Ways to work with us

Find the right fit, at your own pace.

Most clients begin with a relaxed 30-minute conversation. Some prefer to get going straight away, so a few focused projects can also be reserved online. Whatever you choose, the scope and cost are agreed before any work starts.

Recommended first step

Not sure where to start? That is what the free call is for.

Thirty minutes with the founder to talk through what is on your mind and agree a sensible next step, which is sometimes no paid work at all. If you like, answer our short questionnaire beforehand so we can make the most of the time.

  • Founder-led
  • ISACA CISM
  • US & EU
  • Reply within one business day
Three ways to engage

Assess. Build. Manage.

Start wherever you are. Assess projects can be reserved below; Build and Manage are scoped with you on the free call. See what each includes

Assess · fast-track path

Focused first projects.

For when you would like a clear, practical result quickly. Each has a defined scope and one agreed fee, and is led by the founder. Reserve online if you are ready, or talk it through with us first. We are happy either way.

Incident-Readiness Tabletop

Rehearse the worst day before it happens.

$6,500

One agreed fee, no extras

Scheduled within 2 weeks

  • A ransomware or email-compromise scenario built around your sector and systems
  • Two-hour facilitated exercise with leadership and IT
  • Decision matrix: who decides on payment, notification and shutdown
  • After-action report with the plan and playbook gaps

A good fit if: an insurance renewal or board question is coming up, or your response plan has never been tested.

Compliance Readiness Assessment

HIPAA, SOC 2, ISO 27001, PCI DSS or NIS2: know where you stand.

From $7,500

Starting price · deposit to reserve, balance on delivery

2–3 weeks for a single entity

  • One framework of your choice: HIPAA Security Rule risk analysis, SOC 2, ISO/IEC 27001, PCI DSS v4.0.1 or NIS2
  • Scope agreed up front, then a gap assessment against that framework
  • Risk register with likelihood, impact and owner
  • A prioritised remediation plan you can hand to an auditor, regulator or customer

A good fit if: a customer, auditor, regulator or insurer is asking about HIPAA, SOC 2, ISO 27001, PCI DSS or NIS2, and you need to know what to fix first.

Secure checkout by Stripe. US bank transfer (ACH) first, or card, Apple Pay and Google Pay. Prices in US dollars, before any applicable tax. Prefer to pay by check, wire or purchase order? Request an invoice. By reserving you agree to our terms.

Ongoing partnership

A security leader on hand, every month.

Every organisation needs a different level of support, so we shape it together on the free call and agree one predictable monthly fee. No hourly meter, no surprises.

Fractional CISO

Advisory, core and embedded tiers. A fixed monthly fee, scoped with you on the free call.

  • Strategy, roadmap and budget owned at executive level
  • Board and audit-committee reporting
  • Vendor-risk questionnaires answered so deals keep moving

Incident-response retainer

Prepaid response hours with named responders and agreed engagement times, sized on the free call.

  • Host, cloud and email forensics
  • Ransomware and business email compromise containment
  • HIPAA/HITECH and GDPR Art. 33/34 notification analysis

Running a multi-region or multi-entity programme? See enterprise engagements, scoped as a tailored proposal within your procurement process.

Good to know

Questions about working with us.

Do I have to buy anything to talk to you?

No. The free 30-minute call is genuinely free, with no obligation. Most people who reserve a project online have spoken to us first, and you are always welcome to.

How does reserving online work?

Each project opens a secure Stripe checkout. US bank transfer (ACH) is offered first and is our preferred method, with card, Apple Pay and Google Pay as alternatives. Stripe emails your receipt; we never see your bank or card details.

What happens after I reserve?

You get an email with a link to book your kickoff, and within one business day a short intake questionnaire and a mutual NDA so you can share information safely. The founder runs every kickoff.

How is ongoing support priced?

On the free call we talk through what support you need, then agree one predictable monthly fee for it. There is no hourly meter and no surprise on the invoice, and paying annually earns a discount.

Can we pay by check, wire, invoice or purchase order?

Of course. Ongoing support is always invoiced, and any project can be paid by check, wire or against a purchase order. Use the invoice link under the project buttons, or ask on the call.

What if our plans change?

If you need to cancel before the kickoff call, the fee is refunded in full. Once work has started, we will agree a fair outcome together based on what has been delivered.

Need something different? We are happy to tailor a proposal. Ask for a tailored proposal