Contact

If you have a question your monitoring does not answer, get in touch. I reply within two working days.

The first email needs three things: what the system is, which question needs answering, and by when. No attachments or technical detail at this stage. If your description makes it clear the work is not needed, or that you need a different profile, I will say so in my reply at no cost to you.

How engagements start

The first step is always an assessment, three to five days, producing a document listing the possible interventions ordered by effect against cost. It is paid and fixed price. From there you decide whether to continue, and in a fair number of cases the conclusion is that the larger engagement is unnecessary. That is still a result you take away.

I take short engagements, down to a few days, provided the question is bounded. I do not take fixed price work against specifications I have not seen.

What I do not do

No penetration testing or offensive security, no certifications or conformity attestations, no scraping work that requires getting past authentication or bot protection, and no work on sources exposing personal data without a legal basis stated by the client.