Our work
In 2026 we guided four companies through SOC 2: one Type I and three Type II, all on Vanta.
Our clients trust us with their security programs and infrastructure, and every engagement is under NDA. So we describe our work by type and industry, without client names. We can talk through relevant experience on a discovery call.
SOC 2 Type II
Performed the compliance engineering that carried three startup clients to SOC 2 Type II: implementing and fixing security controls across their AWS environments, then supporting them through the audit.
Managed compliance
Ongoing monitoring of a client's environment in Vanta after the report, keeping control health and audit readiness up between audits.
Incident response
A client's Node.js backend lost its connection to MongoDB. We traced the path through the AWS PrivateLink endpoint, found a security group rule blocking the traffic, applied a correctly scoped inbound rule and verified stable connectivity before closing it out.
AWS operations
Provisioning and configuring resources, monitoring performance and availability, tuning for cost, and applying least-privilege access, with runbooks and configuration records that keep operations repeatable.
Migration and deployment
Planned and ran migrations, integrations and new deployments on AWS, documented so the next change is as predictable as the first.
Clients
Coming soon: real client logos and testimonials, added only with written permission.
Pick a few times that work for you. We'll call to learn about your environment and timeline, then send a written proposal if we're a good fit.
