Programs
Programs run from Sacramento for teams anywhere. We implement security controls, maintain employee systems, and prepare audit evidence. Choose the program your team needs.
Start here if you need to protect your product and cloud.
We find and fix weak spots in your app and your cloud. We lock down employee logins and laptops. We tune alerting on your key systems and guide your team when something needs attention.
Start here if you need someone to run everyday IT.
We set up and run accounts, laptops, and apps. New hires can get the access they need from day one. Access ends when someone leaves.
Start here if you’re getting ready for SOC 2 or customer security questionnaires.
GRC means governance, risk, and compliance. In plain words, we write your policies, gather evidence, and answer security questionnaires. An independent firm issues any SOC 2 report.
One-off application security (AppSec) project
We test the internet-facing systems, web apps, and APIs you name, then report what we found and how to fix it. Available as a separate engagement, scoped and priced on its own.
Let’s talkYou know exactly what’s being tested. Targets, boundaries, and your responsibilities are named in the proposal before testing starts.
You get a report you can act on. Findings and remediation guidance in a Grey Wing report, under our MSA.
It’s a defined project. One assessment against the agreed scope, not an ongoing red or purple team service.
A penetration test is not an audit opinion or a breach guarantee.
Tell us about your systems and deadline. We’ll reply within one business day.
Your fee depends on the systems, the work, and the deadline.
