Fixed-scope packages: a clear first step
Paid entry engagements with a set scope, a set list of what you get, and a price agreed before work starts. Each one ends with a written report you keep, whoever does the work next.
Assess, then build and run only what's worth it
Assess
A short, paid piece of work before anything is committed. We look at what you actually run and come back with the changes worth making first, ranked by impact and cost. Sometimes the answer is “nothing, and here’s why.” You own the assessment either way.
Build
If you want us to make the changes, we scope and price them up front, then deliver in increments you can see, with architecture documented as we go. Whoever scoped the work builds it.
Run
We stay on to operate and support what we built, with stated response times and a regular review of what to fix next. Or we hand over properly: documentation, training, and a team that can run it without us.
Where to start
Application security assessment
One application, checked against a set list in a fixed time: automated scanning, testing against the OWASP Top 10 for web, API and mobile, and a ranked report with fixes and a re-test. Runs only with written authorisation, on an agreed scope.
- Duration: agreed at scoping
- Price on request
Compliance readiness
A technical gap assessment against the data protection, security and AI regulations that apply to you, with a legal partner.
- Duration: agreed at scoping
- Price on request
Cloud cost review
What you spend on AWS, Azure or GCP, checked against what you actually run: rightsizing, commitments, storage and data transfer, with a ranked report of where to save.
- Duration: agreed at scoping
- Price on request
Platform health check
Your Kubernetes, CI/CD, infrastructure as code, monitoring and backups reviewed, with a ranked list of fixes.
- Duration: agreed at scoping
- Price on request
AI readiness & workflow sprint
Your workflows mapped across engineering, sales, product and operations, one or two picked to automate, and a working pilot built with evals and guardrails, plus a data and security review and a rollout plan.
- Duration: 2–3 weeks
- Price on request
CX assessment
Customer journeys, systems, data gaps and quick wins reviewed, with a prioritised roadmap and a recommended engagement level.
- Duration: agreed at scoping
- Price on request
Common questions about packages
What is a package?
A fixed-scope piece of work with a set list of what we look at and what you get at the end. The scope and price are agreed in writing before anything starts, so there are no open-ended hours.
How is the free call different from a package?
The free 30-minute call is a conversation: you tell us what you're dealing with, and we tell you whether a package fits and which one. A package is paid work with a written deliverable.
What happens after a package?
You keep the report and can act on it yourselves, with another firm, or with us. If you want us to build or run the fixes, we scope that as a separate engagement.
Start with an honest look at what you run
Tell us what you're running today and where it hurts. We'll come back with the two or three changes worth making first — and if the answer is that your setup is fine, we'll say that instead.