How we work with clients.
A straight answer to the question most buyers ask second. The first one is "can you help?" This page answers the second one: "what does that actually look like?"
Our engagement models
Most of our work falls into one of five shapes.
Strategic advisory retainer
A fixed monthly retainer for senior advice, decisions and board reporting.
Fractional vCISO
A set number of days each month to run your security program end to end.
Fixed-scope project
A defined outcome such as a risk assessment, SOC 2 or ISO 27001 readiness, or a policy suite.
AI governance sprint
A focused engagement to get AI policy, risk assessment and guardrails in place.
Incident response retainer
A named contact, agreed response times and pre-agreed rates, so you are not negotiating during a crisis.
How we price
We price every engagement on scope, stakes and the seniority required. We do not publish a rate card, because the honest number for a small company preparing for SOC 2 is not the honest number for a regulated business preparing for several frameworks at once.
Our commitments
- Fixed price for fixed scope
- Transparent effort assumptions
- One number, not a ladder of line items
- Senior delivery, every time
- A clear exit: retainers run month to month after any initial commitment period
What influences the price
- Size and complexity of your environment
- Frameworks and laws in scope
- How quickly you need results
- How much hands-on work versus advice you need
- Whether your team or MSP can own parts of the work
- On-site requirements, if any
What to expect from your first conversation
A short call, about thirty minutes, with Tarun Jain. We will ask what is driving the conversation, what you have in place today and what a good outcome looks like.
There is no sales sequence afterwards. We will either send you a scoped proposal within a few business days, or tell you honestly if someone else would serve you better.
Ready to talk?
Thirty minutes, no obligation, and a clear next step at the end.