Skip to content
Free vendor security review checklist for buyers and sellersFree vendor review checklistGet the checklist →
Let’s talk
GREY WING SECURITY

Security, IT, and SOC 2 readiness, run for you.

We run security, IT, and SOC 2 readiness programs for growing companies. If your founders or engineers handle it on the side, we take it off their plate and do the work in your systems.

Let’s talkSee the programs

  • Tell us about your systems and your deadline. We reply within one business day.

  • Everything stays in your accounts.

Grey Wing has helped us stay ready for SOC 1 and SOC 2 year-round. We never had to hire internal staff to manage it ourselves.

Brian WaleriusCTO, Routable, Inc.

Pick the help you need.

Security Program

Protect your product, cloud, and team.

We find and fix weak spots in your app and your cloud. We lock down employee logins and laptops. We tune alerting on your key systems and guide your team when something needs attention.

  • Secure your app

  • Lock down your cloud accounts

  • Protect logins and laptops

  • Set up alerts and guide response

Optional add-on: 24/7* managed detection and response from a specialist security operations partner.

*24/7 monitoring is available as an add-on for an additional cost.

See the Security Program

IT Program

Run the tools your team uses every day.

We set up and run accounts, laptops, and apps. New hires can get the access they need from day one. Access ends when someone leaves.

  • Manage logins and access

  • Set up and patch laptops

  • Run your SaaS apps

  • Keep networks and backups working

See the IT Program

GRC & Compliance Program

Get ready for SOC 2 and customer reviews.

GRC means governance, risk, and compliance. In plain words, we write your policies, gather evidence, and answer security questionnaires. An independent firm issues any SOC 2 report.

  • Write policies that match real work

  • Gather evidence for your audit

  • Answer security questionnaires

  • Track risks and vendors

See the GRC & Compliance Program

Your fee depends on the systems, the work, and the deadline. See how pricing works

Proof over promises

Real changes, with a record of each one.

Every change we make in your cloud accounts, your login system, and your laptop tools gets written down, so your team can see it.

  • A work plan with priorities, owners, and dates.

  • Step-by-step guides for access changes, incidents, and recovery.

  • Evidence for each control, ready for your auditor or a customer review.

How we work together.

  1. Agree on the scope

    Before we start, we agree on the systems, the work, the fee, the hours, and the response times. Any change to scope needs your OK.

  2. Do the work

    We set up the agreed controls, collect evidence, and track progress against the plan. Your team approves changes that affect people or live systems.

  3. Wrap up

    We check the work against the plan, hand over the docs, and review our access. Ongoing work gets its own scope.

Latest field notes

All field notes

Not sure where to start?

Tell us about your systems and deadline. We’ll reply within one business day.

Let’s talkHow pricing works