Within 24–48h with a clear scope.
Hardening, reviews, SAST/DAST, WAF/CDN, backups.
SLIs/SLOs, monitoring, runbooks, staged deploys.
WhatsApp/email + weekly reports. Avg response <1h.
Yes. UK jurisdiction by default.
