Contact

Start with a read-only baseline assessment

One email starts it. Here is how to reach the practice, and what happens after you write.

How to reach the practice

Email [email protected]. If you would rather run the scan in your own environment first, say so: a client-run variant takes the raw findings with no access from me.

What happens after you write

1. You write, and we agree the scope and the read-only access.
2. The assessment runs, and the report is written.
3. The prioritized report arrives by email.
4. You do the remediation, on your side. The rotating is yours.

What I never do

I never read or store secret values from your vaults. Access is a read-only GitHub token scoped to contents:read and metadata:read, time-bound and revocable by you at any moment. A mutual NDA is signed before any access is granted.