Services
Technology, architecture and cybersecurity advisory services.
Architecture, vendor and platform decisions; systems blocking delivery; technical risk in transactions; and findings that need implementation.
Discuss the work↗
The work connects technology decisions, architecture, security evidence and remediation without forcing every problem into the same service.
Scope of work
What the work covers
An engagement can use one service or combine several where architecture, cybersecurity, cost and delivery are linked.
Technology strategy & decision support
A decision gets settled, with the options, the assumptions and the rejected alternatives on paper.
↗Architecture & system assessment
How the system works now, what it depends on, who owns which part, and which directions remain open.
↗Platform, cloud & modernisation
Where the platform is going, what gets retained or retired, who owns it, and the order of the move.
↗Technical due diligence
What the technology claims are worth, and what the work after signing will actually cost.
↗Cybersecurity & compliance engineering
External requirements become controls that exist, people who own them, and evidence a reviewer accepts.
↗Remediation & engineering leadership
Findings get closed — in an order that respects what each one really takes, with proof they are finished.
↗NIS2 Technical Consulting
Controls, owners, implementation priorities and review-ready evidence.
View service ↗ISO 27001 Technical Consulting
Technical control implementation, audit readiness and findings closure.
View service ↗Cyber Resilience Act Consulting
CRA product-security lifecycle, SBOM, vulnerability handling and evidence.
View service ↗Security Architecture Review
Trust boundaries, control placement, ownership and remediation priorities.
View service ↗DevSecOps Consulting
Secure CI/CD, dependency controls, security gates and release evidence.
View service ↗Vulnerability Management Consulting
Risk-based prioritisation, ownership, remediation and verification.
View service ↗Product Security Consulting
Secure development, disclosure, customer evidence and lifecycle ownership.
View service ↗SBOM & VEX Consulting
Component inventory, product-context decisions and release evidence.
View service ↗Defined engagements
Duration, deliverables and starting price
Technology Decision Review
Independent recommendation for a high-impact technology decision.
From €9,500 excl. VATView scope ↗ 10 business daysFindings Translation Sprint
Findings converted into priorities, owners, implementation work and closure criteria.
From €6,500 excl. VATView scope ↗ 6–12 weeksRemediation Delivery Lead
Technical leadership for implementation, blockers, risk decisions and evidence.
From €9,500/month excl. VATView scope ↗Starting prices exclude VAT. Final scope, exclusions and commercial terms are confirmed in a written proposal. Engagements are delivered remotely, and geography is not a constraint on scope — on-site work is arranged only where the work requires it, and is quoted separately.
Exclusions
What I do not sell
Managed IT, a SOC, or 24/7 incident response
Round-the-clock cover needs a staffed rota, which is a different business from advisory work. A response time nobody is rostered to meet is not a response time.
Certification guarantees, or compliance by scan
The auditor decides, and nobody else can commit on their behalf. A scan reports what a tool can see — not who owns the control or whether it works, which is the part a reviewer asks about.
Developers by the head
Billing per person per month removes the reason to finish. Every engagement here is priced against an outcome instead, which is the opposite incentive.
Vendor-funded recommendations
A commission would settle the recommendation before the assessment started. There is no reseller margin anywhere in this, which is also why cheap advice is not on offer.
Contact
Send the decision, system or findings context
You get back the relevant service, the inputs it needs and a proposed scope.
Send the context↗