Real engagements. Real outcomes. Details anonymised to protect client confidentiality — but the problems, approaches, and results are genuine.
B2B SaaS — Series A Security Overhaul
Situation: A 40-person B2B SaaS company closing enterprise deals was losing prospects at the security questionnaire stage. No formal security programme, no policies, no incident response plan. Every enterprise prospect asked the same questions — and the answers were not good enough.
Engagement: 3-week security assessment and SOC2 readiness sprint. Threat model of the entire product and infrastructure. Gap analysis against SOC2 Trust Services Criteria. Policy creation, evidence collection framework, and auditor introduction.
Outcome: SOC2 Type I achieved in 11 weeks. Two enterprise deals (combined ARR £340k) closed within the following quarter. Security questionnaire pass rate improved from approximately 30% to 95%.
AI Platform — LLM Security and Data Governance
Situation: An AI-native startup had shipped a customer-facing RAG product with no prompt injection defences, no data classification, and PII flowing through unmonitored pipelines. A Fortune 500 prospect required an AI security review before signing.
Engagement: 2-week AI security audit. Mapped all LLM interaction points and data flows. Classified data by sensitivity. Implemented input validation and output guardrails. Created a data governance framework. Trained the engineering team on secure LLM development practices.
Outcome: Three critical vulnerabilities remediated before any public disclosure. Data governance framework adopted as standard practice. The company passed the Fortune 500 customer’s AI security review — a deal worth £500k ARR.
Marketplace — Incident Readiness and Architecture Review
Situation: A multi-sided marketplace processing payments had no incident response plan, unclear trust boundaries between tenant environments, and an engineering team focused entirely on feature delivery.
Engagement: Architecture review and incident readiness programme. Mapped trust boundaries across the multi-tenant system. Reviewed data isolation and payment flow security. Built an incident response playbook with escalation paths and communication templates. Ran a tabletop exercise with the leadership team.
Outcome: Two architectural weaknesses in tenant isolation identified and fixed. Incident response playbook tested and operational. When a minor breach attempt occurred 8 weeks later, the team contained it in under 2 hours with zero data exposure.
We are selective about the engagements we take. If your situation resembles anything above, let us talk.