A customer just sent you a security questionnaire.
I'm Rajesh Kumar. I help startups get through the security review that is holding up a deal: answered truthfully, at a fixed price, by the person you talk to on the first call.
- Who you work with
- Rajesh Kumar
- Terms
- Fixed scope, published prices
- Based
- Pacific Northwest
Three packages,
prices published.
Each one has a fixed scope and written exclusions, so you know what you are buying before you sign.
Security Review Response
One customer questionnaire answered truthfully, plus an answer bank and a security overview you keep and reuse.
SOC 2 Enablement
Getting your company ready for SOC 2: scope, gap assessment, policies, control and evidence setup, choosing an auditor, and support through the audit.
Fractional Security Lead
Someone to own security month to month: the roadmap, every incoming questionnaire, vendor and access reviews.
First call to handover,
in writing.
Every stage ends with a document in your hands.
- STEP 01
A free 30-minute call.
I find out what triggered this, the deadline, your stack and who decides. If I'm the wrong fit, I say so. You get a written recap the same day, with the package I recommend and its price.
- STEP 02
A fixed scope and fee.
A short intake, then a statement of work: deliverables, exclusions, milestones, and how your data and any AI tools are handled.
- STEP 03
Delivery, then handover.
Read-only access, a status note every week, and everything moved into your own storage at the end.
One named person,
start to finish.
I'm a principal cloud security architect with more than 25 years in infrastructure and security. In 2026 I led a startup's SOC 2 preparation through to its Type I report, issued by an independent auditor.
You work with me.
The person on the first call is the person who does the work. No handoffs.
Fixed and published.
Fixed scope, fixed fee, written exclusions. Retainers run month to month with 30 days' notice.
Yours to keep.
Everything is handed over in your own storage and tools, and my access is removed at the end. No lock-in.
Guides you can put to work.
Practical guides on AI security and identity for AI agents.
- Read
An identity lifecycle for AI agents with Entra and ServiceNow
How to give every AI agent its own governed identity: risk tiers that decide what is automated, six workflows from registration to retirement, and the split of duties between Microsoft Entra Agent ID and ServiceNow.
- Read
Enterprise AI security: an implementation guide
How to run AI security as one program instead of a pile of tools: two lanes, one control plane, twelve areas to build, a phased rollout and the metrics that show it is working.
Deal waiting on a security review?
Book thirty minutes, or send me the questionnaire and I'll tell you what it will take.
- [email protected]
- Based
- Pacific Northwest