CONTACT

Tell us what you're building or what's exposed.

A short brief is enough for a first reply. You will get a named person, a clear next step and a written answer within one business day — not a sequence of automated emails.

Reply within 1 business day 30-minute call NDA-ready

The brief

Start with the problem.

Eight fields, one paragraph and a consent box. Do not clean it up for us — the messy version is more useful on the first call.

A range is enough. It changes scope and sequencing, not whether we reply.
A staging link or a repository URL is fine. Do not paste credentials, customer data or anything under NDA.
Kept for 24 months. You can ask for deletion at any time.
Process

What happens next

Three steps, each with a date on it.

01

We reply within one business day. A person reads the brief and confirms whether we can help.

02

A 30-minute call with the person who will do the work. No sales engineer and no discovery workshop.

03

A written proposal within 48 hours, if it is a fit. Fixed scope, price, dates and what is excluded.


General

xcsfx@icloud.com

Telegram · @xcsdx

Support window 09:00–18:00 GMT+8, Monday to Friday. Calls by appointment, including UK mornings and US East early mornings.

The first reply

What we will ask, in this order.

You can answer them in a paragraph. If one is still open, that is useful information too — it usually means scope is not ready.

  • What you are trying to fix. The symptom you can name, not the tool you think you need.
  • How many assets. Domains, apps, repositories and cloud accounts, and who owns each one.
  • When you need it. A launch date, an audit, a client deadline or a board meeting.
  • Budget range. Enough to say whether a review, a build or a care plan fits.
  • Who decides. The person who signs, and the person who will live with the fix.
See the fixed-scope assessment

When we say no

Four kinds of work we decline.

We say no to work that needs 24/7 on-call coverage, compliance certification, a fixed price for undefined scope, or testing without written authorization. We are not a 24/7 SOC, and we will not pretend to be one.

If that is what you need, we will tell you in the first reply and name the kind of vendor who does it properly. A fast no is cheaper for both of us than a proposal we cannot deliver.

Prices are published. So are the access terms.

You should not have to book a call to see a number, or take our word for how credentials are handled. Both are written down.

Response

What one business day means here.

Support hours are 09:00–18:00 GMT+8, Monday to Friday. A brief sent on Friday evening GMT+8 is read on Monday morning, not over the weekend.

  • Within one business day. A written reply with a call slot, a question we still need answered, or a clear reason we are not a fit.
  • Within 48 hours of the call. A proposal with scope, price, dates and exclusions — or a written no with a suggestion for where else to look.
  • Security reports. Send those to xcsfx@icloud.com rather than through this form. We acknowledge them within 2 business days.
  • No follow-up sequence. If you do not reply, we assume the timing is wrong and leave the decision with you.

If your timeline is this week, say so in the brief. We will tell you whether the calendar allows it.