SOC 2 Readiness
Your next big customer wants a SOC 2 report. We find the gaps, build controls that fit how your engineers work, and prepare the evidence your auditor will ask for.
- Gap assessment
- Remediation roadmap
- Policy pack
- Cloud control review
Our services
Security leadership and audit readiness for cloud-native SaaS companies. Start with a fixed-price project, then keep us on as your fractional CISO.
HIPAA Readiness
Healthcare clients require HIPAA safeguards from any vendor that handles patient data. We run the risk analysis, put the safeguards in place and prepare you for customer reviews.
- Security risk analysis
- Safeguards
- Policies and procedures
- BAA review
Fractional CISO
A full-time CISO costs over $250,000 a year. A fractional CISO runs your security program, answers customer reviews and reports to leadership, for a monthly fee.
- Security roadmap
- Risk register
- Customer security reviews
- Vendor reviews
Security Risk Assessment
Insurers, investors and customers ask for a documented risk assessment. We review your company against NIST CSF or ISO 27001 and give you a ranked, practical plan.
- Framework review
- Cloud review
- Ranked gaps
- Remediation plan
How we work
Projects to start, retainers to keep going
Compliance repeats every year. Most clients start with an assessment and move to a monthly plan to run the program.
- 01
Free call
A 30-minute call. No sales pitch. You leave with your top three gaps.
- 02
Assess
We review your cloud, controls and policies, and size the work.
- 03
Build
We build the roadmap and help your team close the gaps.
- 04
Audit-ready
We support you through the audit and keep the program running.
We prepare you for audits. A licensed CPA firm performs SOC 2 audits and issues the report.
Not sure where to start?
Book a free 30-minute call. We review where you stand and name your top three gaps.