
Could you use more control?
"I like your product, but is my data safe with you?"
- potential customer
"Sometimes it feels like our software is a bunch of things magically working together, and I'm not entirely sure how they all fit."
​
"I'm thinking about investing in you guys. Before that, can we dive deep into the tech and security side of things?"
- potential investor
"If we're going to work together, I need to know we can meet certain security standards. How can we shape the company to guarantee that?"
- customer
"We usually work with suppliers who have security certifications. Do you have those?"
potential customer
​
"We are talking big investment here. Can we double-check the tech bits and how you're keeping everything locked down?"
- keen investor
​
"You know, we've been burned before. Only going forward if there's solid proof of your security measures."
- cautious partner
If you have (been) asked these questions it is time to move from
working in the dark to
having a plan
Organising information security formally means beginning to work risk-based.
​
If you know what you are trying to protect against which sort of threats, you can begin to prioritise your work and make a plan.
​
When your company is software based (or software heavy), managing information security usually means overall better management and governance.
Information security is not solely about protecting your information against unwelcome eyes, but it is also about ensuring the stability and availability of your systems, making sure the systems are doing what they suppose to do, with integrity.
​
​
​
​
Ifs and buts
​
But where do we start?
I don't think audits and certifications fit our current company size. We are not ready for that (yet)
​
Money is tight right now, we cannot invest tens of thousands of euros.
​
I have worked at companies with a lot of corporate security. I felt like I could never get anything done. I don't want that here.
​
Sure there are security consultancy firms. But will they help me or just take my money and leave me with a bunch of policies that are unworkable?
Our core beliefs
1. Innovation and security are not natural enemies.
2. There is a way to make security people, critical customers and their CISOs, your employees, and you as an entrepreneur happy.
3. With our system(s) you can achieve security that works for your company instead of against it.
Start your road to control, let's meet eachother

Spend a day with me. I am a
seasoned security professional, former startup CTO, former tech lead in a highly regulated domain, current owner of a cyber security firm that amongst other things helped a client get a psd2 (banking) license in record time.
There is little I enjoy more than talking to creative business owners about improving their businesses.
For 1000 euro you (or a group from your team) can spend a day with me. We'll talk about whatever your biggest challenges are for success and investigate together what are the best next steps.
​
There is a good chance that the security bootstrap program is your next step. The price of this session can be discounted if you buy the security bootstrap program.


Buy the security bootstrap program
The security bootstrap program results in a tailor made plan that considers your company's situation.
​
Start to move with clarity and direction.
​
For 3000 euros you can move from being as secure as the best judgement and intentions of your team towards working systematically from a set of solid recommendations based upon years of software en security practice.
​
​
Security bootstrap program for startups
We developed a lightweight jumpstart towards doing cyber security professionally for startups
​By partnering with us you
-
signal that you take security seriously
-
get a realistic appraisal of your current capabilities and have a plan to mature to
-
make continuous improvement a habit
What do you get?
-
We take a look at your software / infra landscape
-
We take a look at your processes, the way you deliver to your customers
Based upon that
-
We give you your top 10 risks
-
We give you a plan with steps to reduce your top 10 risks
AND​
-
We give you a couple of baseline policies for working and delivering IT-services securely and a step by step guide towards implementing them
-
We teach you about risk based working, risk based decision making and how to keep security effective and lean
-
Together define next steps and plot your personal custom road to control
​​
-
We can continue to be your information security sparring partner on an if need basis.
​
​
​
There is currently a Dutch subsidy for companies < 50 employees wanting to improve their cyber security posture. 50% of what you spend up until a maximum of 1250 euro can be paid by the government.
That makes the price you pay for the security bootstrap program 1750 euro and the price of a consult 500.