glacierr
stage · 03evolve
Where assessment findings become shipped change, and shipped change feeds back into the next assessment cycle. Quarterly cycles, annual programmes, transformational engagements — the loop that keeps you ahead of the next audit window, instead of scrambling toward it.
01the loop
Evolve is what you buy when one-shot work isn't the shape of the problem. We come back. Findings from the last cycle become Build work for the next; Build outcomes set the baseline the next Assess measures against.
Every quarter: a scoped reassessment (Sentinel cost drift, identity hygiene, posture against your priority controls), followed by a sized Build action to close the gap. Reset the baseline. Repeat.
Four quarters bundled into a single annual programme with a fixed fee and a fixed scope rhythm. Predictable cost, predictable cadence, single contract.
Larger multi-stream programmes — SecOps redesign, multi-tenant consolidation, post-acquisition integration, modernising-the-detection-stack. Scoped per opportunity; phased delivery; clear acceptance gates.
The challenges we solve with you shape the tools we build. When a pattern generalises it becomes a Security Store agent — and you get first-look access to it, hardened on real work, as it ships. Your IP stays yours, protected by contract.
A custom glacierr portal for live posture — refreshed continuously rather than per quarter. Surfaces ingestion-cost drift, identity hygiene, service principal risk and posture-score movement against the controls in scope. In active build for annual-programme clients first; quarterly cycle clients next.
02packages
Evolve runs on cadence — quarterly cycles, annual programmes, or larger transformational engagements scoped per opportunity. Each cycle has a fixed scope and a fixed fee. We don't charge by the day.
One assess→address cycle per quarter. Scoped reassessment, sized Build action, baseline reset, trend report. Continue quarter-on-quarter or end after any cycle.
Four quarterly cycles bundled into a single annual contract. Predictable cost, predictable cadence, semi-annual roadmap review with leadership.
Larger multi-stream programmes — SecOps redesign, post-acquisition integration, detection-stack modernisation. Phased delivery, clear acceptance gates, fixed fee per phase.
Senior security leadership on tap — board reporting, governance and risk reviews, vendor due diligence, and oversight of how AI lands in your stack.
Quarterly and annual packages billed in advance per cycle, net 14. Transformational engagements milestone-billed against signed phases. Travel within the UK is included.
03proof
Anonymised composites from the founders' prior engagements — references available under NDA at the second call. Evolve is the relationship layer — these are the shapes it tends to take.
UK fintech, post-acquisition ingestion tripled over twelve months. Quarterly cycle held annualised Sentinel spend flat against pre-acquisition baseline.
EU healthcare group, two annual NIST 800-53 audits twelve months apart. Annual programme structured to land evidence ahead of each window and address findings between.
Mid-market manufacturer, post-incident. Transformational engagement to redesign the SOC operating model and the supporting detection stack.
Bring the shape of the relationship on the first call. We'll come back inside a week with a fixed-fee proposal — quarterly cycle, annual programme, or transformational engagement scoped per opportunity. No retainers we can't end on 30 days. No day rates.