Engagements

The right security engagement.
For the decision in front of you.

Start with a focused review or arrange ongoing support. Scope, fees, coverage, response expectations, and exclusions are agreed in writing before work starts.

A focused starting point

Business Exposure Review

Understand the exposure around the systems that matter to your business. Receive an agreed asset view, evidence-led findings, business implications, and prioritised next steps. Individually scoped and quoted; no monthly retainer required.

Explore the review

Implementation, re-testing, ongoing monitoring, and incident cover are included only when specified in your proposal.

Ongoing engagement options

Indicative starting prices in USD. Final scope, billing terms, taxes where applicable, and service commitments are confirmed in your proposal.

Monitor

Maintain visibility into agreed assets and relevant exposure.

From $1,200/ month
  • Breach & credential monitoring for agreed domains
  • Analyst-reviewed exposure alerts under agreed response arrangements
  • Automated attack surface & vulnerability snapshot monthly
  • Prioritised guidance on what to fix first
  • Named analyst and agreed response expectations
  • Security investigation report when something looks wrong
  • Monthly executive summary for leadership
Get Started
Testing + ongoing support

Operate

Your dedicated security team - testing, hardening, and protecting your business month to month.

From $4,500/ month
  • Everything in Monitor
  • Quarterly web application & network penetration test
  • Cloud security review - AWS, Azure, or GCP
  • Incident triage & response support
  • Remediation validation - we re-test every fix
  • Security training session each quarter
  • Dedicated analyst who knows your business
  • Priority incident support under agreed coverage
Get Started

Command

A tailored programme for complex environments, assurance needs, and response arrangements.

Customengagement
  • Everything in Operate
  • Full red team engagement - adversary simulation
  • Cloud penetration testing & hardening
  • GRC programme - SOC 2, ISO 27001, PCI DSS readiness
  • Android & mobile application security testing
  • AI & LLM security testing - prompt injection & agent abuse
  • Hands-on security labs for your engineering team
  • Third-party & vendor risk assessments
  • Incident escalation and response coverage as contracted
  • Board-ready security posture reporting
Contact Sales

Common questions

Is there a minimum contract length?

Retainers run month-to-month with a 30-day notice period. No lock-in. Confirm the applicable terms in your proposal.

Can I start with a one-off assessment before committing to a retainer?

Yes. A standalone penetration test or attack surface assessment is available as a fixed-scope engagement. Many clients begin this way, then move to a retainer after seeing the findings.

What size businesses do you work with?

Velocor works with online businesses of all sizes - from funded startups and growing e-commerce brands to established SaaS platforms and enterprise operations. The Monitor plan suits businesses taking their first step; Command suits those with complex, regulated environments.

How quickly can you start?

Start dates depend on the agreed scope, required access, and availability. We confirm the schedule before you commit.