Skip to content

Approach

Three rungs, no obligation

Every piece of work is sold as a defined outcome with an agreed scope and an agreed price. Most engagements start with the free audit and go where the findings justify - there is no obligation to take the next rung.

  1. Audit

    Free

    no cost, no obligation

    A no-cost Posture Audit of your Microsoft 365 or Microsoft Azure estate against recognised baselines, so you can see where you stand before spending anything.

    An automated audit against the baseline that matters to your obligations, followed by a call to talk through your highest-level priorities. You keep the report either way - the sequencing, dependencies, and effort estimates are the optional Roadmap. As a senior-led practice we onboard a limited number of new estates each month, so audit slots are allocated first-come. Most teams go straight from the audit to a pack; others start with the optional Roadmap, or a discovery call.

  2. Pack / Build

    from £3,500 / $4,500

    a Deadline Pack; larger builds from £20,000

    A fixed-price, fixed-scope implementation - most often a dated Deadline Pack that closes the gaps against an external deadline.

    The primary way to buy is a Deadline Pack: a dated, guaranteed outcome - the Cyber-Insurance Renewal Pack, the AI Readiness Pack, the Secure Remote Access Pack - so you buy an outcome, not an estimate. Where the work does not fit a pack it is still fixed-scope: scope, deliverables, and price agreed in writing before work starts, and if the scope genuinely changes we re-quote rather than quietly billing more hours against an open estimate. Want the full sequence mapped first? An optional fixed-fee Roadmap does that, and is credited against the pack or build you book within 60 days.

  3. Retain

    from £3,500 / $4,500

    per month

    Continuous Evidence - a monthly retainer that keeps your posture aligned and your audit and insurance evidence current and submittable, not rebuilt from scratch each year.

    Month one lands a posture baseline and a first evidence pack, so value arrives immediately. From there a fixed amount of senior time each month goes to the highest-priority work, drift is caught before an auditor sees it, and the evidence stays submit-ready - so next year's renewal or audit is handled inside the retainer, not re-bought as a fresh pack. One ladder, three rungs - Continuous Evidence, Embedded, and Fractional CISO - scales the cover from a compliance-continuity floor to hands-on delivery to a board-facing role. Start on a 90-day term, then month-to-month, cancellable with notice.

Prefer the full sequence mapped before committing? An optional fixed-fee Roadmap does that, and is credited against any pack or build you book within 60 days - see pricing.

AI-accelerated delivery

Better work, in less time, for less money

AI has genuinely changed what a small senior team can deliver, and we have rebuilt how we work around that rather than treating it as a novelty. The benefit belongs to you: work that is more thorough as well as faster, lower fixed fees, and more of the budget spent on judgement instead of legwork.

Less time between question and answer

Tenant configuration, sign-in logs, and policy exports are read and cross-referenced in minutes rather than over days of manual review. The analysis that used to justify a two-week discovery phase now sits inside the first week, so findings arrive while the context is still fresh.

Custom tooling stops being a luxury

A one-off script to reconcile licences, pull an evidence pack, or remediate several hundred mailboxes used to cost more to write than the manual work it replaced. That calculation has changed - purpose-built tooling is now often the cheaper way to get the work done.

More thorough, not only quicker

The time AI frees up is spent on the parts that need judgement: more design options weighed before committing, wider review of edge cases, and handover documentation that gets written properly rather than squeezed in at the end.

Consistency across tenants

Baselines, runbooks, and infrastructure-as-code are generated from one reviewed standard rather than retyped per environment. Drift between tenants comes from manual repetition, and there is less of that now.

Using AI on client work carries obligations, and we publish the ones we hold ourselves to - approved providers on paid commercial plans, what never reaches a model, and a named human accountable for every output. Read the AI policy

Get started

Find out where you stand, free

Most engagements start with a no-cost posture audit against the baselines that matter to you. If a fixed-fee roadmap is the right next step, we'll say so - and if it isn't, we'll say that too.