Retainer, or a one-off identity build
Brand management
- Identity, voice and visual system
- Website build on that system
- Ongoing management so it stays coherent as you grow
Services
Stop losing what a fixed price and a paper trail would have saved.
Whichever buyer you are, the outcome is the same: you get what you were promised, at the price you were quoted, with evidence you can check yourself. For small businesses that means brand, sites, apps and stores that work — plus the security around them. For fintechs, exchanges and law firms it means financial-crime, tracing and forensic work that survives audit.
Both are the same job for two different buyers: work out what is actually true, build it so it holds, and leave evidence that stands up afterwards. You can check the craft yourself before you contact me.
Build & protect · for small businesses
Stop paying for a site nobody can secure
Most small businesses hire a designer who cannot secure what they built, then hire a security consultant who will not take a client their size — or skip security altogether and hope. I do both, so what gets built does not sit there exposed. Same evidence discipline as the forensic work below is the proof it holds up.
Fixed-scope hardening, then optional monitoring
Bespoke cybersecurity for small businesses
- Assessment of what you actually have exposed
- Practical hardening: accounts, email, backups, devices, payments
- An incident plan you could follow at 2am
- Staff briefing on the fraud that actually targets small firms
This is the rare one. Most agencies build you a site and leave security to chance; most security firms will not talk to a business your size.
Scoped build, milestone-billed
App development
- Web and mobile-web application builds
- Payments, accounts and data handling done properly
- Handover you own — no hostage code, no lock-in
Scoped build, optional ongoing support
E-commerce
- Storefront built to sell, not just to look correct
- Stripe checkout wired end to end
- Analytics that answer "is this working" honestly
Payments run on Stripe, and that is a cost decision
Anything I build that takes money takes it through Stripe. Stripe's per-transaction pricing is published, flat, and generally lower than the bundled rates small merchants get offered elsewhere — and there is no long contract to leave. On a storefront doing real volume the difference between processors is not rounding; it is margin you keep.
Check the current published rates yourself before you decide — I will quote you against the fees you are paying now, not against a number I made up.
What I will not tell you
I will not promise you a revenue figure. Nobody honest can predict what a site will earn before it exists, and any agency that quotes you one is selling you a feeling. What I will do is build something that takes payment properly, loads fast, and does not fall over — and show you the numbers it actually produces once it is live.
Forensics & AML · for fintechs, exchanges, law firms
Time-based engagements
Quoted as a day rate or a scoped block of days. A deposit is taken on anything longer than a single day, and the scope is agreed in writing before work starts.
Day rate, or a scoped block of days
AML & financial-crime analysis
- Typology work and alert review
- KYC / CDD file review and quality assessment
- Sanctions-screening review and tuning
- SAR-grade investigation and written reporting
Typically for: Fintechs · crypto exchanges and VASPs · MSBs · community banks and credit unions · RegTech vendors · consultancies with overflow
Usually quoted per case
Blockchain tracing & illicit-flow mapping
- Wallet clustering and counterparty attribution
- Flow-of-funds mapping for a defined set of addresses
- Written narrative suitable for regulator or law-enforcement reporting
Typically for: Exchanges and VASPs · law firms · fraud-recovery counsel · investigators
Per device, tiered by difficulty
Mobile forensic recovery & disk imaging
- Phone data recovery
- Disk imaging and repair
- Documented custody handling from the physical media up
Typically for: Law firms · investigators · small businesses · individuals
Per report, or a day rate
Threat intelligence & OSINT research
- Targeted OSINT collection on a defined question
- Written intelligence product with sourcing
Typically for: Small security teams · journalists · NGOs
Half-day or full-day
Training & briefings
- Fraud and laundering typologies for non-specialists
- Crypto tracing fundamentals
- AI-enabled phishing, sextortion and ransomware awareness
Typically for: Credit unions · community organisations · small compliance teams
Fixed scope, fixed price, fixed date
Assessments
Each one has a written boundary. What is excluded is stated as clearly as what is included — that is what makes a fixed price honest for both sides.
Fixed scope
AML Program Health Check
Time-boxed review of typology coverage, screening configuration and KYC/CDD file quality.
You receive: Written findings plus a prioritised remediation list.
Not included: Not a regulatory examination, and not a legal opinion.
Fixed scope
Crypto Exposure Assessment
Tracing across a defined, agreed set of addresses or counterparties.
You receive: Risk memo with a flow map and an attribution confidence statement.
Not included: Not asset recovery, and not a guarantee of attribution.
Fixed scope
Evidence Integrity Review
Assessment of whether YOUR investigative outputs would survive audit or court: chain of custody, provenance, reproducibility.
You receive: Gap report against a written custody standard, with remediation steps.
Not included: A review of your systems — not a demonstration of mine, and not a software sale.
Fixed scope
Sanctions & Typology Training Package
Fixed curriculum, delivered live, with materials your team keeps.
You receive: Half-day session plus written materials.
Not included: Not a certification, and not a substitute for one.
Fixed scope
Device Recovery Tiers
Published per-device tiers with a stated turnaround.
You receive: Recovered data plus a custody record.
Not included: No recovery is guaranteed; failed attempts are quoted differently.
Why there are no prices on this page yet
Because I would rather quote you a real number than publish a guessed one. Pricing is set per engagement against scope and turnaround, and I will give you a firm figure in writing before anything starts. If you want a ballpark before that, ask — I will give you one.
How it works
Four steps, no surprises
01
Enquiry
Tell me the problem in a paragraph. I will say plainly whether it is something I can do.
02
Scoping call
Free, 30 minutes. We agree what is in scope, what is out, and what "done" looks like.
03
Written scope & quote
Fixed price or day rate, a delivery date, and the exclusions in writing. Deposit on engagements over a day.
04
Delivery
The agreed deliverable, plus a walkthrough. Your data is returned or destroyed on your instruction.
Confidentiality and scope of practice
Client identities and client data are never published, referenced or used as samples. I am not an attorney and do not provide legal advice; where an engagement touches a legal question I will say so and recommend you take it to counsel. I do not accept work I cannot do well.
Book a consult
Custom solutions start with one paragraph.
Not a template fit? Tell me what the problem is, roughly when you need it, and whether there is a deadline driving it. That is enough for me to tell you whether I am the right person — and to say so if I am not. I reply personally, usually same day.
amandarosemorton@proton.me