Ways to work
From advice to running it alongside you.
Pick the position that fits your team today. Clients move along this line as they grow.
01
Advise
We assess, recommend and review. Your team builds.
- WE DO
- Assessments, design reviews, a prioritised plan
- YOUR TEAM
- Builds and runs everything
- A GOOD FIT WHEN
- You have engineers with time to build and want a second pair of eyes and a clear plan.
02
Build with you
We design and build alongside your engineers.
- WE DO
- Architecture, pairing, code review
- YOUR TEAM
- Builds with us and owns the result
- A GOOD FIT WHEN
- You want the work done and your team to understand it well enough to keep it running.
03
Build for you
We deliver it, document it and hand it over.
- WE DO
- Delivery, documentation, handover sessions
- YOUR TEAM
- Receives a working system and its runbooks
- A GOOD FIT WHEN
- Your team is busy shipping product and needs the controls in place by a date.
04
Operate alongside you
We run detection and response with you, in stated hours.
- WE DO
- Monitoring in agreed hours, investigation, response with your approval
- YOUR TEAM
- Approves containment and owns out-of-hours cover. Hours are written into the contract.
- A GOOD FIT WHEN
- You need detection and response running now, before you have a security operations team of your own.
Starting points
Every engagement begins from one of these and is shaped in a scoping call. Names, scope and timelines are typical and all of them adjust.
- A · BUILD
- Cloud and identity baseline. Your cloud accounts and identity provider meet a written baseline, with drift alerts in place. 4 to 6 weeks.
- B · DEFINE + BUILD
- Audit readiness programme. Ready for a SOC 2 or ISO 27001 audit, with evidence drawn from controls that run every day. 8 to 12 weeks.
- C · PROVE
- Detection and response build. Detections for your highest risks, written playbooks and agent-assisted triage your team can run. 6 to 10 weeks.
- D · DEFINE + BUILD + PROVE
- Layered partnership. A standing programme across all three layers, paced to your roadmap, with a quarterly plan, a monthly evidence pack and a named engineer. Rolling, reviewed quarterly.