Six engagements, each with a platform behind it
Every service starts from data our platforms already hold, so scoping takes days rather than weeks — and the deliverable stays live after the report is signed off. Consultants who work from platform data, not a questionnaire.
vCISO Flagship
A fractional security executive who arrives with the platforms already reporting — so board papers take an hour, not a fortnight. Our most-requested engagement.
From 2 days a month →GRC advisory
Framework readiness, gap assessment and certification support, run inside GRCorb rather than a spreadsheet.
Delivered in GRCorb →Red teaming & VAPT
External and internal penetration testing, run for you on SAK Red Teaming, our own platform — 38 specialist agents, MITRE ATT&CK-mapped findings, safe by default.
Runs on SAK Red Teaming →Managed attack surface
SAK Surface, Brand and Deep run for you: continuous discovery, impersonation takedowns and credential-leak alerting, analyst-reviewed in business hours. Platform-delivered — not a staffed SOC.
Business hours · platform-delivered →AI security & governance
LLM and agent threat modelling, prompt-injection testing, model supply chain, and an AI governance program that survives audit.
ISO 42001 · NIST AI RMF →Awareness & training
Phishing simulation and role-based training, with completion records filed straight into the evidence store.
Evidence auto-filed →Accredited delivery partners
We work with accredited specialist firms — ISO certification bodies, offensive security teams and training providers — who deliver alongside our platforms. That is how a product company ships enterprise engagements without pretending to be a body shop, and it means each engagement is staffed by the firm best suited to it, not the only one we have.
ISO & compliance audit
ISO 27001, 22301, 9001, 27017/27018, PCI DSS, SOC 1/2/3 and SAMA CSF certification and audit practice.
Feeds GRCorb audit workspaceRed team & testing
Black, white and grey box penetration testing, malware analysis, compromise assessment, secure code review.
Feeds SAK SurfaceAccredited training
Internationally accredited IT security training and certification courses for client teams, run by partner training faculties.
Records filed as evidenceStart with your exposure, not a sales call
The free external exposure report shows what an attacker can already see. It is also the fastest way to scope any of the engagements above.