We find the weak spots in your app, your cloud, and your company systems. Then we fix them with your team and set up alerts on your key systems.
This program is for growing companies that need security across the product, the cloud, and the team, with a named lead who’s accountable for your program.
Bugs and cloud issues pile up, and no one has a plan to fix them.
Employee logins, laptops, or settings have gaps.
Alerts come in, but no one knows who checks them or what to do next.
Customers or insurers ask who watches your systems after hours.
Before we start, we agree with you on the systems, the priorities, and how deep to go.
App security means finding and fixing flaws in the software you build.
Review how your app is built and how data moves through it.
Add checks that catch risky code, old libraries, and leaked keys or passwords.
Sort findings with your engineers and confirm each fix.
Penetration testing of your internet-facing systems, web apps, and APIs, available as a separate engagement, with fixes tracked.
You get: A map of likely threats, a list of findings, and fix tickets marked as checked.
Cloud security means setting up the accounts that run your product so they are hard to break into.
Check who has access, what is open to the internet, and how networks are split.
Tighten settings and how you store secrets like keys and passwords.
Check logs, backups, and how you would recover.
Track each issue until it is fixed.
You get: A set of safe baseline settings, a record of the changes we made, and a ranked list of issues.
This covers the people side: employee accounts, laptops, and the business apps your team uses.
Make logins stronger, most of all for admin accounts.
Check laptop protection and security settings.
Tighten business app settings and network access.
Track weak spots, exceptions, and gaps.
You get: Login and laptop baselines, access findings, and a written list of exceptions.
We make sure warning signs reach a person, and that the person knows what to do next.
Map which systems send logs and which attacks you can see.
Tune alerts, look into the agreed alerts, and write down what we find.
Raise incidents and help contain them within the agreed hours.
Practice your incident and recovery plans, and track the follow-ups.
You get: A map of what you can see, records of alert tuning, and tested incident plans.
Optional add-on
Add managed detection and response (MDR) from a specialist security operations partner. Their analysts watch your systems around the clock and act when a real threat shows up.
Ask about 24/7 MDRYou choose which of these to cover.
Partner analysts review signals from your covered systems at any hour and sort real threats from noise.
When a threat is confirmed, they act within steps you approved in advance, such as isolating a laptop, locking an account, or pulling a malicious email.
Grey Wing takes it from there inside your program: clean up, close the gap that let it in, and write down what happened.
| What changes | Security Program | With 24/7 MDR |
|---|---|---|
| Alert review | The alerts we agreed on, within agreed hours | Your covered systems, day and night |
| First response | Your Grey Wing lead, within agreed hours | Partner security operations analysts, at any hour |
| Containment | We raise the incident and help contain it | Pre-approved steps, taken once a threat is confirmed |
| Fixing the cause | Grey Wing, tracked in your plan | Grey Wing, tracked in your plan |
How it’s delivered. Round-the-clock monitoring is run by a specialist security operations partner. Grey Wing sets it up, tunes it to your systems, and stays your point of contact.
Agreed in writing. The systems covered, the containment steps partner analysts may take, and the response times are set before monitoring starts. MDR is priced separately from the program.
*24/7 monitoring is available as an add-on for an additional cost.
Plans, records, and evidence stay in your accounts and your docs.
A security plan for all four areas, with priorities, owners, and dates.
The changes we made, and the issue each one fixes.
A fix list that shows what we checked and which risks you chose to accept.
Alert coverage, steps for raising an incident, and records of practice drills.
Short updates for leaders on what is done, what is open, and what needs a decision.
With 24/7 MDRA record of each confirmed threat, what was contained, and what we fixed afterward.
Start with one phase or an ongoing program.
We review your app, cloud, employee systems, and alerts. We rank each issue by how exposed you are and how much it could hurt the business.
We set up the agreed controls, work with your engineers on app fixes, and write down each change.
We review new issues, tune alerts, and practice your response on an agreed schedule.
We review what changed, what risks remain, and what matters most now. We update the plan as your systems change.
Name a business contact and an engineering contact.
Give us approved access to your app, cloud, login, laptop, and log systems.
Approve changes to live systems, incident messages, and any risk you accept.
The plan names the apps, systems, controls, and incident cases we will cover.
Outside pen tests and special incident services are scoped on their own when needed.
Hours, alert coverage, and response times are set before work begins.
If you add 24/7 MDR: the systems covered and the containment steps partner analysts may take before reaching you.
Fees depend on the systems, the work, and how much coverage you need. See how pricing works
Common questions
Yes. All four areas make up the Security Program. Your plan sets the systems, the depth, and the priorities in each one.
We make the agreed changes and work with your engineers on app fixes. Your team approves changes that touch live systems, people, or accepted risk.
Not by default. We agree in writing on the hours, the systems, the contacts, and the response times. The program is not a 24/7 security operations center or unlimited incident response.
For coverage around the clock, add 24/7 MDR. It is priced separately.
*24/7 monitoring is available as an add-on for an additional cost.
A staffed security operations center run by our specialist partner monitors the systems you choose, such as laptops and servers, email, employee logins, and cloud accounts. Partner analysts contain confirmed threats using steps you approve in advance, and then we handle the follow-up fixes in your program.
Yes. You can start with the program and add coverage around the clock when you need it.
Grey Wing Penetration Testing is a separate service for your internet-facing systems, web apps, and APIs. The Security Program covers planning the test and tracking the fixes. The test itself is scoped and priced on its own.
Yes. We start with the tools you already use. We review any tool change, and its cost, with you first.
Tell us about your systems and deadline. We’ll reply within one business day.
