Scope-first engagements

Understand the work before you approve a fee.

Every engagement begins with a no-cost fit review. DarkWater then provides a written scope describing the objective, approved subjects, deliverables, timing, limitations, and fee before any paid work begins.

Request a Cyber Scope Ask a Question

One-time assessment

External Exposure Baseline

Best for an organization that wants a documented outside-in starting point.

Approved company domains, brands, and identities
Human-reviewed external exposure findings
Confidence, limitations, and source context
Secure report with prioritized next actions

Discuss a Baseline

Ongoing monitoring

Exposure Watch

Best for organizations that want analyst-reviewed change detection after a baseline.

Approved domains, identities, and brands
Priority escalation criteria defined in writing
Meaningful changes reviewed by an analyst
Reporting cadence matched to the organization

Discuss Monitoring

Decision support

Third-Party Exposure Review

Best for a vendor, partner, law firm, service provider, or acquisition decision.

One company or a defined portfolio
Ransomware, breach, credential, and infrastructure context
Filename-level references treated as unverified leads
Executive questions and validation priorities

Discuss a Third Party

Focused advisory

Threat Intelligence & Triage

Best for a specific ransomware claim, external warning, hunt question, or leadership brief.

Defined intelligence question
Source and confidence assessment
Practical validation or hunt guidance
Leadership-ready findings when requested

Discuss the Question

How the fee is determined

The quote reflects the approved subjects, number of domains or organizations, source categories, reporting depth, urgency, secure-delivery requirements, and whether the work is one-time or recurring. There is no charge for submitting the public inquiry, and no work or recurring billing begins until the client approves the written scope and terms.