Start with the outcome. Get the right engagement.
Most work fits one of two shapes: a focused project with a clear finish line, or ongoing ownership of the security program.
You do not need to pick the right label yourself. Share the essential context and receive the smallest useful starting point in writing.
Pick the engagement that matches what is driving your timeline.
If: Your team can execute
Focused project
Fixed or capped when scope allowsA defined assessment, test, readiness initiative, or remediation plan with explicit boundaries, deliverables, assumptions, and a clear finish line.
If: Need recurring ownership
Ongoing security program ownership
Monthly scope based on complexity and cadenceAccountable security leadership covering policies, compliance administration, evidence, audit coordination, customer questionnaires, risk management, and executive reporting.
When we are not the right firm.
Three scenarios where the written recommendation will say so and point you toward the right alternative.
Your procurement requires a brand-name enterprise consultancy
If your buyer or audit committee specifically requires a particular enterprise-tier consultancy on the contract, we are not it. Some procurement gates are immovable, and an enterprise-tier firm is the right fit for those situations.
You need 24/7 SOC monitoring
We do not run a security operations center. If you need eyes-on-glass alert triage, hire a managed detection and response provider (Arctic Wolf, Expel, ReliaQuest) and pair them with a vCISO for the program-level work. We have referred clients to MDRs many times.
You want hourly contractor pricing
We are not a $30 to $50 per hour shop. If your budget is at that ceiling, you are looking for a freelancer rather than a senior firm. Several legitimate freelancer marketplaces exist; we can recommend one if you ask.
Still not sure?
The structured intake takes a few minutes and provides what is needed to recommend a starting scope and working price range. No exploratory sales call is required.
Not ready to talk? Score your SOC 2 readiness.
Twenty questions, a scored PDF in your inbox, a realistic timeline to audit. Free.