PinkCloudStart a conversation

Order

Exposure Review

A fixed-scope first look in five days: we map the input surface, the tool permissions and the cost concentrations, then hand you a prioritised list of what we would fix and what it would take.

A person at PinkCloud answers an order with the agreement within one business day.

entry

A fixed-scope first look in five days: we map the input surface, the tool permissions and the cost concentrations, then hand you a prioritised list of what we would fix and what it would take.

$4,500

5 days · fixed scope

45 hours at $100/hour

Pricing status: confirmed. PinkCloud quotes from these figures.

Prices exclude any applicable tax.

Deliverables

  • Input-surface and tool-permission map
  • Top exposures, ranked by exploitability
  • Cost concentrations and quick wins
  • A costed shortlist of what we would fix

Exclusions

  • A compliance certificate or an audit opinion: if the goal is a certificate for a customer questionnaire and nobody intends to act on the findings, a larger firm with an audit practice will serve you better and cost less
  • Staff augmentation: this is fixed-scope work with an end date, not two engineers embedded for six months
  • Adversarial testing of a system that is not built yet: testing needs something to test, and at the whiteboard the useful conversation is an architecture review
  • Incident response and on-call cover: we are not an incident-response retainer and we do not carry a pager
  • Compliance evidence deliverables: these normally add 10 percent to the floor, but the entry fee here is fixed and no uplift applies
  • On-site attendance: delivery is remote by default, and on-site work needs a scoping call
  • Doing the remediation: the review hands over a costed shortlist of what we would fix, and the work itself is a larger engagement
  • None of the above is a refusal: everything here has a route and a rate. Work outside this scope is quoted at our published hourly rate — as a change request or as a separate engagement, agreed in writing before it starts. The review itself stays fixed: 45 hours at that rate, and no uplift applies

Scope

Five days, fixed scope, any practice. We map the input surface, the tool permissions and the cost concentrations, then hand you a prioritised list of what we would fix and what it would take. It is sized to be approved on a corporate card rather than through procurement, and it either produces a shortlist worth acting on or it tells you your exposure is smaller than you feared. The entry fee is fixed and no uplift applies, so scope, urgency and compliance evidence do not move the number.

Terms

Fixed fee, fixed scope and fixed window: there is a written deliverable and an end date agreed before the work starts. Findings are not held back to seed a follow-on sale, we take no percentage of savings, and we hold no reseller margin on any platform we might recommend. What we deliver is yours — the code and the reasoning — so if you never call us again, everything still works.

If it turns into a larger engagement, the fee comes off the first invoice; if it does not, you still keep the findings. The pricing rules list crediting the entry fee against a follow-on engagement as a human decision and a decision record each.

The price is the published entry floor and its status is confirmed: PinkCloud quotes from this figure. For this product the floor is also the ceiling — the entry fee is fixed and no uplift applies, so scope, urgency and compliance evidence do not move it. Floors are published so you can rule us in or out without a call. An indicative quote is valid 14 days and is never binding; a binding quote follows a scoping call and is approved by a named person at PinkCloud.

Assumptions: senior-only staffing; remote delivery unless on-site is agreed; the client provides access within 3 business days of the start; taxes excluded; the fixed fee is an agreed budget of 45 hours of senior time at our published hourly rate.

What the fee buys, and what happens if the work does not fit. The entry fee is fixed and no uplift applies, so nothing about the scope, the start date or compliance evidence raises it while we are quoting. Once you have signed, the fee and the five-day window hold: if the work proves larger than we estimated, the scope flexes rather than the fee, what comes out is agreed in writing with you, and an overrun is never billed by the hour. The hourly rate is reached only by adding scope — a change request or a follow-on engagement, agreed in writing before it starts — never by the agreed work turning out to be bigger.

Confidentiality and staffing: capabilities are public and the roster is not, so before you sign anything you are told under NDA exactly who is staffing the work and what background each person brings. No client is named without written permission and case studies are anonymized by default. What you send is stored to act on your brief, shown only to the people at PinkCloud who will answer, and never published, used in marketing or shared with other prospects. We do not backfill work with people who were not in the scoping call; when we are full we say so and offer a date.

Payment, cancellation and liability terms are agreed in the engagement contract before work starts.