Ongoing advisory
Some months they consult me a lot and others hardly at all, and over time it evens out. Since I follow each company month after month, when a question comes in I already know the system and why each thing was decided.
What it includes
- The sessions the work calls for, with me and with whoever the company chooses, from the CTO to whoever owns each topic. We agree the rhythm at the start and adjust it as we go.
- Direct WhatsApp with me for whatever comes up between sessions.
- Answers the same working day.
What we cover
- Code and API security
- AI and agent security
- Productivity with AI: Claude Code, Copilot and the like
- Architecture and technical decisions
- Security architecture
- Offensive and defensive security
- Python and performance
What it does not include
- On-call or 24/7 availability
- Incident response
- Writing the team's code
- Full training: workshops are separate