Evidence-backed security assessments

Security reviews customers can actually complete.

Choose a focused package, see the scope and prerequisites up front, run a read-only assessment, and get a report that tells you what matters and what to do next—without a sales call.

Clear before checkoutScope, prerequisites, data, price, and limitations
Read-only by designNo automatic configuration changes
Actionable reportsPrioritized findings and remediation
Recovery required for launchRetry, replacement, credit, or refund—not a dead end
Two focused starting points

Choose what you need assessed.

The beta intentionally starts narrow. Every package has a defined target, evidence boundary, report, remediation path, and included rescan.

Design-partner beta

macOS Foundations

A focused, read-only configuration assessment with a clear report, guided remediation, and one included rescan.

  • Plain-text collector with a published SHA-256
  • Complete HTML and JSON report for the selected beta manifest
  • Plain-language explanations and bounded remediation guidance
Automation-complete beta in build

AWS Foundations

A hosted read-only account assessment using short-lived AWS access, transparent permissions, prioritized findings, and one included rescan.

  • Pre-filled CloudFormation setup with exact permissions visible before creation
  • Short-lived AWS STS sessions and no access-key transfer
  • Technical and executive report with explicit coverage and limitations
A predictable workflow

From readiness to measurable improvement.

1

Check readiness

Review prerequisites, then pass a real technical preflight before payment.

2

Run safely

Use a transparent collector or customer-owned read-only cloud connection.

3

Understand results

See coverage, unresolved evidence, priorities, and limitations in plain language.

4

Fix and rescan

Follow bounded guidance, make approved changes, and use the included rescan.

The beta launch guarantee

Your purchase should never end in a technical dead end.

Checkout will remain disabled until these recovery paths are implemented and tested end to end.

Service and transport failures will not consume a purchased run.
Expired or damaged setup paths will be replaceable after authentication.
Every delivery failure will offer a retry, alternate path, support, credit, or refund.
A successfully delivered report that finds security problems is not a service failure.

Need an internal or custom deployment?

Enterprise delivery will cover requirements such as customer-hosted runners, private artifact distribution, restricted networking, custom retention, and direct security review. Standard packages remain fully self-service. Direct enterprise intake will open with the beta.