Web services
Selling software to enterprises
Web apps and SaaS: the buyer's security review decides the deal. We answer the questionnaire from your evidence, close the gaps it finds, and keep your releases watched.
Security questionnaire, one deal: from US$490
What it covers
- One questionnaire for one deal, up to about 300 questions. Larger ones count as two.
- Answers drafted from our answer library and your evidence. Every gap is marked, never guessed.
- One round of follow-up questions from the buyer.
What you provide
- The questionnaire and the buyer's deadline.
- Your existing policies, diagrams and reports, and one person who approves the answers.
What you get
- The completed questionnaire, ready to send.
- A list of gaps with the fix for each, and what it costs if we do it.
Timing and access
- About 5 business days after we have your documents.
- No access to your systems is needed. You approve every answer before it goes out.
After the questionnaire
They ask for SOC 2
We prepare the controls and the evidence; the auditor attests. Quoted after a first call on your product and your cloud.
The review found gaps
Fixes for the gaps, quoted first: login settings, logging, backups, a vulnerability disclosure page.
Every release, watched
App Care scans each release, watches your dependencies and APIs, and includes one questionnaire a quarter. US$990 a month.
What we commit to
- Written scope before work starts.
- Every deliverable dated and kept in your evidence file.
- Vulnerability reports acknowledged within one business day; on Respond and Secure, received 24/7 with an engineer on call.
- A first answer to any request within one business day, Vancouver time.
- A named lead you can escalate to.
You own your product and its security. We own the work we deliver, in writing. No one can promise a site or product will never be hacked. Doing nothing is far riskier. We shorten the time you stay exposed, and we keep the record.
Start with the free check.
A grade from A to F in under a minute, and a plain list of what to fix. A person reads every check and replies within one business day.