How we work

Engagement Models

A small set of engagement models that reflect how most clients actually work: short focused projects, retainers for advice and incident response, and longer-term partnership for Essential Eight and platform work.

Fixed-Scope Projects

Clearly defined pieces of work with an agreed outcome and price.

  • Microsoft 365 security baseline review and uplift.
  • Firewall ruleset clean-up and documentation.
  • Targeted Essential Eight gap assessment and roadmap.

Time & Materials / Contracting

For organisations that need a security engineer embedded into a project or team.

  • Short-term backfill for security engineering roles.
  • Support for large migrations or acquisitions.
  • Hands-on tuning of existing tools and platforms.

Advisory Retainer

Light-weight ongoing engagement for questions, design reviews, and incident response support.

  • Monthly or quarterly check-ins.
  • On-call guidance for incidents and investigations.
  • Review of proposed changes and architectures.

Essential 8 Program Support

Support for organisations that need to build and maintain an Essential Eight programme.

  • Initial maturity assessment and roadmap.
  • Support for implementation and enforcement.
  • Optional deployment of our automated compliance solutions.

The cost of inaction

Indicative Australian SMB figures. Your exposure depends on turnover, sector, and how your payments are authorised — but the shape of the trade-off is consistent.

Comparison of typical incident costs against the cost of a preventative engagement
ScenarioTypical cost (SMB)DingoSec engagement
Business email compromise (invoice fraud)$40,000 – $150,000+Fixed-price M365 hardening
Ransomware outbreak & downtime$250,000+ and brand damageEssential Eight roadmap & backup validation
Lost contract due to failed auditVaries (revenue loss)Retainer / advisory support

What happens next

You get in touch

A few lines about your environment and what prompted the enquiry is enough.

Short discovery call

Usually 30 minutes. We will tell you honestly if we are not the right fit.

Written proposal

Scope, deliverables, price, and timeline. No surprises mid-engagement.

Delivery and handover

Documented changes, evidence, and a prioritised backlog for what comes next.

Not sure which fits?

Most first engagements are a fixed-scope Microsoft 365 baseline review or a firewall ruleset clean-up — both have a clear beginning and end, and both usually surface the majority of the real risk.

If you are being pushed by an insurer, a customer questionnaire, or a board request, an Essential Eight gap assessment is normally the faster route to the answer they want.

If any of these models fit, or you are not sure which is right, get in touch for a short discovery call. We can usually suggest a practical starting point within a single conversation.

Let's find your weakest link before someone else does

A 30-minute scoping call is usually enough to tell you where the real risk sits and what a sensible first engagement looks like. No obligation, no sales theatre.

Book a consult