Choosing an engagement model
The same engineers, contracted four different ways. Which one fits depends on who carries the delivery risk and who owns the platform afterwards.
Four models, one team
| Model | Best when | You own | We own | Commercial |
|---|---|---|---|---|
| Project delivery | Defined outcome with a deadline | Requirements and acceptance | Delivery risk and timeline | Fixed price SOW |
| Staff augmentation | You run the programme, need capacity | Direction and delivery risk | Skilled, certified people | Monthly per resource |
| Managed service | Platform live, no PAM headcount | Policy and approvals | Operations against an SLA | Monthly retainer |
| Professional services | One specific problem or deliverable | Everything outside the scope | The scoped outcome | Day rate or fixed |
Start with who owns the platform afterwards
Most engagement decisions get made on price. The better question is who will own the platform in twelve months. If that is your team, project delivery with enablement built in is the right shape. If it is nobody, a managed service is honest about that. If your team exists but is stretched, staff augmentation adds depth without handing over control.
We will tell you which we think fits on the first call, including when the answer is a smaller engagement than you were planning to buy.
Ready to reduce identity risk?
If privileged access is hard to explain or credentials are hard to control, your organisation is exposed. That risk can be reduced with the right design and hands-on delivery.
These principles guide every engagement
They define how we design, deliver and operate identity security for our customers.
Certified, not just familiar
Guardian-led, with CDE credentials across PAM, Privilege Cloud, EPM and Secrets Manager, kept current on every release.
Architect-led delivery
Design is reviewed and signed off before anything is built, so what goes live is what was agreed.
Written scope, fixed price
Deliverables, timeline and price in writing before work starts. No open-ended retainers.
Enablement built in
Your team is trained during delivery, so what we build does not depend on us to keep running.
Need identity security you can trust?
Talk to a certified architect about protecting privileged access, identities and critical systems. The first call is technical, not a sales pitch.