fixed scope wherever we honestly can be.

Security assessmentTwo to three weeks

A cold read of where you stand: external exposure, identity configuration, endpoint coverage, backup reality, and how quickly you would actually recover. You get a written report with findings ranked by exploitability and a remediation plan your own team could execute without us.

FIXED SCOPERequest scope
Managed CyberFitOngoing, monthly

24/7 human alert triage on top of AIOpenSec Complete or CyberFit+, run by our team — patch exceptions chased, restore rehearsals scheduled and reviewed, and a monthly written report that says what changed and what we are worried about. You keep full access to the console throughout.

RETAINERDiscuss cover
Incident response retainerAnnual, with agreed response time

A named team, contracted rates, and an agreed response window, arranged before you need it. Included is a tabletop exercise each year, because the first time a leadership team runs an incident should not be during a real one.

RETAINERSet up cover
AI system reviewThree to four weeks

We test an AI feature you are about to ship the way an adversary would: prompt injection through the documents it ingests, data leakage across tenants, tool-use abuse, and what happens when the model is simply wrong. Findings come with the fix, not just the flaw.

FIXED SCOPERequest scope
Compliance readinessSix to twelve weeks

Getting to ISO 27001, SOC 2 or Cyber Essentials without turning your team into full-time evidence collectors. We map the controls, close the real gaps, and set the platform up so the evidence keeps arriving after the certificate does.

FIXED SCOPERequest scope

How we work

Small teams, senior people, written deliverables. Every engagement ends with a document your team can act on after we leave — not a slide deck and an invoice.

No junior-heavy staffing. The person who scopes it does the work.
Findings shared as we go, not held back for the final report.
We will tell you when you do not need the engagement you asked for.

Not sure which of these you need?

Describe the situation in a paragraph. We will tell you what we would do first, whether or not it involves us.