Advisory
Fixed-scope engagements.
Decision-grade output.
Engagements end.
The practice
Each engagement answers
one question.
Then it ends.
Dettogni advisory produces clear, defensible answers to specific security questions. Not ongoing monitoring. Not managed services. Not tool procurement. Each engagement is fixed in scope, fixed in price, and designed to close with a written deliverable and a working session.
The four engagements below address four distinct questions. They are not tiers of the same service. If you are not yet sure which question applies to your situation, the Security Posture Baseline is the engagement built for that moment.
Not sure where to start?
Three questions to find
the right engagement.
The engagements are not tiers of the same thing. Each addresses a distinct question. These three questions will route you to the right one.
Start here
Do you know where your risk sits?
If the answer is no, the Security Posture Baseline is the engagement for that moment. That is often the case when the board has asked and nobody has a defensible answer. It maps the surface and ends with a specific direction.
If yes
Is the concern external, internal, or operational?
External visibility and attack surface: External Exposure Review. Identity and cloud controls: Microsoft Identity Assessment. Response and recovery capability: Incident Readiness Review.
Still unsure
Book the discovery call.
Twenty minutes. No charge. Used to understand the question you actually need answered and confirm which engagement addresses it. If none of them do, that will also be the outcome of the call.
How the work behaves
What all four
engagements have in common.
Every Dettogni advisory engagement is fixed in scope, fixed in price, and designed to end. The deliverable belongs to the organisation. No retainer, subscription, or follow-on engagement is required to act on it.
Findings are expressed as decisions and trade-offs, not exhaustive checklists. Recommendations are stated as decisions to make, not products to procure. Where risk is accepted, that acceptance is named and explained.
Advisory engagements do not include ongoing monitoring, managed services, tool procurement, compliance audits, penetration testing, or remediation projects. Those boundaries are intentional. They are how the work stays decision-grade.
Every engagement is scoped, performed, and delivered by one person: Alex Ulfeldt, a security engineer. No junior staff, no outsourced fieldwork, no report written by someone who was not in the assessment. Read the full background →
Need ongoing responsibility rather than a fixed answer? See Services.
The way in
Twenty minutes.
No charge.
No obligation.
Every engagement starts with a short discovery call. Used to understand the question you need answered, confirm fit in both directions, and agree on which engagement addresses it, or whether any of them do.
If the right answer is a different engagement, a different provider, or no engagement at all, that will be the outcome of the call.
Dettogni advisory · United Kingdom · Remote engagements · Fixed scope · Fixed price