Freelance.

Fractional CTO and CISO work, audits and product strategy for startups and SMBs.

Services

Security governance and certification without a full-time hire.

Certification is a by-product. A team that only does security for the audit passes once, then spends the year undoing it.

Who it is for: Startups and SMBs that need ISO 27001 or SOC 2 to close deals, or whose customers are starting to ask hard security questions.
Format: Monthly retainer, typically one to three days a month.
Outcome: A certification you can show, and a security posture your team actually runs.
What it includes: Security roadmap and risk register
ISO 27001 / SOC 2 readiness and audit support
Policies, controls and evidence that hold up
Supplier reviews and customer security questionnaires
Incident response plan and tabletop exercises

Technical leadership for founders who need a CTO before they can hire one.

Most early technical decisions do not matter. The three that do deserve a week each, not an afternoon.

Who it is for: Founders scaffolding a first product and team, or scale-ups whose tech organisation needs structure to keep growing.
Format: Monthly retainer, from one to two days a week.
Outcome: A team that ships predictably and a platform that will not need to be rewritten next year.
What it includes: Tech strategy and architecture decisions
Team structure, hiring and onboarding
Delivery process and engineering standards
Vendor, cloud and budget oversight
Board and investor technical reporting

An honest picture of a codebase, an architecture and its risks.

A hundred findings with no order is a spreadsheet, not a decision. The report ends with what to fix first, and why.

Who it is for: Investors ahead of a deal, acquirers doing due diligence, or leadership teams who want an outside view before a big decision.
Format: One-off engagement, usually two to four weeks.
Outcome: Clear answers on what is solid, what is risky, and what it would take to fix.
What it includes: Code, architecture and infrastructure review
Security and compliance posture assessment
Team, process and delivery maturity
Prioritised findings with effort and impact
Written report and a debrief with the decision makers

Turning an idea or a customer need into a product people use.

Ship the smallest thing a customer will pay for, then listen harder than you build.

Who it is for: Founders with an idea and no product team yet, or companies whose product has lost its direction.
Format: Project based, or day rate for hands-on contributions.
Outcome: A product in front of customers, with the data to decide what comes next.
What it includes: Discovery, customer interviews and problem framing
Vision, positioning and roadmap
MVP scoping and hands-on development
Metrics that tell you whether it is working
Handover to an in-house team

Every engagement is scoped after a first call. No fixed packages, no surprises.