Services
Advice is cheap. Execution isn't.
Most organizations do not need another slide deck. They need the inventory built, the roadmap agreed, access decisions enforced, the certificates reissued, and the agents given identities that can be revoked. We do the work alongside your team.
Offerings
Six ways to start.
Each engagement is scoped to a decision you need to make and an asset you need to change.
PQC readiness sprint
From no inventory to a board-approved roadmap.
Agentic identity
Workload identity, delegation, and short-lived credentials for autonomous systems.
PKI modernization
CA hierarchies, HSM integration, and certificate lifecycle at fleet scale.
IAM & non-human identity
Least privilege, non-human identity inventory, and federation that survives the transition.
Threat modeling program
From one model to a program the team owns.
Zero Trust architecture
Identity-centric segmentation, workload identity, and continuous verification.
How it starts
A ladder, not a leap.
You should be able to hire us for one decision before you hire us for a program.
- 01 No cost
Readiness review
45 minutesA working session on your obligations, exposure, and constraints. We tell you what we would do first — and whether you need us at all.
- 02 Fixed fee
Readiness sprint
6 weeksDiscovery, risk scoring, and a board-ready roadmap. Fixed scope and fixed price, because the first phase should not be a fishing expedition.
- 03 Milestone-based
Migration program
One to four quartersHands-on migration of TLS, certificates, and signing pipelines, sequenced by exposure and delivered with your change control.
- 04 Subscription
Operate
OngoingRetained cryptographic operations: drift detection, policy maintenance, evidence production, and quarterly readiness reporting.
Principles
How we behave on an engagement.
These are commitments, not values. They are the things clients tell us they cannot get elsewhere.
We scope to a decision
Every engagement exists to produce a decision or a change. If a workstream cannot name either, it does not belong in the plan.
We pair with your team
Knowledge transfer is part of the work, not a handover document at the end. Your engineers should be able to run it without us.
We write down the tradeoffs
Hybrid versus pure PQC, speed versus coverage, buy versus build — documented with the reasoning, so the next team can revisit it.
We say no to bad scope
A migration that cannot succeed inside your change control is a worse outcome than a smaller migration that holds.
Start here
Find the first decision worth making.
The readiness assessment shows where the program is exposed and what a sensible first 90 days looks like, so you can choose the right engagement — or none.