Working model
Audit, implementation, or short advisory retainer.
Procurement
Procurement
Clear scope, access and ownership before production work.
Access model
Least-privilege access to agreed systems only.
Contracts
NDA/DPA and vendor details during scoping.
Security contact
Responsible disclosure: use the contact page.