Services
Five lanes. Stated plainly.
Every page below states what is delivered, what is deliberately out of scope, and what prerequisites exist. Clear pricing, direct engagement, and published standards throughout.
Our services
Five lanes, and the honest edges of each.
Each lane comes with a detailed page that defines scope, boundaries, and prerequisites. The honest edges matter: knowing what we do not take is as important as knowing what we do, because scope is what you are actually buying.
Managed IT
Endpoints and servers monitored continuously, patched on a defined cadence, backed up with restores actually tested. Identity and Microsoft 365 administered rather than left on defaults. Detection and response is backed by a vendor with staffed 24/7 operations centre, so coverage runs round the clock.
Details02Compliance groundwork
HIPAA Security Rule risk analysis and the remediation that follows it. CTPAT Minimum Security Criteria §4 evidence for customs brokers and freight forwarders. PCI DSS 4.0.1 controls as an attachment to security work. DFARS 252.204-7012 / NIST SP 800-171 self-assessment support, described accurately.
Details03Projects
Microsoft 365 and file-server migrations, Entra identity and conditional access, firewall replacement and configuration, segmentation of gear you already own, backup and DR design proven by restore, SPF/DKIM/DMARC to p=reject. Billed hourly at $165/hr, quoted when scope is defined.
Details04Cloud & self-hosting
Audit the SaaS bill, consolidate spending, and move what makes sense onto self-hosted infrastructure. GitOps and infrastructure-as-code below the size where other vendors offer it. The outcome: lower costs and data residency you control.
Details05Private AI
A self-hosted language model answering questions over your own documents, on hardware you control, with nothing sent to a third-party service. For the businesses that cannot put a patient record, a client file or a customs entry into a public chatbot. Honest about what it does not do: it will sometimes be wrong, and self-hosting is not compliance.
DetailsWhere it starts
Nobody hands a stranger their whole estate. Buy the small thing first.
The entry product is an IT assessment, not a free consultation and not a proposal built on guesses. We audit the network, Active Directory or Entra, patch level, end-of-support hardware, and backup integrity. The result is a written findings document with a prioritised roadmap. It is yours whether or not you sign an engagement agreement.
Hourly rate
$165/hr
Typical duration
10–15HOURS
Applied toward engagement
Within30 DAYS
An assessment is the entry point, not a prerequisite to deeper engagement. Continuing beyond the assessment means signing an agreement for ongoing work — whether managed IT, projects, or compliance work — all billed at the same hourly rate. The pricing page lists engagement options.
The perimeter
What we do not take, and exactly why.
California licenses trades, not information technology. Configuring, managing, monitoring and securing equipment that already exists needs no licence. Physically installing it is where the boundary sits — and a provider who ignores that line hands you a contract a court can unwind. We name the boundary rather than blur it, because clarity protects both sides.
- Cable plant and anything fixed to the building
- Line-voltage electrical
- Burglar alarms and door hardware
- Investigations and forensics for hire
- Selling you dial tone
Next step
Start with the assessment. Decide about the rest afterwards.
Assessment at $165/hr — typically 10–15 hours for a mid-size estate. Credited in full against onboarding if you sign within 30 days; findings are yours either way.