How We Engage

No — but one is available from the first conversation. Ironhawk operates NDA-first: a mutual non-disclosure agreement can be executed before any sensitive detail is shared, and most engagements begin that way.

Every engagement starts with a confidential scoping call to understand your objective, environment, constraints, and timeline. You then receive a written proposal covering scope, approach, deliverables, access requirements, and client responsibilities. Work begins only once that is agreed.

A point of contact, a clear statement of the objective, and the access the agreed scope requires — which may include documentation, interviews with relevant staff, and system access where the engagement calls for it. Access requirements are defined in the proposal, so there are no surprises mid-engagement.

It depends on the scope and current commitments, and it is confirmed during scoping rather than promised in advance. If you are experiencing an active security incident, call (844) 234-6464 directly — availability for active-event support is confirmed on that call, not through the website.

Engagements are senior-led. Staffing is agreed at scoping, held to the people the work requires, and operates on a need-to-know basis within your confidentiality framework.

Need-to-know staffing, NDA-first setup, and client material retained only as long as the work requires. Information handling and reporting lines are agreed at scoping and documented in the engagement terms.

Ironhawk does not publish client names or engagement histories — the same confidentiality that protects our clients protects you. The sample deliverables on this site show the structure and depth of real work products using representative content.

A reporting cadence is agreed at scoping. Material findings are flagged as they are identified rather than held for the final report, so you are never surprised by a deliverable.

Pricing is set per engagement, in the proposal, after scoping — because scope, access, and timeline drive the work. There is no published price list, and no pricing is quoted before the scope is understood.

Defined-scope advisory and assessment work; response and recovery support, either as readiness preparation or event-driven; and security operations engagements ranging from an operations assessment through design and buildout to build-operate-transfer and ongoing operations support.

Yes — findings often justify it. Any change to scope, timeline, or cost is agreed in writing before the additional work begins.

You receive the agreed deliverables and a structured handover. Where the engagement builds capability — a SOC, a process, a program — the handover includes documentation, training, and defined handover criteria, so the capability stays with you.