A customer just asked for our SOC 2 report and we do not have one.
We build your compliance program and get you audit-ready — controls, policies, evidence, and auditor coordination.
Security & IT Operations Leadership
Your customers are asking about your security posture. What do you tell them?
Grey Wing Security is the security and IT operations team that growth-stage companies bring in when they need to pass audits, harden infrastructure, and respond to threats — without hiring a six-figure CISO.
Grey Wing — Illustrative Workspace
SOC 2 readiness
14 of 22 controls- MFA enforced org-wideVerified across Okta + Google WorkspaceDone
- Endpoint encryption142 of 142 devices enrolled in MDMDone
- Vendor risk review6 of 11 vendors assessedIn progress
- Incident response planTabletop scheduled for next weekIn progress
Security and infrastructure experience from the team behind Grey Wing
Zynga
Funding Circle
WalmartSensity Systems
New Relic
RoutableZyngaFunding CircleWalmartSensity Systems
New RelicRoutableSound familiar?
The questions that land on someone's desk who didn't sign up for this.
Five things we hear on almost every first call.
We have no idea if someone is inside our systems right now.
We deploy and manage 24/7 detection and response so your team ships product, not alerts.
We are growing fast and have no security leadership.
Fractional vCISO engagement: strategy, board reporting, vendor risk, and incident planning at a fraction of full-time cost.
Our laptops are not managed, Google Workspace is wide open, and onboarding is manual.
We harden your IT stack with MDM deployment, Workspace security, SSO/MFA rollout, and automated onboarding/offboarding.
We are migrating identity providers and it is a mess.
We have executed IdP migrations across Okta, Entra, JumpCloud, and Google Workspace without disruption.
What happens next
What happens when you reach out.
A lot of teams sit on this for weeks because they don't know what they're walking into. Here's exactly what the first conversation looks like.
01
You book a 30-minute discovery call.
No prep required. Show up and tell us what's going on, a stalled deal, a deadline, or a situation keeping you up at night.
02
We ask the questions, not you.
We walk through your environment, team structure, current tooling, and what's driving the urgency.
03
You get a scoped proposal in 48 hours.
Not a brochure. Clear deliverables, milestones, and a fixed fee before you commit to anything.
04
Work starts within 1–2 weeks.
No 6-week onboarding, no kickoff deck. We start where the risk is.
What we work on
Five areas, one team.
Compliance is one reason clients call. The work usually reaches further into the systems, people, and daily operations that keep a company running.
Cloud Infrastructure
A current-state cloud map with permissions, network paths, infrastructure-as-code changes, and recovery tests.
Explore cloud infrastructure →IT Engineering
An identity group list, managed-device record, and tested access-change workflow for the named systems.
Explore IT engineering →Corporate Networking
A current network diagram and permitted-path change plan for office, remote-access, site-to-site, and cloud links.
Explore corporate networking →Observability & Response
A log source map, tuned alert list, and response steps for a specified incident scenario.
Explore observability →Security & Compliance
A control-owner list, evidence request list, and status report for a named audit or customer review.
Explore security & compliance →Not sure which one you need?
Book a Discovery CallPricing
Fixed scope. Fixed fee. No hourly surprises.
Three ways to work together, depending on where you are today.
Core
$6,500 / month
Teams building their security foundation and preparing for compliance audits.
See what's included →Operational
Custom
Teams scaling quickly with growing customer security demands.
See what's included →Executive
Custom
Teams that need a CISO and a security team without the full-time hire.
See what's included →Build security ownership that keeps pace with growth.
Grey Wing Security helps teams reduce risk, move faster with customer security requests, and maintain operational control as they scale.