Security services

Every engagement is fixed scope and fixed price. You approve the rules of engagement in writing before testing starts.

Penetration Testing

Manual testing of your web applications, APIs and internal networks against the same techniques a real attacker would use, with every finding evidenced and rated.

Written report with executive summary
Every finding with reproduction steps
CVSS rating per finding
Remediation retest included

Quoted per engagement5 to 10 working days

Security Audit

A configuration and architecture review across cloud, identity and network, checking what is actually deployed against what your policies claim.

Cloud and identity configuration review
Gap analysis against your policy set
Prioritised remediation plan
Evidence pack for auditors

Quoted per engagement4 to 8 working days

Incident Response

Containment, forensics and recovery support when something has already happened, available ad hoc or on a pre-agreed retainer.

Containment and eradication support
Forensic timeline of the incident
Root cause analysis
Post-incident hardening plan

Quoted per engagementRetainer or ad hoc

Security Advisory

Ongoing security guidance for teams without a full-time security hire, covering architecture review, vendor assessment and policy work.

Monthly architecture review
Vendor and third-party assessment
Policy and process authoring
Direct escalation channel

Quoted per engagementMonthly retainer

How pricing works, and what changes it