Consulting when you already know the question.
Remediation planning, incident support, policy and architecture review — quoted by scope.
A short, scoped answer — not a standing retainer.
Use consulting when the question is already known. You have a report you do not trust. A client or insurer asked for evidence. A site was compromised. A launch is in two weeks and nobody has reviewed the application.
This sits next to Enterprise when the reader is a counterparty, and next to Reporting when the deliverable is a document. We do not require a monthly “virtual CISO” package as a condition of help.
If we cannot help — wrong specialty, a conflict, or the work needs a law firm first — we say so in the first reply. The same terms apply for clients internationally.
Remediation planning
Turn a findings list into a sequence your developers or IT provider can execute. We distinguish what is urgent from what is noise, and we will say when a recommended fix is worse than the issue.
Incident and compromised-site support
Containment advice, evidence handling and recovery of a website or application after unauthorized access. Say so in the first message if the matter is active. We prioritize those inquiries during business hours.
Policy and architecture review
Read a draft policy, a proposed hosting design or a vendor’s security claims and say what is missing. Written comments, not a slide deck of platitudes.
Questionnaire support
Help answering client, insurer or partner security questionnaires with statements that match what you actually do.
How it is priced
Quoted as a fixed scope — hours or a defined deliverable — after we understand the question. There is no requirement to retain us monthly to receive the work.
Confidentiality
Incident details and draft reports are confidential client material. We do not discuss other clients’ incidents as case studies. Your NDA is executed on request.
Request a written proposal.
Describe the system, vendor or AI deployment under consideration. We respond with the proposed scope, timeline and fee.