From kickoff to steady-state.
In thirty days.

Executive intro call with your named Engagement Lead and SOC Shift Lead. We confirm in-scope properties, environments, traffic profile, compliance regime (SOC 2 / HIPAA / PCI / GDPR / NIS2), and the RACI you’ll sign.

Read-only audit of every WordPress estate in scope: core/theme/plugin inventory, hosting, DNS, CDN, WAF, mail, identity, integrations, and current backup posture. Access provisioned via least-privilege, time-bound, MFA-enforced credentials.

Full forensic baseline before we change a single file. We diff core, theme, and plugin trees against canonical sources, scan for known IoCs, surface unauthorized admins, audit cron and webhooks, and stand up our telemetry pipeline.

Written hardening plan tailored to your estate: WAF policy, virtual patches for any open CVEs, plugin consolidation, secrets rotation, TLS posture, headers, file-system permissions, and a kill list of dormant or unmaintained code.

Estate is migrated into our hardened, containerized hosting: per-client database, read-only application containers, encrypted backups, edge WAF, DDoS scrubbing, and managed TLS. Done in a parallel environment — your live site never goes dark.

DNS cutover under change control with your team in the room. Pre-checks, go/no-go, traffic shift, post-checks, and a 24-hour heightened-watch window with the SOC on standby. Documented rollback at every step.

Your written runbook is delivered: contacts, severity matrix, on-call paths, change windows, approval chains, and the audit pack template. Working sessions with your in-house team so everyone knows who calls whom at 3 a.m.

You enter steady state: 24/7 SOC monitoring, 10-business-day patch SLA, hourly encrypted backups, quarterly restore drills, monthly executive reporting, and on-demand audit evidence packs. Same named team. Forever.