Service · 3–10 weeks · quoted
Engineering
The work that follows an assessment, or stands on its own. Controls deployed, tuned and documented by the engineer who scoped them — then handed back with the runbooks and the reasoning.
One engagement at a time
We take one engineering engagement at a time and say so before you ask. Taking on more than can be delivered well is a reputational problem, not a revenue opportunity.
If we can’t start when you need to start, we’ll tell you at the first conversation.
Cloud security engineering
Conditional Access rebuilt from a policy set you can explain. Privileged access moved off standing assignment. Purview and DLP configured to the data you actually hold. Defender for Cloud posture brought to a state someone can maintain.
An assessment found privileged access permanent rather than requested, or a Purview deployment that was licensed and never scoped.
Endpoint security
EDR deployment, migration and tuning across Defender, CrowdStrike and SentinelOne. Staged in waves so coverage never lapses at cut-over, with policy parity checked before the old agent comes off.
600+ endpoints and servers migrated from Microsoft Defender to CrowdStrike Falcon with no coverage gap — a founder-led engagement prior to RG Labs.
Vulnerability management engineering
Qualys, Tenable or Rapid7 stood up properly — asset coverage that reflects the estate, authenticated scanning where it matters, and a triage process the team can actually run after we leave.
Engineering lead on a Qualys deployment built from scratch in a PCI-DSS environment, reducing vulnerability backlog by 90% — a founder-led engagement prior to RG Labs.
SIEM & detection engineering
Log source onboarding into Sentinel or CrowdStrike NG-SIEM, detection rules tuned against your environment rather than a vendor template, and ingest cost brought down to what the detections justify.
The SIEM bill is growing faster than the detections, or alerts are firing that nobody triages because nobody trusts them.
How an engagement ends
With documentation, runbooks and a handover session — and with your access revoked, confirmed to you in writing. There is no managed service waiting at the other end and no dependency by design. If you want us back, it’s because you chose to.
Credit
Half of what you paid for your assessment, capped at $5,000 ex GST, comes off engineering work paid for within 90 days of the assessment. A Snapshot credits into the assessment, not here.