Trust-boundary map
S
Fixed-scope security architecture assessment
Security Architecture Risk Sprint
Find trust-boundary, isolation, and failure-path risks before they become incidents or enterprise-sales blockers.
This is currently a founding-client rate for the first three engagements.
$1,500 fixed$750 deposit to schedule$750 final payment on deliveryDelivery5 business days after complete intake materials are received
ScopeOne selected system, workload, or customer-facing product
MaterialsUp to five customer-supplied artifacts
One system/workload per Sprint. For larger or unusual scopes, contact NightFall before submitting the deposit.
The $750 payment reserves scheduling and is credited toward the $1,500 engagement. Final payment will be requested directly after delivery. Checkout is handled by PayPal Business.
Who it is for
Small teams · Serious security decisions
Built for teams approaching a consequential architecture decision.
The Sprint is designed for 2–50 person SaaS, AI, fintech, health-tech, infrastructure, and technology teams handling sensitive data or preparing for enterprise security scrutiny.
Controlled intake
Up to five customer-supplied artifacts
Enough evidence to review the architecture—without asking for production credentials.
Sanitized diagrams and controlled excerpts are acceptable, and production credentials are not required. NightFall reviews the materials that best explain the selected system and its authority, data, integration, isolation, administration, and recovery paths.
- Architecture diagrams and system context
- Data-flow and trust-boundary diagrams
- IAM role, policy, and identity summaries
- Infrastructure-as-code excerpts
- Operating, recovery, and administrative policies
- Similar controlled technical materials relevant to the selected scope
What you receive
Evidence translated into decisions
A prioritized architecture-risk package your team can act on.
Abuse-path analysis
Review of identities, data flows, integrations, administrative paths, isolation assumptions, and recovery assumptions
Up to 15 prioritized security/architecture findings
Evidence, impact, likelihood, and recommended owner for findings where appropriate
Evidence-backed 30-day remediation sequence
Guidance on what should be fixed first and what can wait
60-minute results readout
One written follow-up round
Assessment boundaries
Clear scope protects both sides
This is an architecture assessment. It is not:
- a penetration test
- a compliance certification
- an audit attestation
- a legal opinion
- a guarantee that every vulnerability will be discovered
- authorization to access production systems without explicit customer permission
Optional follow-ons
Available after scope review
Go deeper only where the evidence justifies it.
AWS Isolation Deep Dive — +$1,500
A focused review of AWS account, network, identity, workload, and recovery isolation boundaries.Remediation Architecture Blueprint — +$2,500
A more detailed target-state architecture for addressing the Sprint’s highest-priority findings.30-Day Advisory Support — +$2,000
Written implementation guidance and scheduled technical review throughout the first remediation month.Optional services are scoped separately and are not required to purchase the Security Architecture Risk Sprint.
Why NightFall
Independent, bounded, implementation-aware
Architecture review grounded in how systems actually fail.
NightFall Technologies LLC is an independent U.S. technology R&D and security-engineering company. Reviews use evidence-first threat modeling, explicit trust-boundary analysis, fail-closed reasoning, and implementation-aware remediation.
Start the engagement
Prospect → scope → deposit → intake → delivery
Reserve the Sprint, then complete a controlled intake.
- 01
Confirm that one system or workload fits the fixed scope.
- 02
Submit the $750 scheduling deposit through PayPal Business.
- 03
NightFall contacts you using the payment contact information to begin intake.
- 04
The five-business-day delivery window begins after complete intake materials are received.
One system/workload per Sprint. For larger or unusual scopes, contact NightFall before submitting the deposit.