How Every Engagement Works
The same process for every client, every time. No improvising. From intake to VM destruction, here's exactly what happens.
The Full Process
Submit Your Intake Form
Fill out the intake form with your service request, environment details, and scope. You'll select the service and tier, agree to terms, and submit — no account required.
Review & Scoping
I review your request, confirm scope, and may reach out by email with a brief clarifying question. For Custom IT Projects, a quote is sent before any payment is requested.
Payment — Before Work Begins
Payment is collected in full via Stripe (card), ACH via Wave (invoice), or Zelle. Work does not begin until payment is confirmed. No exceptions — this protects both of us.
VM Provisioned & Scoped
A dedicated virtual machine is provisioned in a private Proxmox cluster on an isolated network segment. The VM is named after your engagement. It has no access to other client data or systems — it exists solely for your project.
Work Completed
All work is performed inside the isolated VM using only access granted during scoping — typically read-only admin access. Nothing is stored outside the VM. Credentials are used only for the duration of the engagement.
Delivery + Written Summary
Deliverables are sent via email. You receive a written delivery summary that documents exactly what was done, what was found, and — where applicable — reminders to revoke access credentials.
3-Day Revision Window Opens
After delivery, you have 3 business days to request any included revisions. The VM remains active and your data is preserved during this window. If a revision is requested, it is completed and redelivered before the window closes.
VM Destroyed — Certificate Issued
After the revision window closes (or after final revised delivery, whichever comes first), the VM is fully destroyed — not archived, not suspended, deleted. A signed VM Destruction Certificate is then emailed to you. It documents the provision date, destruction date, scope of work, and confirms no client data was retained. Once this certificate is issued, no further revisions can be accommodated.
VM Destruction Certificate
Issued automatically after the 3-business-day revision window closes — no need to ask. It confirms provision date, destruction date, and that no data was retained.
- Provisioned per client — never shared
- Isolated network segment, no LAN routing
- No access to other client environments
- Read-only admin access by default
- VM kept for 3-day revision window after delivery
- Fully destroyed after revision window — not archived
- Certificate issued at destruction, emailed automatically
- Admin access is used only within the isolated VM
- You are reminded to revoke access on delivery
- Credentials not stored after VM is destroyed
- You retain full control — you can revoke at any time
| Service | Basic | Premium |
|---|---|---|
| M365 Security Audit | 2 days | 5 days |
| BEC / Phishing | 2 days | 5 days |
| PowerShell Scripting | 2 days | 4 days |
| Python Scripting | 2 days | 5 days |
| Script Debug | 1 day | 3 days |
| Data Analysis | 2 days | 4 days |
Business days from payment confirmation.
Questions before committing? Use the contact form — I'll reply within 1 business day with no obligation.
Common Questions
Do you need persistent admin access to my tenant?
No. Admin access is used during the engagement only, inside the isolated VM. You're reminded to revoke it at delivery. I do not store or retain credentials after the VM is destroyed.
What if I need to revoke access mid-engagement?
You can revoke access at any time — it's your tenant. If access is revoked before work can complete, we'll discuss scope and whether a partial refund is appropriate for unstarted work.
Do you share findings with anyone?
No. Findings and deliverables are sent only to you. Client data is never shared, sold, or used for any purpose outside your engagement. It is destroyed with the VM.
Can I get a refund if I change my mind?
Refund requests are accepted within 24 hours of payment, only if work has not started. Once work begins, all sales are final — this is documented at checkout.
What does "Standard" tier get me vs. "Basic"?
Standard adds deeper scope, additional deliverables, and longer turnaround to handle more complex findings. See the Services page for a full feature comparison per service.
What infrastructure runs the VMs?
Self-hosted Proxmox on dedicated hardware. The DMZ network segment is isolated — no routing to other systems or clients. Each VM is provisioned fresh per engagement.