Rung 1
Security check — free
First look: attack surface, patching, MFA/backup status, NIS2 exposure. Output: gap list + rung recommendation.
Rung 2
Sprint — fixed scope, €2,500–4,000
Hardening sprint: CIS hardening, evidence-box (chain-of-custody VM), NIS2 action plan. PTaaS pentesting stays boutique-direct under written C1 authorization.
Included in the sprint
- CIS hardening & hygiene kit → sprint building block
- Evidence-chain VM → sprint deliverable
- NIS2 audit → sprint output (action plan)
- PTaaS / pentesting → boutique-direct, C1 authorization
- ISO-27001 readiness → optional in retainer
Rung 3
Operations — retainer, from €1,200/mo
Hardening & watch: monitoring, evidence chain, quarterly re-check, incident readiness.
Detailed product pages live in the menu — the rungs are the entry point, the details the deep dive.
Built in the open — build log
Excerpts from ongoing work: assessment rungs, SolidStart wizard (3 documents in under 3 minutes), checker, beacon, deployments.