Starter plan
Starter adds more monthly capacity for vulnerability review, risk-based prioritisation, exposure monitoring, and remediation guidance.
Monthly allocation
A practical monthly rhythm for teams that need recurring visibility, decisions, and follow-up support.
First 90 days
The first month focuses heavily on onboarding and understanding your environment. Work is then planned around priorities and the monthly time allocation.
Month 1
Month 2
Month 3
Monthly time
Actual allocation varies based on your priorities, access, risk, and the work already completed. The plan defines capacity, not an unlimited list of deliverables.
Included services
Services are delivered within the available consultant time and agreed priorities for the month.
Related services
These service pages explain the underlying work that can be delivered inside this plan, depending on monthly priorities and available consultant time.
A recurring support rhythm for security visibility, guidance and improvement.
Learn more →
Monthly vulnerability review, prioritisation, exposure monitoring and remediation guidance.
Learn more →
Regular advisory support for controls, decisions, best practice and risk-based priorities.
Learn more →
Response time
Email support within 2 business days.
Commercial terms
Review the commitment, onboarding, billing, capacity, tools, and plan-change terms before you proceed.
Yes. Service plans have an initial three-month minimum term and continue monthly after that. During the first 15 days, you may end the agreement in writing; time already used and any approved third-party costs will be deducted before the remaining first payment is refunded.
Give at least 30 days’ written notice before your next billing date. The plan will end on the billing date that follows the full 30-day notice period. For example, if your billing date is the 1st, notice given on 10 March ends the plan on 1 May.
No. Monthly hours are reserved delivery capacity and do not roll over. Wherever practical, we proactively use available capacity against the priorities agreed with you.
Additional work is £150 per hour, excluding VAT, billed in 30-minute increments and only undertaken with prior written approval. Emergency or out-of-hours work is scoped separately. Regular overuse normally indicates that a larger plan would be more suitable.
Hacker Academy’s standard internal delivery and assessment tools, such as the tools used to perform vulnerability assessment and reporting, are included. Licences deployed into or retained in your environment, including Microsoft Defender, EDR, SIEM, cloud, or other third-party products, are charged separately with prior approval.
Upgrades can begin immediately on a pro-rata basis or from the next billing period. Downgrades begin from the next billing period and are subject to the initial minimum term.
No. Onboarding is included within the first month’s service capacity and covers the initial review, information and access gathering, priority setting, and first action plan. If the work required exceeds the available capacity, we agree the scope, timeline, or additional cost before proceeding.
The allowance is available after six continuous months or provided pro rata according to the subscription term. Testing scope and scheduling are agreed in advance, and unused allowance is not converted into cash or additional monthly hours.
We can review your environment, priorities, and constraints and confirm whether this is the right starting point.
