Engagements
Most clients start with the fractional CISO / CTO retainer and add a packaged engagement when a board, a bank, or a roadmap needs a written answer. When the answer needs to become software, the same team scopes and builds it. Every engagement ships a written deliverable and a working session to walk your team through it.
On pricing
The retainer starts at $5,000 a month. Packaged engagements don't have a rate card — each is priced to your organization, your data sensitivity, and your timeline. A 30‑minute call is enough to scope and quote; you'll have a written proposal within two business days.
Scope a call →01 · Recurring
A named security executive on your org chart — the one your sponsor bank, SOC 2 auditor, or lead investor just asked about — from someone who has also run the infrastructure, the cloud migration, and the settlement rails. Most clients start here.
What's included
What's not included
Ideal fit
Fintechs and digital‑asset firms with 10–150 people, a technical founder, and an external party — sponsor bank, enterprise customer, auditor, investor — asking who owns security. Especially firms with a diligence deadline in the next 90 days.
Deliverables
02 · Sprint
The diligence‑readiness sprint. For digital‑asset and web3 firms that need to be legible to banks, institutional counterparties, and regulators — an ex‑bank CISO's view of what the other side of the table actually checks, before they check it. Usually the first two weeks of a retainer.
What's included
What's not included
Ideal fit
Digital‑asset firms, web3 infrastructure companies, and crypto‑native fintechs pursuing bank partnerships, institutional clients, or a firmer regulatory footing — and done learning what banks check by failing the diligence.
Deliverables
For leadership teams who need a defensible AI plan — not a vendor pitch. Executive workshops, prioritized use cases against your actual constraints, and a 90‑day pilot you can take to a board.
What's included
What's not included
Ideal fit
Banks, fintechs, insurers, and regulated SaaS firms with $50M+ revenue, an exec sponsor, and an AI mandate they don't yet know how to execute responsibly.
Deliverables
04
Independent architecture review across cloud and identity systems. Zero‑trust gap analysis, post‑quantum readiness, and a phased modernization roadmap that doesn't break the things that already work.
What's included
What's not included
Ideal fit
Mid‑market fintechs and FIs evaluating cloud modernization or due for an independent architecture review — and the board wants a non‑vendor opinion before committing capital.
Deliverables
05
For FIs and fintechs evaluating tokenized assets, on‑chain settlement, or stablecoin rails. Independent, vendor‑agnostic strategy from someone who has actually built these systems — not a hype piece.
What's included
What's not included
Ideal fit
Banks, insurers, payments firms, and asset managers exploring tokenized assets, on‑chain settlement, or stablecoin integration — and the board wants a sober, vendor‑neutral view before committing capital.
Deliverables
06 · Build
When a roadmap, audit, or readiness plan needs to become working software, DAPL scopes and delivers the build through its own engineering bench — cloud infrastructure, AI and LLM features, monitoring, integrations — under the same controls the strategy work was written to satisfy. One accountable party from decision to deployment.
What's included
What's not included
Ideal fit
Fintechs, digital‑asset firms, and regulated companies whose strategy engagement produced a plan and who want it built by people who understand why the controls are there. Typically a 6–16 week build following a two‑week scoping phase.
Deliverables
Bring the messiest version of the problem you have today. Thirty minutes is enough to point at the right one.