How we deliver

Specific about the outcome. Flexible about the route.

Every engagement starts with a scoping call and a written scope. What we deliver and what it costs are fixed before work begins. Scope, pace and tools are shaped around you.

From first call to evidence

01
Scoping call. 30 minutes on what you need to do, by when, and what you already run.
02
Written scope. The deliverables by name, the outcome we are working toward, the evidence you hold at the end, and the cost. All agreed in writing before work starts.
03
The work. Done in your environment, with your tools or ones we recommend. Pace and order follow your roadmap, and your team is as involved as you want it to be.
04
Evidence and handover. Each deliverable ships with its configuration exports, logs, test results and sign-offs, plus runbooks so your team can run what was built.

Fixed before we start, shaped to you

FIXED BEFORE WE START
  • The deliverables, listed by name
  • The outcome we are working toward
  • The evidence you hold at the end
  • The cost, agreed in writing
SHAPED TO YOU
  • Scope, pace and the order of work
  • The frameworks you answer to
  • Your tools, or ones we recommend
  • How closely your team is involved

Agents investigate. People decide.

We use AI agents for the investigative legwork: gathering context, correlating signals and writing the first summary. The analyst starts there, not from a raw alert.

Agents do not take containment actions on their own. A person approves every one, and the investigation record shows what was approved and when.

What we put in writing

HOURS
Monitoring runs in stated hours with a set response time. We do not claim 24/7 cover unless it is staffed and written into the contract.
TOOLS
Your tools, or ones we recommend. If we ever receive a referral fee from a vendor, we tell you.
REPORTING
Severity in words and numbers. Outcomes are stated with the evidence behind them, not adjectives.
INCIDENTS
Every incident closes with a written record of the change we made and the test behind it.

Tell us about your security shape.

A 30-minute scoping call, then a written scope.

Book a scoping call