Threat Vector Management crest

Engagement Intake

Advisory work is open and taking engagements — threat and risk assessment, architecture and program review, tool selection, incident-response readiness, second opinions, and standing thought partnership. Paid, and available now.

What is paused is the hands-on side: us operating your controls, running your monitoring, doing the remediation with our own hands. That is deliberately capacity-bound — we take on only what we can hold to standard — so for hands-on work today we broker you to vetted partners and stay in your corner while you choose.

Either way, start here. Tell us nothing you are not comfortable putting in writing.

Your in-progress answers are encrypted in your browser (AES-GCM) and held for 90 minutes from your last edit — for connection drops and potty breaks ;). The key is generated by your browser, is never sent to us, and cannot be exported by any website, including this one. Submitting, letting the 90 minutes lapse, or hitting Wipe Local Cache destroys that key, which makes anything left behind permanently unreadable.

What that protects: a draft left sitting on disk, in a backup, or in a copied browser profile. What it does not protect: an unlocked computer someone else can use. On a shared or public machine, finish in one sitting and hit Wipe Local Cache before you walk away.

01Contact

02Who Are We Protecting

03What Do You Need

Advisory is the short path and it is open for business: the topic, enough context to understand your threats, and where to reply. Six questions.

What Is Open, And What Is Not

Open, and taking paid engagements: advisory and thought partnership — assessment, architecture and program review, tool selection, incident-response readiness, second opinions, standing advisory. If advice is what you actually want, switch your answer above to Advisory; nothing here is holding you up.

Paused: the hands-on side — us operating your controls, running your monitoring, doing the remediation ourselves. That is deliberately capacity-bound. We take on only what we can hold to standard, and we would rather introduce you to a partner we would use ourselves than stretch past that line.

So today this path does three things: it gets you a partner introduction with our read on why that partner and not another, it puts you on the list for when we open delivery, and it tells us what the field actually needs. We will tell you exactly how we chose — and, consistent with how we broker everything else, we disclose any compensation we receive from a partner before you talk to them.

We do still review hands-on engagements case by case. If the fit and the scope are right, say so below and we will look at it properly.

04Organization Profile

This is the context we need to reason about your actual threats — who targets your industry, which regulators care, and what a bad day costs you. Ranges are fine everywhere.

Where your people and systems actually are. This drives jurisdiction, breach-notification clocks and travel risk.

Anything you are held to — by law, by an auditor, by an insurer, or by a customer contract. Check every one that applies.

05What Would Help Right Now

Pick whatever is true. None of this commits you to anything, and none of it is required.

This is how we know whether to hand you to a partner or pick the phone up ourselves.

05What Do You Want To Talk About

One question, because it changes the answer to almost everything else. Check anything that is true — "not sure" is a real and useful answer.

06Technology & Controls

Best guess is fine. "Not sure" is an answer we can work with — a wrong answer is not.

07AI Security

One question. Say no and this section closes and you are done with it — nothing is held against you for it. Say yes and it opens five short questions that map where AI actually sits in your business.

08Operational Maturity

Response windows and retainers are set with whoever ends up delivering, not here. This is just so the introduction starts from the truth.

What you would want, not what you are being quoted. A partner needs to know this before the first call.

04Principal Profile

Who you are determines who is interested in you. Answer at whatever level of detail you are comfortable with in writing — we can take the rest verbally.

05How We Can Help Right Now

Pick whatever is true. None of this commits you to anything, and none of it is required.

This is how we know whether to hand you to a partner or pick the phone up ourselves.

05What Do You Want Help With

06Outcome Objectives

07AI In The Household

One question. Say no and this closes. Say yes and it opens three short ones.

In Your Own Words

What actually brought you here. Active threats, a specific worry, a deadline, a question you could not get a straight answer to. Plain language beats jargon — and please leave out passwords, account numbers and anything you would not put in an email.

This briefing goes to Threat Vector Management at threatvector.management. If you intended a different firm with a similar name, this is not it.