HSTL - Almsec Security

An IT-Security consulting agency
with a twist

IT-Security subscriptions that scales with your business

SEE PLANS

Get security at the speed of a startup, not the pace of a time-billing consultant

Consulting as you know it is out the door. Results as you want it just arrived.

Step 1 - Subscribe

Subscribe to a plan & request as many tasks as you’d like on your new Trello board

Step 2 - Paperwork

If needed, we sign NDA’s and you set up accounts for tools/portals that we need

Step 3 - Task Completion

Receive the results of your requests within 12/24 hours on average, Monday to Friday.

IT'S "YOU'LL NEVER GO BACK" BETTER

Scope of work

Investigating Incidents

Investigating EDR alerts

Creating/managing Sentinel playbooks

External Vulnerability Scanning

External Wordpress Security Assessment

External "HSTL SCAN" assesment

Creating Custom Detection in EDR

Log integration into Sentinel

SOC Response Test (test your SOC alertness)

Analyzing Phishing Emails

Threat Intel Lookups

Reviewing configs/setups

Threat hunting for a specific scenario

Threat hunting where we decide the scenario

Assessing new vulnerabilities (act now or not)

Attending governance meetings

Attending sales presentation

General Security Advisory

GET HELP (HELP CENTER)

Frequently asked questions.

Why wouldn't I just hire a full-time security expert?

Thinking of hiring full-time? Let’s do some quick math:

💸 The Cost Game: A senior-level security guru in the US? Easily a cool $120k annually, and that’s before the benefits. Your bank account feeling that sting?

🔍 The Talent Hunt: Ready to dive into the talent pool? Spoiler: It’s more of a puddle. Finding a senior security whiz willing to commit full-time? Good luck with that unicorn hunt.

⏳ The Idle Hours: Think they’ll be burning the midnight oil non-stop? Think again. There’ll be days with nada for them to do. Yet, cha-ching, you’re still paying.

🐱 The Productivity Pit: How much company time’s being cashed in for those ‘strategic’ meetings, coffee breaks, or deep dives into the latest TikTok trends and cat meme marathons? Yep, that’s on your dime.

🔄 The Flex Advantage: Here’s the real MVP move – our monthly plan. Need a break? Hit pause. Got work? Hit play. Only pay when there’s actual work on the table. Game-changer, right?

Then why wouldn't I get full-time security consultant instead?

💰 The Wallet Hit: Full-time senior security pros? Expect your expenses to shoot through the roof. With Almsec HSTL, you’re looking at dropping only 15-25% of what you’d fork over for a full-timer, while still getting 90% of the output.

🕰 The Time Sink: Think you can keep them hustling 24/7? Reality check: You’ll end up paying for hours they’re just chilling. And get this, you’re likely chained to a 6-12 month contract. Fun times.

📱 The Distractions: Ever wondered how much productivity gets lost to ‘essential’ meetings, extra-long coffee breaks, and the black hole of TikTok spirals and cat memes? Yep. You’re paying for that too.”

Is there a limit to how many requests I can have?

Once subscribed, you’re able to add as many requests to your queue as you’d like, and they will be delivered one by one.

How fast will I receive results on my requests?

On average, most requests are completed within a day or less, with some tasks being a lot faster. However, more complex requests will take longer, threat hunting is a good example of that. The average time of completion for previous tasks has been around 24 hours (or 12 hours for Platinum subscription)

How does the pause feature work?

We understand you may not have enough security requests to fill up the entire month. Perhaps you only have one or two requests at the moment. That’s where pausing your subscription comes in handy.

Billing cycles are based on 31 day period. Let’s say you sign up and use the service for 21 days, and then decide to pause your subscription. This means that the billing cycle will be paused and you’ll have 10 days of service remaining to be used anytime in the future.

How do I create a request?

Almsec HSTL offers a ton of flexibility in how you request tasks using Trello. Some common ways clients create requests in Trello is writing the full task that needs to be completed, or a summary and a reference to another resource like Jira/Incident number/EDR alert/phishing email etc.

In other words, if it can be linked to or shared in Trello, it’s all good.

Is there any area of work you don't cover?

Yes. At the moment we don’t cover Penetration Testing / Forensics / Red Teaming / Reverse Engineering. There could also be work we forgot to include in the scope of work, so if you have any questions just let us know, it will most likely be possible to arrange.

What if I only have a single request?

That’s fine. You can pause your subscription when finished and return when you have additional design needs.

🛑 Hit pause post-task.
▶️ Resume when you’re ready for round two.

Why let your subscription collect dust? Keep it fresh, and use it when you truly need it.

How do you ensure segregation between companies?

Good question! We have unique machines for each customer, meaning that the tasks we work on for you will be on a dedicated virtual machine just for you.

An IT-Security consulting agency with a twist