FAQ
Frequently asked questions
The questions we are asked most often before a first conversation. If yours is not here, write to us — we answer directly.
Do you work with organizations in my industry?
Yes. Cybersecurity challenges depend on an organization’s operations, the information it handles, the technology in place and its risk profile — not only on its industry. We work across sectors, and the first conversation is what confirms whether we are the right fit for your situation.
Do you sell security products or software?
No. We do not resell software, hardware or security services, and we receive no commission. Our recommendations are based on your risks and priorities, not on selling a solution.
How are scope and price set?
Before the engagement begins. Scope, deliverables, price and timeline are agreed in writing at the end of the first conversation. If something surfaces along the way that changes the scope, we raise it before going further.
Which service should we start with?
That is exactly what the first conversation is for. Depending on what you are trying to resolve, the starting point may be a risk assessment, a third-party security review, vulnerability management, governance and compliance advisory, healthcare-specific support, or an assessment of the security and governance of your use of artificial intelligence.
What do we actually receive at the end?
Documented findings and recommendations prioritized by risk, readable by your technical teams and your leadership. Possible deliverables are listed on each service page, and the ones that apply to your engagement are fixed in the proposal.
What languages do you work in?
English and French, both written and spoken. Deliverables can be produced in either language, whichever suits your organization.
Not seeing your question?
Write to us in a sentence or two. We answer ourselves — no gatekeeper, no automated follow-up sequence.