Start with one week
Everything we sell is one fixed fee against a fixed list of deliverables. Almost everyone starts in the same place, and plenty of customers stop after it.
The front door
Claude Code Security and Adoption Assessment
One week. Fixed fee, credited in full against anything you sign within thirty days.
We look at your real usage and configuration, score you against thirty two controls, and hand you a ninety day plan where every line has a price next to it. No changes are made to your environment during the week.
You finish the week knowing three things you probably cannot answer today: how many of the seats you pay for are actually used, what an agent could reach if someone tricked it, and whether your logs could tell you afterwards.
The ladder
What usually comes next
Four engagements. You can take one, several, or none.
| Service | Outcome | Time |
|---|---|---|
| Security Hardening | The controls in place, and the evidence pack in your hands | 3 to 4 weeks |
| Claude Code Rollout | Claude live across your engineering org, with the numbers to prove it | 3 weeks |
| Cloud Automation with Envaldi | Create, copy and tear down environments through Claude, safely | 3 to 4 weeks |
| Claude Run | Everything kept current as the tools change, with a monthly report | Monthly |
Hardening and Rollout overlap, because both configure settings, hooks and telemetry. Bought together they are one engagement at one fee, not two, so you pay for that work once.
Pricing
We will send you the numbers before you speak to anyone
Every engagement is a fixed fee against a fixed list of deliverables. We are happy to tell you what they cost. Leave an email and the full fee schedule arrives in one message, with no call in between and nobody chasing you afterwards.
Boundaries
What we do not do
We do not certify compliance, that is an accredited auditor's job.
We do not run a security operations center or take 24 hour response duty.
We do not perform penetration testing.
We do not build your SIEM or replace your identity platform.
When you need those, we will say so and point you to someone who does them properly.
Questions
Questions about working with us
With the one week assessment. We score your organization against 32 controls using your own data, rank the risks, and give you a ninety day plan with a price on every line. No changes are made to your environment during the week.
Yours. Everything we build runs in your cloud, your repositories and your monitoring, using the identity provider and tools you already own. We hold none of your data, we do not sell software, and we do not resell licenses.
Yes, and they become one engagement at one fee. Both configure settings, hooks and telemetry, so bought together you pay for that shared work once rather than twice.
Yes. Our 32 controls are written against the risk, not the vendor, so they apply to every AI coding agent in your estate. We implement each control with the platform's own settings, then prove it with the same evidence.
We do not certify compliance, run a security operations center, take 24 hour response duty, perform penetration testing, build your SIEM or replace your identity platform. When you need one of those, we will say so and point you to someone who does it well.