Start without a retainer.
A sprint is a single fixed-price engagement with a defined deliverable and an end date — the fastest way to get a concrete result and see how we work before committing to anything ongoing.
DMARC Enforcement Sprint
Stop scammers sending email as your company, without blocking your real mail. One domain, up to five sending services; more are quoted.
Cloud Bill Sprint
Cut your cloud bill with three agreed changes and spending alerts, then a follow-up once about 30 days of new billing data is in.
Cloud + DevOps Audit Sprint
Find cost, security and single-point-of-failure risk in your AWS estate, ship three agreed fixes, and set up cost guardrails, with a 30/60/90-day roadmap.
HIPAA Risk Analysis Sprint
The Security Risk Analysis HIPAA requires, three agreed small fixes and an action plan — for single-site practices of up to 15 staff.
SOC 2 Readiness Starter
Honest gap assessment, three initial controls and an auditor-ready roadmap — for teams of up to 25 facing a deal that requires SOC 2.
Which sprint fits your situation?
Each sprint answers one specific trigger. Find yours, then see what you leave with.
| If this is you | Sprint | You leave with |
|---|---|---|
| A customer or prospect asked for your SOC 2 report | SOC 2 Readiness Starter $4,000 · 30 days | A gap assessment against your real environment, three initial controls, and a Type I / Type II roadmap |
| You handle patient data and have never done a HIPAA Security Risk Analysis | HIPAA Risk Analysis Sprint $5,000 · 30 days | The Security Risk Analysis HIPAA requires, a risk register, an action plan and three agreed small fixes |
| Your cyber insurer or an auditor wants proof your domain enforces DMARC | DMARC Enforcement Sprint $1,500 · 30 days | Your domain at p=reject with every legitimate sender aligned, plus an evidence pack |
| Your cloud bill keeps growing and nobody owns it | Cloud Bill Sprint $5,000 · 14 days + follow-up | The top agreed savings implemented in 14 days, budgets and anomaly alerts, and a 180-day plan |
| You inherited AWS infrastructure and don't know where the cost, security, or outage risks are | Cloud + DevOps Audit Sprint $5,000 · 30 days | Three agreed cost or security fixes, cost guardrails, and an audit report with a 30/60/90-day roadmap, in 30 days |
Why a sprint instead of a proposal
Sprint questions
Do I have to sign a retainer after a sprint?
No. A sprint is a standalone engagement with a fixed price and an end date. You keep every deliverable. If you want ongoing help, the sprint's roadmap becomes the starting plan for a monthly retainer, but nothing commits you to one.
What's the difference between the Cloud Bill Sprint and the Cloud + DevOps Audit Sprint?
The Cloud Bill Sprint is 14 days and only about cost: we implement the top agreed savings and set up budgets and anomaly alerts. The Cloud + DevOps Audit Sprint takes 30 days on AWS and covers cost, security posture, and DevOps single points of failure: we ship three agreed cost or security fixes, set up cost guardrails, and leave an audit report and a 30/60/90-day roadmap.
We already use Vanta or Drata. Do we still need the SOC 2 Readiness Starter?
Often, yes. A compliance platform automates evidence collection, but it can mark a control green that an auditor would still question. The Starter checks your controls against how your environment actually works and puts three initial controls in place. See our Vanta vs Drata vs Secureframe comparison for how the platforms differ.
What does a sprint need from our team?
A point of contact who can make decisions and access to the systems in scope, both agreed on the scoping call. Senior PlatOps engineers do the work; your team reviews findings and approves changes.
What does the $1,500 DMARC sprint cover?
One active domain with up to five supported sending services. More domains or senders get a fixed quote on the scoping call before work starts.
Comparing compliance platforms first? Read Vanta vs Drata vs Secureframe.
Free 30-minute call
Not Sure Which Sprint Fits?
Book a free 30-minute call and we'll point you to the right sprint, or tell you honestly if a sprint isn't the right move.
No commitment. Video call or phone, whichever you prefer. Run by senior engineers, serving clients since 2014.
What you leave the call with
- Which sprint fits your problem
- What it covers and what it doesn't
- Whether a sprint is the right move at all
Prefer it in writing? Request a written review