Security

Real offensive depth

Testing and defence led by a published security researcher with six CVEs, including a CVSS 9.1 Mirai botnet kill-switch.

All security →
Compliance

Audit-ready, fixed scope

SOC 2, ISO, CPCSC, and the Canadian privacy stack, run end to end with an independent auditor.

All frameworks →
Resources

Learn the space

Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.

Read the blog →

Refer a startup. Get paid when they sign.

You know a founder who needs a fractional CTO, a SOC 2 sprint, an incident response retainer, or an AI security assessment. Send them our way. If they sign, we cut you a cheque. Clear terms, no exclusivity, fast payouts.

The deal

Most referral programs are vague on purpose. Ours isn't. Here is exactly what you get and when.

Referral fee20%
of first-year contracted revenue, paid in cash
Payout scheduleNet 30
paid within 30 days of the client's first invoice clearing
Minimum deal sizeNone
we pay on every deal, no floor or threshold
ExclusivityNone
refer to anyone else too, we don't lock you in

Wondering what the engagement itself looks like once a lead signs? See our pricing and SKUs for how these deals are typically scoped.

How it works

01

Submit the lead

Fill out the form below. We need the referred company's name and the best way to reach them. Either make a warm intro yourself, or give us contact info we can reach out to with you cc'd.

02

We qualify within 48 hours

If the lead fits our ICP (startup, technical work in security/DevOps/leadership), we confirm with you and start the conversation. If it doesn't fit, we tell you why so you don't waste future referrals on bad-fit leads.

03

Lead becomes a client, you get paid

If the referred company signs an engagement, you receive 20% of the first-year contracted value. Paid Net 30 from the client's first invoice clearing. We send a 1099/T4A as appropriate. No clawbacks if the client churns after.

04

Recurring or expanding engagements

The fee applies to first-year revenue only. If a referred client expands or renews into year two, that is on us, not on you. We will still tell you about it because most referrers want to know how their leads turned out.

What makes a good referral

The leads that close fastest and pay best fees share a few traits, especially a startup without a security leader in place that could use a fractional CISO. If you know a startup hitting any of these, send them over.

Pre-Series-A through Series B 5 to 100 engineers Selling to enterprise Needs SOC 2 by a deadline Shipping AI features Without a CTO / CISO Post-incident Fundraising in 6 months

Submit a lead

Tell us who you're sending and we'll take it from there. Replies within 48 hours. Prefer to talk it through first? Book a call.

By submitting, you confirm the lead has consented to being contacted (or that you'll make the intro yourself). We'll never spam your contacts.

The fine print

A few things worth knowing up front: