Consulting
Know where you stand. Then fix what matters first.
We start with a maturity and attack-surface assessment, then help you close the gaps: compliance, incident response, architecture and security leadership, from people who attack these systems for a living.
Maturity & attack-surface assessment
Ten to twenty-five days to know exactly where your company stands and what to fix first.
| Company size | Duration | Scope |
|---|---|---|
| Small1–50 employees | 10 business days | Up to 3 systems, 1 interview round, CMMI checklist |
| Mid-size50–250 employees | 15 business days | Up to 10 systems, SOC 2 / ISO 27001 gap analysis, 3 rounds |
| Enterprise250+ or regulated | 25 business days | Unlimited scope, SUGEF / PCI-DSS mapping, board presentation, 18–24 month roadmap |
After the assessment
Compliance readiness
Gap analysis and a plan to pass ISO 27001, SOC 2, PCI DSS or your financial regulator, with the evidence they will ask for.
Incident response plan
Roles, playbooks and contacts written down and tested, so the first hour of an incident is not improvised.
Security architecture review
Cloud, network, identity and backups reviewed by people who attack them for a living.
Security leadership on retainer
A senior security lead for your company a few days a month: roadmap, policies, vendors and reporting to the board.