Services · Security Consulting
Security consulting.
Sometimes you don't need a project. You need a senior practitioner to look at the architecture, weigh in on a vendor decision, or facilitate a tabletop. Hourly is for those moments.
What hourly is good for
- Second opinions. An MSP or vendor recommended a course of action and you want an independent practitioner to weigh in.
- Architecture review. A new identity provider, SaaS migration, or cloud rearchitecture before it goes live.
- Vendor selection. Side-by-side technical scoring of two or three SIEM, EDR, MDM, or backup tools.
- Tabletop facilitation. A two-hour ransomware tabletop with leadership, scripted in advance.
- Policy redlines. A customer or auditor asked for changes. We turn the redline in 48 hours.
- Board prep. Coaching the security leader through a board presentation.
What hourly isn't good for
Anything that takes more than 40 hours. By that point a written project (Risk Assessment, vCISO retainer, or a discrete project) is a better fit.
How to start
Tell us what you're trying to decide or accomplish. If it fits in three hours or less, we book the time and bill at the end of the month. If it's bigger, we suggest a block or convert it into a written project.