Consulting

Fixed scope, written findings, ranked

Every engagement ends in a document you can act on without us — what we found, what it would cost you, and what we would do about it in what order.

consulting / engagements

Security review

Fixed scope · 1–3 weeks

A threat model, a code review against it, and a prioritized findings document. Every finding comes with the failure scenario that makes it real — concrete inputs, concrete consequence — because a finding you cannot picture is a finding nobody fixes.

You get:

  • Written findings, ranked, each with a suggested fix and a regression test.

Architecture review

Fixed scope · 1–2 weeks

Read the system, find the decisions that will hurt at ten times the load, and say which ones are worth changing now versus which are fine to leave. Most systems have two or three of the first kind and a long list of the second.

You get:

  • A decision document: what to change, what to leave, and why.

Cloud cost review

Fixed scope · 1 week

Find the vendor calls, renders and queries sitting inside the user request path, where cost multiplies by traffic instead of by work. This is almost always where a surprising bill comes from, and it is usually fixable without a rewrite.

You get:

  • Measured before/after per hot path, with the changes that get you there.

Pre-audit readiness

Scoped after a call

You have a working system and a SOC 2, ISO 27001 or FedRAMP process ahead of you. We map the controls you need to the code you have, implement the gaps, and leave the evidence organized the way assessors ask for it.

You get:

  • Control-to-implementation mapping, gap closure, and the evidence package.

Secure build

Ongoing

A new service, product or feature built end to end — with the authorization model, the input validation, the rate limits and the tests going in alongside the feature rather than after it.

You get:

  • Working software, a test suite, and documentation your team can own.

How we price

Fixed fee for fixed-scope reviews, quoted after a call in which we tell you what we would actually look at. Ongoing build work is monthly. We would rather turn down a project than take one where we are not the right people — it is cheaper for both of us.

Book a scoping call