Frequently asked questions
Clear, direct answers about how we work, what we build, and how we protect your business
What size of clients do you typically work with?
Series-B startups through to tier-1 enterprises and government agencies. Our sweet spot is organizations with real consequences if technology fails — typically 200+ employees or regulated industries.
How do you handle confidentiality?
NDA-first by default. Our case studies are anonymized unless a client requests otherwise, and we never publish material from cybersecurity engagements without explicit written consent.
Where are your team members based?
Headquartered in Ottawa, Canada with senior team members across North America, Europe and MENA. We work in EN, AR and TR.
What engagement models do you offer?
Fixed-scope projects, team augmentation, and managed services on SLAs. The right model depends on whether you need an outcome, capacity, or continuous operation.
Do you sign performance-based contracts?
Yes, where the success metric is something we can genuinely control. We'll happily structure a portion of fees against a delivery milestone or measurable security KPI.
How fast can you start?
Discovery typically begins within one to two weeks of a signed engagement letter. Incident-response retainers can be activated within hours.
Do you work with our existing vendors?
Routinely. Many of our engagements involve coordinating with incumbent SIs, cloud partners, and product vendors. We hold no exclusive vendor allegiances.
What is the typical engagement length?
From 2-week architecture reviews and pentests, through 3-6 month delivery programs, up to multi-year managed services. We size the engagement to the outcome — not the other way around.
Zero commitment · Principal-led
Ready to transform your business?
Let’s discuss your next project