Security Retainer

Protocols keep shipping; a one-off audit describes a snapshot. The retainer gives you a security partner that knows your system, with capacity reserved every month that you can direct to any mix of our services. Typical work includes reviewing code changes and upgrades before they ship, re-running your stress scenarios after significant changes, extending invariant and fuzz test suites, and hardening work as new failure modes appear. Because context carries over from month to month, there is no re-onboarding and no gap between a release and its review. Capacity is agreed up front, and each month you see where the time went. The retainer covers review, testing and engineering; it does not include operating your systems, holding keys or on-call incident response.