Cybersecurity, clearly.
Turn client security requirements into your next opportunity. Practical assessments, compliance readiness, and ongoing support for growing service businesses.
Clear priorities. Real progress. A human on your side.
IT consultancies
Development agencies
Professional services
01 / What we do
Start with the requirement in front of you.
Build the security programme you need next.
Understand your security gaps and respond to your client’s review with confidence.
We review agreed systems and evidence, speak with key people, and prepare a risk register, action plan, and response to one defined client questionnaire.
Explore this service Discuss an assessmentTurn requirements into an organised, achievable path to compliance readiness.
With an appropriate framework specialist, we scope the objective, coordinate improvements, organise evidence, and prepare the handoff to your independent assessor. UK Cyber Essentials readiness can also be scoped where relevant.
Explore this service Discuss readinessKeep security moving, long after the questionnaire has been submitted.
An agreed monthly scope for your review calendar, risk register, remediation follow-up, and client security reviews. Clear owners and regular updates keep the work visible.
Explore this service Discuss ongoing supportEvery engagement starts with a defined scope. Readiness support is separate from independent certification and assurance.
01 / Start small
One-time consultations for the requirement already on your desk.
Explore the full six-package menu.
€49 / 30 min
Find the right next move.
Buy consultation€99 / 75 min
Turn uncertainty into priorities.
Buy consultation€220 / 2 hours
Leave with a practical plan.
Buy consultationFrom uncertainty to action
You don’t need another report that sits in a folder. You need to know what matters, what to do next, and who owns it.
Start with an assessmentFindings grounded in the evidence we review.
Accurate responses, with gaps clearly explained.
Priorities, action owners, and a plan to follow.
02 / How we work
One clear point of contact.
The right expertise for the work.
A client request. A contract renewal. An audit goal. We begin with what’s driving the work, your deadline, and what success looks like.
We agree the scope, deliverables, responsibilities, and fee. Where specialist expertise is needed, we define that before work begins.
We coordinate the work, keep you informed, and leave you with clear next steps. Continue with project or ongoing support when it makes sense.
Human-led. Evidence-based. Built around the way your business works.
03 / A little clarity
ThreatKit is designed for service businesses that handle client data or work in client systems—especially IT consultancies, development agencies, and professional-services firms. Our starting focus is teams of around 10–100 people with a defined security requirement.
Yes. We can scope support around one review, check the evidence behind your responses, and identify what still needs work. We agree the questionnaire size, systems in scope, and deadline before starting. Your team approves the final responses.
That depends on your customers and assurance objective. We first establish what the buyer will accept, then scope the relevant path with a framework specialist. Certification or an assurance report is not always the right first step.
ThreatKit prepares and coordinates. ISO certification comes from an independent certification body, and SOC reports come from an eligible independent practitioner. We do not issue these or guarantee an outcome.
After discovery, you receive a written scope with deliverables, responsibilities, fees, and agreed dates. The size of your systems, available evidence, specialist work, and required assurance all affect the estimate. Any change in scope is agreed with you.
Penetration testing and cloud or identity changes require separately scoped specialist delivery. Ongoing programme management does not include a security operations centre, 24/7 monitoring, or an incident-response retainer.
Your next step
Tell us what’s on your desk.
We’ll start with the requirement, not a package.
A client review, an upcoming milestone,
or simply a clearer place to start.
Create a short brief for your first conversation.
Your brief is ready. It has not been sent.