// security-partner
Security Partner for your project
A senior security lead next to your team or agency: architecture review, access rights, data flows and release checks.
What you get
- Architecture and design review
- Access rights and roles review
- Data flow map: what data goes where, and who can see it
- Release checks before changes go live
- Answers to supplier and customer security questions as they come up
- Risks explained in business terms, with clear options
How it runs
Intro call: your product, your team, your deadlines and what worries you most.
First pass over architecture, access rights and data flows. You get a short list of risks, ranked.
Planned days each month: reviews of new features, release checks and answers when your team needs them.
Decisions and open risks documented, so your team can carry on without us.
Good fit / not a fit
A good fit if
- You are building a product that handles customer or employee data.
- Your developers or agency are good, but nobody owns security.
- Customers have started to ask how you protect their data.
Not a fit if
- You need a certificate. We prepare you; only an accredited certification body can certify.
- You need a security operations centre that watches your systems around the clock.
- You want risks signed off without changing anything.
Pricing
FROM €1,100/DAY
- By the day
Booked when you need it.€1,100 per day - Monthly
4 days a month, planned with your team.€3,900 per month
The monthly option costs less than four single days. All services are for business customers only. Prices net, plus VAT. Fixed quote after the intro call.
Questions
Who is the security partner?
Chan Vu Luu: seven years of internal ISMS and supplier audits for large enterprises, as a consultant and as Deputy Information Security Officer.
Do you work with our existing agency?
Yes. We sit next to your team or your agency and review their work. Nobody has to hand over the build.
Which frameworks do you align with?
ISO 27001, BSI IT-Grundschutz, BSI C5 and TISAX, depending on what your customers ask for.
Can XIVU also build the product?
Yes. XIVU builds websites and products too, with the same security by default.
Often paired with
Secure Launch
A website with security built in from the first plan, like airbags fitted at the factory, not added later.
Security Readiness Review
About 5 days of gap analysis against ISO 27001, TISAX or your customers' questionnaires, with a prioritised roadmap. Readiness, not certification.
Have something to ship?
FREE INTRO CALL · FIXED QUOTE WITHIN 2 WORKING DAYS OF THE CALL
Start a project