AWS security consulting, at public prices
I review your architecture, tell you what is exposed, and tell you what I could not verify.
Twenty minutes, free, no obligation.
Secure Layer is a self-serve tool: you import your architecture and get a scored verdict, no sales call. This page is the human lane. When you want an expert on the work itself, I do it personally, at three fixed offers. My name is Sabri Eddir. Ten years in security, 7+ of them at AWS Security.
Expert session
You have one question and want an experienced pair of eyes on it this week.
€200excl. VAT · 60 minutes
- Live, one hour, paid when you book.
- Bring your architecture, your Secure Layer score, or a decision you have to make.
- You leave with clear next steps. I send my written notes the same day.
Paid upfront by card, via Stripe. It keeps the calendar free of no-shows.
Architecture review
You have to show a client, an auditor, an insurer, or your board that your AWS is under control.
from€4,250excl. VAT · five days of work
- Fixed quote before we start. The price does not move after.
- I start from your real architecture, not a generic checklist. Your accounts, your templates, your critical flows.
- You get a written report that carries my name, and a remediation plan ranked by business impact.
Import your architecture in Secure Layer first, free. I quote from what it shows.
Embedded security engineering
You need hands in the codebase, not a report.
€850excl. VAT · per day, remote
- Access and identity design (IAM), and threat modeling before a launch.
- Security controls in your CI/CD pipelines, and preparation for an audit or a certification.
- I work in your repos and your pipelines, with your team.
Invoiced, with a purchase order if you need one.
How an engagement starts
01
Import your architecture
Free, in the studio, on your own. The import is the scoping step.
02
A 20-minute call
We look at what the import shows and pick the offer that fits, or none.
03
Fixed quote
Within one business day. Work starts once you accept it.
Start the import now, free. It is the same studio the product runs on.
The prices, out loud
Why the prices are public
Security consulting is usually quoted after two calls with a salesperson. I publish prices for the same reason the product shows you its rules: you should know the cost before you give anyone your time. Prices exclude VAT. The session is paid by card. Everything else is invoiced.
Who does the work
I do. Ten years in security, 7+ of them at AWS Security. On-call for 200+ critical incidents. At an online gaming operator regulated by the French gambling authority, I was the security referent for 60+ AWS projects.
My reports tell you what I could not verify. A report that asserts everything with the same confidence is useless to you. You need to know where to look, not a wall of green lights.
Sabri on LinkedInThe boundaries, out loud
Straight answers before you book
- Is this a penetration test?
- No. It is a configuration and architecture review, at a point in time, based on the infrastructure as code (IaC) you provide. If your situation calls for a penetration test, I will tell you, and help you scope one.
- Do you need access to my AWS account?
- Not for the review. You import your CloudFormation or Terraform yourself, and it stays your action. For embedded work, your team grants me what it would grant any contractor.
- What if we have no infrastructure as code?
- The review needs it. Book the session instead. We will look at what you have and decide what to do first.
- How is this different from the product?
- The product computes verdicts from public AWS security rules. I add what rules cannot know: your business context, your team, your history. The product also does not produce a signed report. The review does. It ends with a document that carries my name.
- Can my company pay by invoice?
- Yes. The session is paid by card when you book. Reviews and daily missions start from a quote you accept, then are invoiced. If your company works with purchase orders, I reference yours on the invoice.
Twenty minutes, free, no obligation
We look at your situation and I tell you which offer fits, or that none does.
Prefer writing? sabri@securelayer.dev