02 / Services

Fixed-scope work, quoted after a short scoping call.

Each service has a written scope, a fixed price, and a clear list of what's included and what isn't. If you're not sure which one fits, that's what the first call is for.

02.1

External Attack Surface Assessment

We map what an attacker can see and reach from the internet, then hand you a prioritized list of what to fix first.

Timeline About 3–4 weeks from scoping call to report

Scope, deliverables, and what we need from you →

02.2

CMMC Level 2 Readiness

We assess you against NIST SP 800-171, show you where the gaps are, and build a realistic roadmap to close them before your certification assessment.

Timeline Typically 4–8 weeks, depending on size and scope

Scope, deliverables, and what we need from you →

02.3

Cloud Assumed-Breach Test

We start from a realistic foothold in your cloud tenant, like a phished user account, and show you how far an attacker could get and how to stop them.

Timeline Typically 2–3 weeks of testing

Scope, deliverables, and what we need from you →

02.4

Security Questionnaire Support

When a customer or prime sends a security questionnaire, we help you answer it accurately, back it with evidence, and avoid promising things you don't do.

Timeline Often 1–2 weeks per questionnaire

Scope, deliverables, and what we need from you →

—

Other engagements by request.

— / Next step

Start with a short call.

Tell us what prompted the question. We'll tell you whether we can help and what it would take.

Start a conversation