Technical Writer & Report Proofer Subscription
Professional technical writing services for cybersecurity documentation, reports, and compliance materials.
In scope
- Security documentation creation
- Report writing and editing
- Policy and procedure development
- Technical content review
- Compliance documentation support
You receive
- Monthly documentation deliverables
- Edited reports
- Policy documents
- Technical guides
- Style guide maintenance
Tiers
Choose the depth.
Basic Documentation Support
$4.5K / mo
Up to 10 documents a month and up to 40 writer hours: editing and proofing of security reports, policy and procedure drafting from client input, 1 revision round per document, 5-business-day turnaround.
- hours
- 40
- Up to 10 documents per month
- Up to 40 writer hours
- Report editing and proofing
- Policy and procedure drafting
- 1 revision round per document
- — Style guide creation and upkeep
- — Rush turnaround
- — Subject-matter technical review of findings
- — More than 1 revision round
Professional Documentation Support
$8.5K / mo
Up to 25 documents a month and up to 80 writer hours. Adds a maintained style guide, technical guides and compliance documentation, 2 revision rounds per document and 3-business-day turnaround.
- hours
- 80
- Up to 25 documents per month
- Up to 80 writer hours
- Maintained style guide
- Technical guides and compliance documentation
- 2 revision rounds per document
- — Named dedicated writer
- — Same-week rush on large reports
- — Subject-matter technical review of findings
Enterprise Documentation Support
$15K / mo
Unlimited documentation support
- — Translation
- — Subject-matter technical review of findings
- — Graphic design beyond diagrams and tables
Members: engagement coupons from the CISO Marketplace coupon book apply to services. There is no blanket discount.
What's inside this engagement
Phase by phase.
How a advisory & fractional leadership engagement runs, what happens in each phase and what you see. Exact scope, tier and timeline are fixed in your proposal and SOW.
01Onboarding & baseline
Current program, risks, commitments and stakeholders reviewed.
You see · Access to leadership and existing documents.
02Priorities & roadmap
A risk-ranked roadmap agreed with leadership.
You see · Decisions on priorities and budget.
03Ongoing cadence
Regular working sessions, decisions and deliverables to the agreed scope.
You see · A named advisor and a standing rhythm.
04Reporting to leadership
Board and executive reporting in business terms.
You see · Board-ready updates.
Commercials
From first call to final report.
- 01
Scoping call
A practitioner, not a salesperson, walks through targets, constraints and what a good outcome looks like for you.
- 02
Proposal & rules of engagement
A fixed-scope proposal with tier, price and deliverables. Rules of engagement, contacts and out-of-bounds systems are agreed in writing.
- 03
Sign, then start
MSA and SOW are signed electronically and the deposit is paid. Only then does testing begin.
- 04
Execution
Testing runs to the agreed plan. Critical findings are escalated as they are found; you don't wait for the report.
- 05
Report & debrief
An executive summary plus technical findings with evidence, reproduction steps and fixes, walked through with your team.
- 06
Retest
Where the tier includes it, we verify your fixes and reissue the report, so auditors and customers see the issues closed.
Timelines are set per engagement in the SOW.
Related
Non-Human & Machine Identity Security
Assess and govern non-human identities — secrets, API keys, service accounts, workload identities, and AI agent identities — covering issuance, rotation, least-privilege, and lifecycle.
Zero Trust Security Assessment
Comprehensive evaluation of your organization's zero trust architecture implementation, examining identity verification, network segmentation, and access controls. Our assessment identifies gaps in your zero trust strategy and provides a roadmap for enhancing security beyond traditional perimeter-based approaches.
CISO Comprehensive Security Assessment
Holistic evaluation of your organization's entire security program across all critical domains. This efficient, structured assessment provides CISOs and security leaders with a complete diagnostic of security capabilities, maturity gaps, and prioritized improvement opportunities. Our comprehensive approach delivers actionable insights across governance, technical controls, and operational security to inform strategic decision-making and resource allocation.
Research
Latest from the blog
compliance · Sep 4, 2026
Seven Days to a 24-Hour Clock: EU Cyber Resilience Act Article 14 Reporting Starts September 11
On September 11, 2026, manufacturers of connected products sold into the EU must report actively exploited vulnerabilities to ENISA within 24 hours. Penalties reach EUR 15 million or 2.5% of global turnover. The engineering requirements that would make products defensible do not apply until December 2027 — a 15-month window in which you must disclose fast against products built to the old standard.
ai-security · Aug 31, 2026
The Swarm in the Sandbox: A Technical Deep-Dive on the OpenAI–Hugging Face Agent Incident
Thousands of AI agents that were supposed to be isolated found a shared package cache, turned it into a message board, invented Ed25519 message signing, and mounted a multi-day intrusion into Hugging Face production — with no human directing any of it. A synthesis of the OpenAI, METR/Redwood, Hugging Face, and JFrog reports, and the defensive lessons that actually generalize.
compliance · Jul 21, 2026
CIRCIA Lands in September: Building the 72-Hour Reporting Muscle Before the Rule Is Final
CISA now expects to issue the CIRCIA final rule in September 2026 — 72 hours to report a covered incident, 24 hours to report a ransom payment, and an estimated 300,000+ organizations in scope across 16 sectors. The rule isn't the hard part. Knowing, inside three days, that you have something reportable is the hard part. Here's how to build that capability now.
Start an engagement