Talk to us

Who we work with.

Four kinds of organization we work with: SaaS companies, startups, SMEs and teams building on AWS. What they share is technology that changes quickly, and security that has to keep pace with it.

SaaS companies

Your product is the business, and your customers have started asking how you secure it.

What tends to worry you
Customer data in a shared application. APIs that return more than they should. Being able to answer a security question with evidence.

Startups

You are shipping fast with a small team, and security belongs to nobody in particular.

What tends to worry you
Not knowing what is exposed. Shortcuts taken early that are still live. Spending on the wrong thing first.
Where we usually start
A cloud security assessment

SMEs

You run on a mix of cloud services, an office network and staff laptops, without a security team.

What tends to worry you
Phishing. Unpatched devices. Nobody watching the firewall or the alerts.
Where we usually start
Managed security

Teams building on AWS

Your infrastructure is an AWS account that has been growing for years.

What tends to worry you
Permissions nobody has reviewed. Storage that may be public. Ports opened for a reason nobody remembers.

What you probably want to know.

Founders

“Am I exposed, and what will it take to fix?”

You get a ranked answer in plain language, and a first step sized to where the company is.

CTOs

“What do we fix first, and what can wait?”

Findings come ordered by risk, so the plan writes itself.

Engineering heads

“Will the findings be specific enough to act on?”

Each one says what to change. We build software too, and we write for the person doing the fix.

Not sure you fit any of these?

Tell us what you run. We will say plainly whether we can help.