Everything clients ask before signing.

We start with a free 45-minute discovery call, followed by a paid two-week discovery sprint where we map goals, constraints and success metrics. From there most clients choose a fixed-scope project or an ongoing team subscription. You get a written plan with milestones before any major commitment.

Discovery sprints usually begin within one to two weeks of signing. For urgent incidents — outages, security breaches, audit deadlines — we reserve emergency capacity and can often have engineers engaged within 24 hours.

Fixed scope, fixed price for well-defined work; time-and-materials for exploratory engagements; and monthly subscriptions for embedded teams and managed services. Every proposal itemises deliverables so there are no surprises on the invoice.

Our smallest common engagement is the two-week discovery sprint. For managed services, estates under about 20 endpoints are usually better served by local providers — we will happily point you to good ones rather than sell you something that does not fit.

Senior consultants from our core team — we don’t subcontract to body shops or rotate juniors through your account. You meet the specific people who will deliver your project during the sales process, and they stay on it until handover.

Every engagement gets a shared dashboard showing progress, risks and spend in real time, plus a weekly written summary and a fortnightly demo. No status meetings for status’s sake — you see working software instead.

That is our favourite way to work. We pair deliberately, document as we go, and run knowledge-transfer sessions so your engineers own everything by the end. Success for us is your team not needing us next quarter.

You do — 100%, including all source code, infrastructure definitions and documentation. Our standard contract assigns all work product to you on payment, and we’re happy to sign your NDA and security addenda.

Yes: ISO 27001 certified, Cyber Essentials Plus, and our consultants hold current AWS/Azure/GCP professional certifications plus OSCP and CISSP across the security practice. Reports available under NDA.

Every build includes a hypercare period (typically 30 days) at no extra cost. After that, choose between a support retainer with defined SLAs, transitioning to managed services, or a clean handover to your internal team.

Yes. Retainer clients get a one-hour response SLA around the clock. Non-retainer clients can purchase incident blocks ad hoc. If you are being actively attacked right now, call us anyway — triage is free.