HOW WE WORK

No mysteries. Not even about us.

How engagements start, what they cost, how we deliver, and how we leave. If a consultancy won't tell you that on a web page, ask yourself why.

HOW AN ENGAGEMENT RUNS

A conversation. You describe the problem the way you would to a colleague. No charge, no deck, no discovery workshop. If we're the wrong firm for it, this is where we say so.
A short scoping exercise. A few days, not a few months — enough to understand your situation properly and put a boundary around the work. You see everything we find.
A proposal with a fixed scope. What we'll do, what it costs, what you'll have at the end, and what's explicitly out. Short enough to read; specific enough to hold us to.
Delivery, embedded. We work inside your team, not alongside it. Reporting is plain English, and every recommendation survives the one-sentence test — if we can't explain it in one, we haven't finished thinking.
Handover, by design. Planned from day one, not improvised at the end. Capability moves to your people, cadence by cadence, until you don't need us.

HOW WE PRICE

Day rate

FOR OPEN-ENDED OR ADVISORY WORK

A stated rate, agreed before we start, for work where the shape genuinely can't be fixed in advance — fractional CISO roles, board advisory, embedded delivery. You see the days; you control the tap.

Fixed outcome

FOR WORK WITH A DEFINED END STATE

One price for a defined result — a review, an assessment, a piece of design. If it takes us longer than we thought, that's our problem, not your invoice.

Either way, the price is stated up front and it's the whole price. No land-and-expand. We scope the work you need, not the work that grows the account — and when a proposal is smaller than you expected, that's not modesty, it's the answer.

WHAT WE PROMISE

Nothing to sell you. No vendor commissions, no reseller margins, no product quietly waiting at the end of the advice. When we recommend a tool, it's because it's the right tool.
No lock-in. Everything we build, your team can run without us. Notes, models, working files — yours, handed over, explained.
Everything explainable in one sentence. To your board, your engineers, your auditor. If your people can't explain it, it isn't security.
We work ourselves out of a job. Success is measured by what still works a year after we've gone — a critical friend, not a permanent fixture.
Nothing hidden. You see what we see, when we see it. Bad news arrives early and in plain English.

Start with the conversation. It's free, and it's honest.

Start a conversation