SVC.05 — Capability

Security & assurance

Threat modelling, access design and audit trails built into delivery, not bolted on before launch.

Sec.07 — Intro call · 30 minOpen in new tab ↗

Access design and audit trails belong in the model, not in a document written the week before a review. We build them in and give you the evidence you will be asked for.

Primary tooling

SSORBACaudit

What you get

  • Threat model for the real system
  • Role and access design
  • Audit trail across all mutations
  • Remediation plan, ranked by risk

You need this when

  • A customer sent a security questionnaire
  • Access is granted by asking someone nicely
  • You cannot show who changed a record
Models

Three ways to deploy us.

The engagement adapts to where you are. The people do not change between models.

Model A

Embedded

One to three of our engineers inside your repositories and your standups, for a quarter or longer.

  • Your stack
  • Your rituals
  • Monthly review
Model A

Embedded

For teams that already have a direction and need senior capacity that does not require managing. We work in your repositories, your tools and your cadence.

What is included
  • One to three senior engineers
  • Your stack, your process
  • Written review every month
  • Notice period, not a lock-in
Commercials

Monthly rate per engineer, rolling, with one month of notice.

Model B

Dedicated build

A ring-fenced team delivering a defined system end to end against a fixed scope and a fixed price.

  • Written scope
  • Weekly demo
  • Fixed price
Model B

Dedicated build

For a defined system with a real deadline. The scope is written down before anyone starts, and the price follows the scope rather than the hours.

What is included
  • Written scope agreed before work starts
  • Weekly demo on real infrastructure
  • Fixed price against that scope
  • Change requests quoted separately
Commercials

Fixed price, released by milestone. Scope changes are quoted, never absorbed quietly.

Model C

Founding build

Your first engineering team. We build version one and transfer it when you are ready to hire.

  • 0 → 1
  • Full transfer
  • 30-day support
Model C

Founding build

For founders without an engineering team yet. We build version one, run it in production, and hand it over in a state your first hires can pick up.

What is included
  • Version one in production
  • Documentation and recorded walkthroughs
  • Repository and infrastructure transfer
  • Thirty days of support after handover
Commercials

Fixed price per phase. Transfer is included, not an upsell.

Contact

Tell us what you need built.

A 45-minute call. Bring the problem, not a specification. You leave with our honest read on what to build, how long it takes and what it costs — whether or not you use us.

contact@zt1.io
Sec.07 — Intro call · 30 minOpen in new tab ↗