Security retainer
Security is a habit, not a project
An audit is a photograph. Three months later you have shipped forty times, added two integrations and onboarded a customer who sends a questionnaire every renewal. This keeps the photograph current without hiring anyone.
What is included
Every month, and every quarter
Quarterly review
Re-run of the checks against what you have shipped since, with a written summary.
Dependency drift
New vulnerabilities in what you already depend on, triaged so you are not chasing every advisory.
Configuration drift
Cloud permissions and rules that loosened while somebody was debugging.
Questionnaire support
When a customer sends 180 questions, we help you answer them honestly and quickly.
Included remediation
A few hours each month to actually close what we find, rather than reporting it again next quarter.
A named engineer
The same person each time, who already knows your architecture.
Monthly
$800–$2,000per month
Depending on the size of your estate and how much remediation you want included. Cancel monthly, no notice period.
Talk about a retainerBeing straight with you
Who should not buy this
If you have not had a review yet, start there, because a retainer that begins with unknown problems spends its first six months on them. If you ship rarely and your infrastructure does not change, you probably need an annual check rather than a monthly fee. And if you are large enough to employ a security engineer, employ one, it will be better and cheaper.
FAQ
Common questions
Is this incident response?
No, and that is an important distinction. We are not on call at three in the morning and we will not claim to be. This is scheduled work that reduces how often you need that call. If you need genuine 24/7 response, you need a firm staffed for it, and we will help you pick one.
What happens each quarter?
A review of what changed since last time, a re-run of the checks, dependency and configuration drift, and a short written summary you can forward to a customer who asks. Plus help with any security questionnaire that lands in between.
Can we cancel?
Monthly, with no notice period. A retainer you cannot leave is a subscription, not a service.
Does it include fixing things?
A few hours of remediation each month are included, which covers most drift. Anything larger we quote, and we will tell you plainly when something is outside the retainer rather than quietly letting it eat the hours.
Let's talk
Tell us what you're building.
Get a free 30-minute strategy call. You'll leave with a clear plan, a realistic estimate and our honest opinion — whether or not you work with us.
- Email usmail@voliom.com