Recon Assessment
Starting at $15,000 plus expenses.
Four days on site with your team, then a written report within about two weeks: findings, root causes, prioritized recommendations, a 30/60/90-day roadmap, and where you can avoid adding headcount.
We work around your normal operations, and we'll need access to the right areas and the right people while we do. Every engagement is scoped to your organization.
When the subject is incident readiness, the four days cover the plan you have, one tabletop or one restore, and the gaps that have names. The people who would be called are part of those days. The written report still follows in about two weeks.
Inquiries Text First Then Call: 801.319.1061
01
Free consult
No fee. Text or phone.
Tell us the security or IT operations problem. Engagements are remote-first across the U.S., and on-site travel is available. We work around your normal operations, and we'll need access to the right areas and the right people while we do. Robert Foster replies from Utah, or gives a clear reason the work is not a fit.
- A direct reply from Robert Foster
- A yes, and we take the work, or a no, with the reason
- No account and no form to learn it is not a fit. Once you approve it, we'll need access to the right areas and people.
02
Assessment
Scoped in writing before the work starts.
A look at the operation you already run. One job is followed from request to done, through the people, the access, and the records that touch it. An infrastructure assessment or a SOC 2 question can open it.
- A written scope you can accept or decline before anyone arrives
- What already holds, what disagrees, and the order in which to close it
- Security, infrastructure, and the software bill on the same account
03
Alignment
Scoped in writing before the work starts.
After the assessment, we close the gaps. Owners, reviews, and records your team can run.
- A named person for the duties that stall the week
- Reviews that change the work, not a calendar of updates
- A handover. The next week runs without a consultant in the meeting
Facility assessment
A fixed fee, paid in full before the visit is scheduled. The amount is not published on this site.
We review the operation as it is actually run: the systems we can reach, the people who operate them, and the leadership that owns the decisions. Security, quality, and infrastructure are one system, from hardware and networks through cloud and data.
ISO 27001 readiness and penetration testing with retest can be this engagement. You receive a written account of what needs attention. Implementation, contract support, and a hire that follow the findings are agreed separately. Where the limit is hours, that follow-on is how a finding gets an owner. It still needs access to the right areas and the right people. We do not carry it out without them.
- The fee is part of the reply, not a rate card on this page
- You can decline it
- We work around your normal operations, and we'll need access to the right areas and the right people while we do
04
Work that follows
Scoped in writing before it starts.
A single playbook, a single tabletop, a ransomware readiness assessment, breach readiness, or a backup and recovery test. The fee is in the scope. It is not listed on this page, because the system in front of us is the scope.
- One incident type or one system, unless the scope says more
- You can decline it
- Access to the right areas and the right people is part of the scope
