Services · Core service
Security Retainer
Recurring review, re-checks, drift fixes and periodic testing, so controls stay in place between audits.
- State
- Available
- Pricing
- Fixed price after scoping
Fit
Who it is for, and when
Who it is for
Teams that want security engineering on hand, month after month, without a full-time hire.
When to use it
- Controls keep drifting after they are fixed
- You need regular re-checks for customers or auditors
- You want a security engineer to call on
Services · what our people do
What we do
A recurring cadence of review, re-checking and fixes, agreed in the retainer scope.
Scope
- Recurring review of your cloud controls
- Re-checks and drift awareness
- Remediation support
- Verification of changes
- Security engineering access for questions and reviews
Working together
What we need, and what you receive
What we need from you
- Ongoing read-only access to the environments in scope
- A regular point of contact
- Named approvers for any change
What you receive
- Recurring findings and re-check results
- Help closing new issues
- Verification and records of what changed
- Recommendations and next steps each cycle
Boundaries
What this service does not include
- Scope and cadence are agreed in writing.
- It is not an around-the-clock monitoring or incident-response service.
ARIA
ARIA and this service
ARIA is being developed to support repeatable cloud-control remediation and verification within this workflow. It does not replace the engineering work.
ARIA access will be included with the retainer as its capabilities launch.
ARIA
Cloud control remediation and verification
- Status
- LaunchingIn development
ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.
Evaluate → Fix → Verify → Keep secure → Evidence
Coverage
Clouds and pricing
Clouds
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Launching
Pricing
Fixed price after scoping
Every engagement is scoped and priced in writing before work starts.
How pricing worksTalk to us about Security Retainer.
Tell us about your environment and what you need. You receive a written scope before any work starts.