KIT 01Launching first
IR Tabletop Kit
Run an incident response exercise with your team in 60–90 minutes, without outside help.
- Scenarios
- Facilitator scripts
- After-action template
Coming soon
First kits launching soon
Practical security kits for startups.
Built from real incident work, for teams without a security department. Plain English, ready to use, no theory.
FACILITATOR ASKS
- 01Who is the incident commander right now?
- 02What do you contain first, and who has access to do it?
- 03When do you tell customers, and who decides?
From real incidents
Written from what actually happened in incidents and rollouts, not a framework checklist.
Plain English
Ready to use the day you buy it. No legal boilerplate, no theory.
Original work
No former employer's material, and no real companies named.
THE KITS
Everything a small team needs to run security like a bigger one.
KIT 02Flagship
SOC 2 Readiness Kit
Find your gaps and get ready for your first audit, step by step.
- Policies
- Evidence checklist
- 90-day plan
Coming soon
KIT 03Coming soon
Identity Lifecycle Playbook
Give people the right access when they join, change it when they move, and remove it when they leave.
- Okta and Google Workspace onboarding
- Offboarding runbook
- Access reviews
Coming soon
KIT 04Coming soon
First Security Hire 90-Day Plan
A 30/60/90 plan for your first security hire, plus what founders should expect along the way.
- 30/60/90 plan
- Founder expectations
Coming soon
WHO BUILDS THESE
A practitioner, not a consultancy.
Built by a security practitioner with years of hands-on incident response, identity and endpoint work at fast-growing tech companies, including setting up IT and security from scratch at a small startup.
Every kit comes from what actually happened during real incidents and rollouts, not from a framework checklist.
Be first when the IR Tabletop Kit ships.
One email at launch. No newsletter, no spam.