Security Office Hours

Expert security guidance when you need it—without the full vCISO commitment

Direct access to experienced security leadership for early-stage startups. Get tactical answers, tool recommendations, and architectural guidance via a dedicated Slack channel.

Built for early-stage startups

(5-25 employees)

This is for you if:

You're a technical founder handling security yourself (for now)
You're getting security questions from prospects or early customers
You need guidance on tools and practices that actually matter at your stage
You've tried to DIY security and got stuck on specific decisions

You're building fast. Security questions come up. You need someone who can give you straight answers without the consultant bureaucracy.

Get unstuck fast

Security questions answered by an expert who's seen it before—no waiting weeks for a consultant booking or wading through conflicting advice online.

Build the right foundation

Guidance on which tools, practices, and controls actually matter at your stage (and which ones don't). Avoid the trap of over-engineering security too early or ignoring critical gaps.

Avoid expensive mistakes

Know before you commit to vendors, tools, or security decisions that'll cost you later. Get second opinions on architectural choices before you build the wrong thing.

Grow your security IQ

Learn how to think about security as you build, without becoming a security expert yourself. Build good patterns now, before bad habits become expensive problems.

Security guidance that keeps you moving forward

The kind of questions we help with:

"Should we use tool X or Y for [specific need]?"

Get practical recommendations based on what actually works for startups your size—not enterprise checklists that don't apply to you.

"A prospect asked about our security posture—what do we tell them?"

Tactical advice for handling security questions in sales conversations without overpromising or underselling your actual protections.

"Our developer wants to implement X—is that secure enough?"

Quick architectural guidance before you build something that'll need to be rebuilt later for security reasons.

"We're adding a new vendor/integration—what should we check?"

Learn how to do basic vendor security evaluation so you're not blindly trusting every third-party service.

What you get:

Direct Slack access for tactical security guidance
Ask questions in real-time. Get answers by the next business day. No formal ticketing systems or consultant bureaucracy.
Resource recommendations and tool guidance
We'll point you to the right documentation, frameworks, and tools—curated for your stage and needs.
Next-business-day response SLA
You're not left hanging. Questions answered within one business. Often faster.

What it doesn't include:

This service is designed for tactical guidance, not hands-on implementation or strategic program building.

Not included:

Hands-on implementation or configuration work
Policy development or comprehensive policy review
Compliance certification guidance (ISO 27001, SOC 2, NIS2, etc.)
Formal vendor security assessments or third-party risk management
Incident response or security monitoring
Board presentations or investor due diligence preparation

When you need deeper support: Our vCISO Services provide strategic security leadership, compliance guidance, and comprehensive program development.

Pricing: Less than a security tool subscription

Monthly retainer under €1,000—comparable to what you'd spend on a mid-tier security platform, but you get expert guidance instead of another dashboard to manage.

Fixed monthly fee. Month-to-month commitment. No surprise bills.

Schedule a Call to Discuss

Getting started is simple

15-minute conversation to understand your situation and confirm Office Hours is the right fit. We'll discuss your stage, technical setup, and what kind of guidance you're looking for.

Step 1: Initial call

We'll add you to a dedicated Slack channel (or use your existing workspace). You get direct access—no intermediaries or ticketing systems.

Step 2: Slack setup

Security questions come up? Drop them in Slack. You'll get answers by next business day, often faster. We'll point you to resources, make recommendations, or help you think through decisions.

Step 3: Ask away

Every quarter, we'll schedule a 30-minute call to review your security posture, discuss what's changing in your business, and ensure you're still on the right track.

Step 4: Quarterly check-ins