Security and IT owned like a program.
We run security, IT, and compliance for growth-stage companies whose founders and engineering leads also handle security. That includes application and cloud security, incident response, employee access, device management, and SOC 2 preparation.
Tell us about your systems and deadline. We’ll reply within one business day.
Configurations, runbooks, and audit evidence.
We make changes in your cloud accounts, identity provider, and device consoles, then document what changed for your team.
- A work plan with priorities, owners, and target dates.
- Runbooks for access changes, incidents, and recovery.
- Control records and evidence for your auditor or customer review.
What each program includes
Program
Security Program
AppSec, CloudSec, Enterprise Security, and Detection & Response in one program, with hands-on implementation and a shared remediation plan.
- AppSec
- CloudSec
- Enterprise Security
- Detection & Response
Program
IT Program
Employee accounts, managed devices, SaaS administration, and infrastructure operations, from onboarding through daily maintenance.
- Identity & access
- Devices & endpoints
- SaaS & employee workflows
- Networks & cloud operations
Program
GRC & Compliance Program
Policies, control ownership, audit evidence, customer security reviews, and risk tracking, maintained alongside the systems your company operates.
- Governance & controls
- Audit readiness & evidence
- Customer security reviews
- Risk & vendor management
Fees depend on the systems, deliverables, and deadline in scope. See how pricing works
Customer
“Grey Wing has helped us stay ready for SOC 1 and SOC 2 year-round. We never had to hire internal staff to manage it ourselves.”
Brian WaleriusCTO · Routable
How an engagement runs
Scope
We agree on the systems, deliverables, fee, working hours, and response expectations before kickoff. Changes to scope need your approval.
Delivery
We configure the agreed controls, collect evidence, and track progress against the work plan. Your team approves changes that affect people or production systems.
Close
We check deliverables against the proposal, hand over documentation, and review access. Any continuing work is defined in a new or recurring scope.
Contact Grey Wing
Send your headcount, systems, and any audit or customer deadline. We’ll reply within one business day.
Send the detailsOr email sales@greywingsecurity.com