We provide the security leadership and compliance work that upper SMB and lower mid-market companies need, sized and priced for businesses without a full-time security department. Engagements range from ongoing retainers to single projects.
- Virtual CISO (vCISO) retainers. Ongoing security leadership: strategy, governance, and a senior point of contact your team and your clients can rely on.
- Strategic security consulting and project advisory. Targeted help on a defined problem, from a single assessment to a multi-month initiative.
- Security and compliance gap assessments. A clear picture of where you stand against the frameworks and requirements that matter to your business.
- HIPAA, SOC 2 and financial audit readiness. Preparation that gets you through the audit without surprises.
- Cyber insurance questionnaire support and remediation. We turn carrier requirements into action and document it in language underwriters accept.
- Incident response planning and tabletop exercises. A plan you can actually use, tested before you need it.
- Policy development and security awareness training. Written policies and practical training your people will follow.
- Custom engagements. Third-party risk, M&A due diligence and cloud security reviews.
How engagements are structured
Most of this work is bought as a defined project: a fixed scope, a named deliverable, a start and an end. An assessment, an incident response plan, a policy set, a cyber insurance questionnaire worked through to a submittable answer. You know what you are getting and what it costs before it starts, and when it is finished you own it whether or not we ever speak again.
A virtual CISO retainer is the other common shape, for organizations that want the leadership role filled continuously rather than a piece of work done once.
And where neither fits, we take contract and hourly work. Some jobs are genuinely a few hours of senior attention on a specific question, and quoting a project around them would be an invention. If you are not sure which of these you need, that is a reasonable thing to bring to the first conversation.