The work, one senior practice.
Custom software written around how this business runs. Websites and apps wired into those systems. Agents that keep customers, bookings, management, and finances moving after the office closes. Automated marketing that finds people and brings the conversation in. Data removal that takes an address and a phone number off the people-search sites. We do not ship a codebase nobody can explain. Most builds run 4–6 months, on average. The written scope names the date. A monthly retainer is how the same senior engineer stays.
Software Development
Custom software written around how this operation should run. Internal tools, workflows, APIs, and the integrations that stitch them together, from a blank repository. An app already in production — written with an AI coding tool, customers on it — gets a written audit, an outside-in exposure report, then Continuity. Efficiency is the brief. A codebase you can keep is the standard.
- 01
AI-built codebase rescue & audit
You shipped fast with an AI coding tool and now the app runs the business — but nobody has read every line. We do: a written audit of an AI-generated or vibe-coded codebase covering security posture, auth and access-control coverage, dependency and supply-chain hygiene, secrets handling, and a prioritized map of the technical debt underneath. You leave with a report you can act on and a clear remediation plan — which we're happy to carry out under the same Software terms.
- 02
External exposure report (black-box security test)
The same audit an outside attacker would run — from the public internet, with no source code, no credentials, and no server access, exactly as a stranger sees you today. We map what your live site exposes: forgotten subdomains and stale staging environments, outdated software with known CVEs, missing security headers and weak TLS, exposed .env or .git files, secrets accidentally shipped in your frontend bundles, whether your row-level security is actually enforced when the public API is hit directly, and injection or OSINT exposure discoverable without touching a file. This is the outside-in counterpart to the AI-built codebase audit's inside-out read. Non-intrusive reconnaissance by default; any active testing happens only inside a signed scope-of-work — we begin no scanning of any kind until written authorization is countersigned and the target is confirmed yours to test.
Then Keeping at $2,000 a month, if you want that engineer to stay. The month names the seats, the model usage, and the cost.
Custom software & platform builds
Sit with us. We write the system around how you want this business to run — full-stack, from a blank repository, shipped so the operation gets hours back and costs less to keep moving.
Internal tools & business systems
Operations dashboards, admin consoles, workflow tools, and the internal systems that quietly run the company — encoded from how your team actually prefers to work, not how a template thinks it should.
APIs, integrations & data pipelines
Move data between the systems you depend on, expose clean APIs to the partners you trust, and stitch the operation together without brittle glue code.
Software assurance (black, grey & white box)
How we look at a system that already exists. Black box is the stranger on the public internet — the External Exposure Report. Grey box is an authenticated assessment: a real role, the paths a user can reach. White box is source-assisted, paired with the codebase audit. We partition inputs into classes that behave the same, then we attack the boundaries. Quote-gated. No scan until a signed statement of work.
Continuous exposure monitoring
Your attack surface changes every time you ship. We re-run the external exposure assessment on a recurring cadence, flag newly exposed assets, endpoints, and misconfigurations as they appear, and feed each finding into a remediation plan before someone else finds it first. Attaches after an initial exposure report, under the same signed authorization, and sits on Software terms or Keeping.
Engineering retainers & technical advisory
A senior engineer on call for the decisions that matter — architecture reviews, hiring panels, on-the-fly support for the people you already have. Keeping is $2,000/month for the software we built, with no agents running the business. Continuity is $4,500/month for one agent. Mandate is $12,000/month for the desk. What you pay: $12,000 a month, $144,000 a year Seats: Five service seats cost about $270,000 a year to employ, before the marketing seat. Seven cost about $378,000. Model usage: $2,000 of model usage is included in the month. Past that, API usage is named on the invoice at cost. We do not mark it up.
Websites & Apps
The front door, written around how you want the business to be met — not a theme with the logo swapped. Marketing sites, customer apps, and the software integrations that make a website more than a brochure: bookings, CRMs, the custom systems we build next door. Designed with you, then looked after by the same engineer who scoped the work. How that site gets found, and how a conversation reaches the form, lives on Automated Marketing.
Website design & deployment
Conversion-focused sites written around your brand and the tools you already run — bookings, CRMs, payments, the custom software behind the counter. From a landing page to a full marketing site. No templates. We sit with you until the preferences are in the build.
Mobile & desktop applications
Customer-facing apps and internal tools for iOS, Android, macOS, and Windows. Cross-platform by default; native when the experience earns it.
Managed website hosting & care
Keeping at $2,000/month keeps the website, the app, and the software in service. What you pay: $2,000 a month, $24,000 a year Seats: This month does not stand in for a staff seat. It keeps the software we built in service. Model usage: No model usage is included. This month does not run agents. If a cost of running it appears, it is named on the invoice at cost. Presence at $8,500/month prepares the pages, the facts, and the citations an answer engine needs. What you pay: $8,500 a month, $102,000 a year Seats: A marketing seat costs about $113,000 a year to employ, before the task seat already in Continuity. Model usage: $1,000 of model usage is included in the month. Past that, API usage is named on the invoice at cost. We do not mark it up. Cancel anytime.
Computer optimization & maintenance
Hands-on care for the machines you and your team work on every day — clean-up, hardening, and tuning so your computers perform exactly the way they should. Remote only. We confirm the computers and send the invoice. It does not use the website retainer or an hourly rate.
Software & AI Automation
Agents that staff the operation: customers, bookings, management, finances, and the repetitive desk work between them. Not a chatbot bolted on a homepage. Shipping one is the start. We manage them every day. They plug into the tools you already use and keep the work moving after the office closes. We do not move money, and we do not promise a performance figure. Finding accounts and sending conversations to the form lives on Automated Marketing.
AI Agent Team Setup
A small team of agents for the inbox, leads, booking, and follow-ups, inside the tools you already use. A person approves anything that matters. Usage caps and a cost estimate come before the build.
Custom AI agent design & development
Purpose-built agents tailored to your workflows, your data, and the way you want the business to run — not a generic chatbot bolted on top. Intake, qualification, drafting, research, scheduling, follow-through.
Custom MCP server development
Purpose-built Model Context Protocol servers that expose your databases, CRMs, ticketing, and proprietary APIs to any MCP-capable agent or IDE. Tool boundaries and permissions are designed in from the first line, so an agent reaches exactly what it should and nothing it should not.
Agent skills, hooks & guardrails
The operational layer around your agents: reusable skills, lifecycle hooks, subagent orchestration, and hardened tool boundaries — so agents behave consistently, fail safely, and stay auditable once they are running in production.
Workflow automation & orchestration
Multi-step automations with reasoning baked in — handling intake, triage, document generation, and the everyday operations work that eats your team's afternoons.
Agent-in-the-loop integrations
Bring intelligent assistance into your CRM, helpdesk, ops console, or internal tools without uprooting what already works. The agent shows up where your team already is.
Customer desk
The inbox, the questions, and the follow-up. Agents answer what they are allowed to answer, qualify the rest, and hand a person the ones that need a person. We manage the run every day.
Bookings desk
Confirm, move, and fill the calendar inside the booking tool you already use. A person still owns the exceptions. The day does not start with a pile of unconfirmed appointments.
Management desk
Status, handoffs, and the queue that used to wait until morning. The agent keeps work moving between the people who own it. It does not replace the person who decides.
Finance desk
Invoices, reminders, and a draft of the numbers. The owner still approves what goes out and what gets paid. We do not move money and we do not hold it.
The rest of the desk
Documents, intake, and the repetitive operations work that eats the afternoon. Scoped to this business, logged, and bounded. Full autonomy is something a workflow earns.
Automated Marketing
Leads, engagements, and the work of being found. Agents research a written category, engage those accounts, and send conversations to the site and contact form. The operator is paged when one arrives. Answer engines, technical SEO, and citations make the business citable once there is a site to name. We do not buy lists, promise a lead count, promise a ranking, or install a third-party pixel. Websites & Apps still builds the front door.
Always-on lead systems
While the office is closed, agents keep researching a written category, engaging those accounts, and sending conversations to your site and contact form. We manage that run every day. The operator is paged when one arrives. Fit criteria are in the SOW. No purchased lists, no lead-count promise. The build sits on Software & AI Automation terms. The run sits on Presence at $8,500/month.
Answer Engine Optimization (AEO)
Entity, schema, llms.txt, and citation architecture so Claude, ChatGPT, Gemini, Perplexity, and AI Overviews can name the business. We make the practice machine-readable and citable. We do not promise a mention.
Technical SEO & search architecture
Crawl and index hygiene, information architecture, internal linking, canonicals, and Core Web Vitals treated as a discovery concern — the layer on top of a site Websites & Apps already built, or an honest audit of one it did not.
Citation & entity program
NAP consistency, directory presence, sameAs, Google Business Profile, Bing Places, Apple Business Connect, Google Maps, and Apple Maps. Brand marks on Maps and, where the platform allows, verified sender marks for Messages and mail. We prepare and claim; the platform decides verification. No ranking promise.
Organic growth retainer
Ongoing measurement, content briefs from real query and AI-visibility misses, schema upkeep, and a citation cadence. This is Presence at $8,500/month — Continuity plus the market — not a separate growth product. No ranking promise.
Custom marketing software
Content pipelines, outreach systems, attribution dashboards, review engines, citation trackers — built from a blank repository for that business. Not a HubSpot resale. Non-marketing systems stay with Software Development.
Content systems for answer engines
FAQ architecture, resource clusters, and structured-data programs written so an answer engine has something specific to cite. Pages, not posts-for-the-calendar.
Adversarial Testing
A website, a piece of software, or an agent that is already live. We look from the outside, with a login, or at what the agent will give up, and we write down what gave way. The packet is dated and scoped. We do not promise the system is clean. Nothing probes until the target is confirmed yours, in writing.
From the public internet
The external exposure report, $3,000. What a stranger can already see. The account of that look stays on the exposure report.
With a login, or with the source
Software assurance. $6,500 to open, then $165 an hour. The signed statement of work names the depth.
One live agent
One agent, one public surface or one role, $8,000. Prompt injection, tool misuse, and what it gives up. A written packet, and one retest of the fixes. A wider surface uses Software & AI Automation terms: $10,000 to open, then $220 an hour.
AI-Built App Security Check
For founders whose app was built mostly with AI or no-code tools — Lovable, Bolt, Cursor, Replit, v0, Bubble — often on Supabase, Firebase, or Vercel, before launch, a raise, or real users. A read-only review of one app and one repo. $750 fixed, paid upfront. 100% of the fee credits the $1,500 Build Blueprint. Founding price: $500 for the first 3 clients, in exchange for a named testimonial and permission to publish an anonymized case study.
Auth and data access
Supabase RLS, Firebase rules, cross-user data access, and unauthenticated admin or API routes.
Exposed secrets
the repo, git history, the front-end bundle, and service keys reachable from the client.
Vulnerable or abandoned dependencies.
Config
public storage, CORS, open endpoints, and missing rate limits.
Personal Data Removal
An agent is built for your records and works around the clock: name, home address, phone numbers, age, relatives, and email addresses. A person checks what it found and looks for the exposed records it missed. It files the opt-outs and written demands, and re-scans every month so a listing that returns is caught. Where a record can only change by court order, we prepare the request and submit it. You cover the court's filing fee at cost, usually $30 to $100, quoted before we file. We are not a law firm, and a judge decides.
Exposure scan & report
A search of people-search sites, data brokers, directories, and the major search engines for your name, address, phone numbers, and emails, delivered as a PDF showing where you were found.
Removal filing
Opt-outs, deletion requests, and privacy-law requests submitted to every site that lists you, including each site's verification steps.
Written escalation
Formal written demands and appeals when a site refuses, including copies of dissolved-LLC, voter-registration, and lawsuit records republished by private companies.
Monthly monitoring & re-removal
Optional. A re-scan every month. When a listing reappears, work starts immediately. Add it at checkout or any time after, and cancel from your client portal.
Court-ordered record changes
For public records that stay permanent without a judge's order. We prepare the documents and submit the request. You cover the court's filing fee at cost, usually $30 to $100, quoted before we file. Not legal advice; the judge decides.
We work from the United States and we take work worldwide.
Worldwide is the work. A second headquarters is the fiction. Calls land in your day, a room when one is required, nothing leased so the quote looks local.
Tell us what you're trying to get done.
We'll map it to the right engagement — and a senior engineer will answer you personally when we've read it.
Request a proposal