Hardening Sprint
A production system locked down and documented.
- How long2 to 4 weeks
- How we workFixed package
What you receive
The security findings fixed, not just listed: your system locked down, documented and retested.
Who fixes the problems?
You receiveThe fixes, applied
The risks are actually removed, not left on a list.
What it is. We apply the fixes from the findings, in priority order.
Why it matters. The risks are actually removed, not left on a list.
What can reach our systems?
You receiveNetwork and firewall rules
Far fewer ways in for an attacker.
What it is. Rules so only the traffic that should reach your systems can.
Why it matters. Far fewer ways in for an attacker.
Does everyone need the access they have?
You receiveAccess control changes
A stolen account can do much less damage.
What it is. Access tightened so people and services have only what they need.
Why it matters. A stolen account can do much less damage.
Would we notice an attack?
You receiveLogging and alerts
You find out early, while it can still be stopped.
What it is. Logs and alerts for suspicious activity.
Why it matters. You find out early, while it can still be stopped.
What do we do if the worst happens?
You receiveAn incident runbook
A calm, quick response instead of panic.
What it is. A step-by-step plan for security incidents.
Why it matters. A calm, quick response instead of panic.
Did the fixes work?
You receiveA retest report
Proof that the gaps are closed.
What it is. A retest of every finding, with the results.
Why it matters. Proof that the gaps are closed.
From brief to done
- 1
Week 1
Plan
Fixes ordered and agreed.
- 2
Weeks 2 to 3
Fix
Fixes, rules, access and logging applied.
- 3
Final week
Retest
The retest and the incident runbook.
What can a stranger see about our systems?
Outside-in security look. What anyone on the internet can see about your systems, and the five fixes that matter most.
- You give us written permission and the addresses to check
- We check certificates, email settings and anything exposed, from the outside only
- A short report with the fixes in order
- It is free. There is nothing to pay and nothing to sign.
- The report is yours to keep and share, whatever you decide.
- No sales call unless you ask for one.
Questions people ask
How much does it cost?
We send a written quote after your request: what it covers and what it does not. The tier, scope and timing set the price.
Could I just use AI for this?
AI drafts code and prototypes quickly, and we use it every day. It cannot decide what to build, prove that it is secure, or answer for it when real people rely on it. That is the part you are hiring us for.
Who owns the work?
You do. Code, designs, files and documents are yours, and the quote says so in writing.
Can we change the scope?
Yes. If something needs adding or removing, we agree it in writing before we do it.
What happens after?
Most people go on to Operate and Improve Plan, but there is no obligation. You keep everything we made.