Two fixed-fee services for small teams: a security audit and a custom incident runbook

Fixed fee. No retainer, no lock-in, no software to install. If we do not deliver at least ten actionable findings (audit) or a runbook you would actually use at 2am (runbook), you get your money back.

This site publishes 160+ free ops checklists because most small teams can self-serve. Two situations keep coming up where self-serve stalls, and they are the only two things we sell as a service: knowing where you stand (the audit) and surviving the 2am call (the runbook).

Service 1 — Small-Team Ops Audit: $149, five business days

A prioritized findings report for your estate: identity and access, devices, network, data and backups, vendor and SaaS exposure, and incident readiness — the same 45-point structure we publish, run by someone whose full-time job is noticing what owners stop seeing.

What you get

• A numbered findings list, each with three lines: the finding, the risk in one plain sentence, and the fix with a suggested date and owner. No vulnerability-score essay, no 40-page PDF.
• Triage you can act on: every finding is critical / high / hygiene, so the first week of fixes is already sequenced.
• A 90-minute walkthrough call where we look at your consoles together — you keep the recording.
• A fix-check spreadsheet with the findings pre-loaded, so progress is a column, not a memory.

How it runs

1. Intake (20 minutes): a short questionnaire about your stack — identity provider, devices, cloud accounts, backups, vendors. No agents installed, no credentials shared.
2. Walkthrough (90 minutes): a video call where you screen-share the consoles and we walk the checklist together. Everything stays read-only.
3. Report (5 business days): the one-page report plus the fix-check spreadsheet, delivered by email. One 30-minute follow-up call included.

Guarantee: if the report does not contain at least ten actionable findings, the fee comes back in full. Price: A$149, fixed. Buy the Small-Team Ops Audit (checkout takes two minutes; the intake form arrives immediately).

Service 2 — Custom Incident Runbook: $249, 48 hours

A runbook is what the on-call person actually opens at 2am: one page per incident type, written for your stack, with your names, your tools, and your escalation path — not generic prose. We build it from your estate and deliver it in 48 hours.

What you get

• First-30-minutes page per incident type (service down, data suspected lost/exfiltrated, account compromised, vendor outage): what to check, what to contain, who to call, in what order.
• Escalation ladder with names and numbers, including the out-of-band path when your main channel is the thing that is down.
• Communication templates: the first status page line, the customer email, the internal update — pre-written so nobody drafts under adrenaline (the templates follow our incident communication templates).
• Recovery sequence with verification steps, including the checks that prove the incident is actually over.
• Printable + digital formats: a PDF built for a printed binder, plus a plain-text version that lives in your wiki.

How it runs

1. Intake (20 minutes): your stack, your incident history, who is on-call, where things live.
2. Draft (48 hours): the runbook arrives, built from your answers and one clarification thread if needed.
3. Drill (30 minutes, optional): a call where we walk one incident type against the runbook and fix what trips.

Price: A$249, fixed. Buy the Custom Incident Runbook (intake form arrives on checkout).

Which one do you need?

The combined path is deliberately sequential: the audit's critical findings become the runbook's first chapters, so the $249 document is aimed at your actual weaknesses instead of a generic worst-case list.

What we do not sell

• No retainers. Fixed fee, defined scope, done.
• No software or agents. Nothing is installed on your machines.
• No system changes. We do not touch your configs; we tell you what to change and you or your contractor make the change.
• No upsell ladder. The free checklists on this site cover everything the services do not cover; nothing here requires buying anything else.

Questions people ask first

• Do you see our data? No. The walkthrough is read-only screen-share on your side; nothing is uploaded, stored, or shared. The report is written from what is on the call. An NDA is available on request before intake.
• We're all Mac / all Windows / mixed. Does it matter? No — the checklist structure is platform-agnostic and the fixes name the platform-specific control (FileVault, BitLocker, and so on).
• Can you just do the fixes for us? Not as part of these two services — that is an MSP relationship and a different business. What you get is the sequenced plan; most teams clear the criticals in under a week with it.
• What if we disagree with a finding? The follow-up call exists for exactly that. Findings are evidence-based; if we cannot show you the evidence, it does not ship in the report.
• Refunds? Audit: at least ten actionable findings or your money back. Runbook: if it would not survive a read-through by your on-call person, tell us within 7 days and it comes back to you revised or refunded.

Where this fits

The free versions of both documents live on this site: the 45-point audit checklist you can run yourself, and the incident response plan template plus the free First 30 Minutes card. The services exist for the teams that would rather have an outside pair run it — and for the audit's findings to turn into a runbook that names your servers, your tools, and your people.

From the HIVE80lab kit

• The interactive Security Audit Scorecard — 45 checks, scored live in your browser, nothing uploaded.
• Ops Starter Kit — full incident-response kit for small teams — $14
• Small-Team Ops Audit — prioritized findings + fix plan, five-day turnaround — $149
• Custom Incident Runbook — done-for-you, built from your estate, 48h — $249
• Ops Mega Bundle — all 5 kits in one download — $29