Security that's engineered — not paperwork.
We do the hands-on technical work that stops attackers: understanding who is likely to target you, detecting them early, hunting for what slipped through and automating the response. We don't sell compliance checklists or regulatory paperwork — and if you simply need a straight answer on a security question, you can book an hour with us.
- Services
- 8
- Pricing
- Fixed, in GBP
- Launch discount
- 90% off
Threat intelligence
Who targets organisations like yours, how they operate and what that means for your defences — mapped to MITRE ATT&CK.
Detection engineering
High-fidelity detections for your SIEM and EDR, written as code, tested against real techniques and tuned to your environment.
Threat hunting
Proactive, hypothesis-led hunts for attackers your tools have missed. Every hunt leaves new detections behind.
Security automation
Playbooks that triage alerts, enrich investigations and contain threats in minutes, not hours.
Attack surface & hardening
See what attackers see, then lock down websites, cloud and email against the most common attacks.
AI security
Prompt-injection, data-leakage and agent-permission testing for AI features before they reach customers.
Ideal if…
- You have security tools but aren't sure they'd catch a real attack
- Your security team is stretched thin by alerts
- You've had a scare and want to know you're clean
- You're building AI features and need them tested
Tools & platforms
We work with what you already have wherever possible, and recommend changes only when they pay for themselves.
Consultation
Consultation on any security matter
A suspicious login, a supplier's security questionnaire, a tooling decision or a second opinion during an incident — book an hour with a security engineer and get a clear, practical answer.
Scope
What we don't do
- Compliance certification, audits or attestations (ISO 27001, SOC 2, PCI DSS, Cyber Essentials)
- Regulatory or legal advice, or acting as your data protection officer
- GRC policy-writing and governance programmes
We're happy to work alongside your compliance advisers and auditors on the technical side.
Security, fixed-price.
- HK-SEC-01Within 3 business daysWithin 3 business days≈US$200/session≈US$20/session
What's included
- 60-minute video call with a security engineer
- Any technical security topic
- Written summary with recommended next steps
- No obligation to buy anything further
Ideal for: Founders, IT leads and security teams who need an expert view, fast.
Typical delivery: Within 3 business days
Price comparison
Enquire about this service- Typical market
- ≈US$135–US$335/session
- Hartkeep standard
- ≈US$200/session
- Launch price
- ≈US$20/session
≈91% below the typical market midpoint
- HK-SEC-021–2 weeks1–2 weeks≈US$1,995≈US$200
What's included
- Threat actors and campaigns relevant to your sector, region and technology
- Tactics mapped to MITRE ATT&CK
- Leaked-credential and lookalike-domain checks
- Overview of your exposed internet footprint
- Prioritised defensive actions
- Written report plus a 60-minute briefing
Ideal for: Organisations that want to defend against real threats, not generic ones.
Typical delivery: 1–2 weeks
Price comparison
Enquire about this service- Typical market
- ≈US$2,680–US$10,720
- Hartkeep standard
- ≈US$1,995
- Launch price
- ≈US$200
≈97% below the typical market midpoint
- HK-SEC-035–7 days5–7 days≈US$1,060≈US$105
What's included
- Discovery of domains, subdomains and cloud assets
- Exposed services, remote access and admin panels
- TLS, DNS and email security checks
- Security headers and known-vulnerable software
- Secrets exposed in public code repositories
- Prioritised findings with fixes
Ideal for: Any organisation online — especially after rapid growth or acquisitions.
Typical delivery: 5–7 days
Price comparison
Enquire about this service- Typical market
- ≈US$1,340–US$4,020
- Hartkeep standard
- ≈US$1,060
- Launch price
- ≈US$105
≈96% below the typical market midpoint
- HK-SEC-042–3 weeks2–3 weeks≈US$4,625≈US$460
What's included
- Coverage gap analysis against MITRE ATT&CK
- 10 detections in Sigma plus your platform's native query language
- Microsoft Sentinel, Splunk, Elastic, Google SecOps, CrowdStrike and more
- Validation with adversary emulation
- False-positive tuning against your baseline
- A response runbook for every alert
Ideal for: Security teams with tooling in place but gaps in detection coverage.
Typical delivery: 2–3 weeks
Price comparison
Enquire about this service- Typical market
- ≈US$5,360–US$20,100
- Hartkeep standard
- ≈US$4,625
- Launch price
- ≈US$460
≈96% below the typical market midpoint
- HK-SEC-052–3 weeks2–3 weeks≈US$3,955≈US$395
What's included
- 3 intelligence-led hunt hypotheses
- Hunting across EDR, SIEM, identity and cloud logs
- Investigation of anomalies and findings
- Executive and technical report
- New detections from every hunt
Ideal for: After a near miss, ahead of a major change, or as a regular health check.
Typical delivery: 2–3 weeks
Price comparison
Enquire about this service- Typical market
- ≈US$6,700–US$26,800
- Hartkeep standard
- ≈US$3,955
- Launch price
- ≈US$395
≈98% below the typical market midpoint
- HK-SEC-062–4 weeks2–4 weeks≈US$3,955≈US$395
What's included
- Review of your security workflows for automation potential
- Up to 3 production playbooks (e.g. phishing triage, enrichment, containment)
- Built in Tines, Sentinel playbooks, Splunk SOAR, n8n or Python
- Human approval for any disruptive action
- Metrics on time saved
Ideal for: Lean security teams drowning in alerts.
Typical delivery: 2–4 weeks
Price comparison
Enquire about this service- Typical market
- ≈US$5,360–US$26,800
- Hartkeep standard
- ≈US$3,955
- Launch price
- ≈US$395
≈98% below the typical market midpoint
- HK-SEC-071 week1 week≈US$1,060≈US$105
What's included
- Security headers and content security policy
- WAF, CDN and bot-protection configuration
- Admin access, MFA and secrets review
- Dependency and supply-chain checks
- Backup and recovery verification
Ideal for: Websites, stores and SaaS products that have never had a security review.
Typical delivery: 1 week
Price comparison
Enquire about this service- Typical market
- ≈US$1,340–US$5,360
- Hartkeep standard
- ≈US$1,060
- Launch price
- ≈US$105
≈97% below the typical market midpoint
- HK-SEC-08OngoingOngoing≈US$1,675/mo≈US$170/mo
What's included
- 2 days of security engineering per month
- Flexible across detection, hunting, automation and hardening
- Monthly priorities call
- Priority access for security questions
Ideal for: Growing companies that need senior security skills without a full-time hire.
Typical delivery: Ongoing
Price comparison
Enquire about this service- Typical market
- ≈US$2,010–US$8,040/mo
- Hartkeep standard
- ≈US$1,675/mo
- Launch price
- ≈US$170/mo
≈97% below the typical market midpoint
USD prices are indicative conversions. All work is quoted and invoiced in GBP.
Common questions.
01Do you do penetration testing?
Our focus is defensive engineering — detection, hunting, intelligence and automation — plus non-intrusive attack surface reviews. Where you need accredited penetration testing, we can scope it and work alongside a testing provider.
02We think we've been breached. Can you help?
If you have cyber insurance, call your insurer's incident line first — many policies require it. We can provide technical consultation, threat hunting and detection support alongside your incident responders.
03Do you need access to our systems?
For hunting and detection engineering we usually need read access to your security tooling, agreed in writing beforehand. We only ever work on systems you're authorised to approve, under a clear written scope.
Start a project
Ready when you are.
A free 30-minute call, a fixed price and a clear plan — with launch pricing locked in.
Or email hello@hartkeep.com