A structured 2–3 week assessment of your full security posture. We map every gap, rank every risk, and give you a prioritized roadmap. The foundation for everything that follows.
Our guarantee
If we do not find at least 10 actionable security gaps, the Assessment is free. We have never had to honour this — but it tells you something about our confidence.
What it is
Most security problems in growing SaaS companies aren't caused by a single failure — they're caused by a pile of small gaps that nobody has ever mapped, prioritized, or documented. The Assessment changes that.
In 2–3 weeks, we conduct a structured review across six security domains. We interview the right people, examine your actual environment, and produce a findings report you can act on — not a generic questionnaire output.
The Assessment is required before any Sprint or managed engagement. It's how we make sure everything we implement is calibrated to your actual gaps — not assumptions.
At a glance
What we assess
Every assessment covers the same six domains — not because it's a checklist, but because these are the exact areas auditors, enterprise customers, and regulations will scrutinize.
What you receive
The Assessment deliverable is designed to be immediately useful — for your leadership team and as input for the Sprint scope.
Structured findings across all six domains. Each gap is documented with evidence of the problem, the risk it creates, and what needs to be done to remediate it.
Every gap ranked by risk severity and compliance impact. Grouped into immediate, 30-day, and 90-day remediation horizons. This becomes the Sprint scope.
Mapped against ISO 27001 Annex A, SOC 2 Trust Service Criteria, and PCI DSS where applicable. Tells you exactly which controls are missing for your target framework.
A concise leadership-facing summary of posture, top risks, and recommended next steps. Designed to be shared with your board, investors, or lead enterprise customer.
Who it's for
You're losing deals or stalling sales cycles because you can't answer security questionnaires with confidence.
You know you need certification. You don't know exactly how far you are from it, or where to start.
Decisions are made reactively. Nothing is documented. You've never had a structured view of your full security posture.
Ready to start?
The Fit Call is a 30-minute discovery conversation. We review your environment, confirm fit, and scope the Assessment. No obligation, no pitch deck.
€2,500 · 2–3 weeks · Fully credited toward the Sprint