Monthly Website Maintenance Retainer
Ongoing updates, backups, and monitoring for one predictable monthly fee.
Security · Websites · IT
Hands-on security, website, and IT help for small businesses and individuals. Penetration testing and security assessments, compliance guidance, websites that are built and kept secure, and practical IT support, backed by more than 15 years in the trenches of IT.
Services
Security, websites, and IT under one roof. Pick a category to see what’s included.
Authorized, scoped work only: every test starts with written permission and an agreed scope.
Find exploitable flaws in your web app before attackers do, with prioritized fixes.
A clear picture of weak points across your network and exposed services, ranked by risk.
Confirm your APIs enforce auth, access control, and input handling the way they should.
Catch risky permissions, exposed resources, and misconfigurations in your cloud accounts.
Find the paths an attacker could use to take over your domain, and how to close them.
Know how your app stores data, talks to your backend, and holds up to tampering.
See how well you could prevent, withstand, and recover from a ransomware attack.
Calm, experienced guidance to contain an incident, preserve evidence, and recover.
An expert check that your systems are designed to limit damage when something goes wrong.
Map out who might attack you, how, and which defenses matter most.
Spot security bugs in your code and get practical guidance for writing safer code.
A realistic, agreed-scope test of how well your people and defenses detect and respond.
Responsible, in-scope research that uncovers real vulnerabilities, reported clearly.
Set up a simple, safe way for researchers to report issues to you, and handle reports well.
Practical guidance that turns frameworks and risk into a plan you can follow.
Understand your biggest security risks and where to spend first.
See exactly where you stand against a framework and what is left to do.
Senior security leadership on call, without a full-time hire.
A realistic, prioritized security roadmap that fits your budget and goals.
Clear, usable security policies your team can actually follow.
Know whether the vendors you rely on handle your data safely.
Plain-language training that helps your team spot phishing and build safe habits.
Fast, secure websites that look sharp and stay that way.
A professional landing page, business site, or portfolio built to fit your brand.
Updates, backups, and monitoring handled, so your site stays healthy and online.
Refresh an outdated site into a modern, mobile-friendly one.
Your site set up properly on the platform that suits you, ready to manage yourself.
A store that is easy to shop, easy to run, and set up to sell.
Security headers, WAF basics, and patching to keep your site from being an easy target.
A faster site that keeps visitors around and scores well with search engines.
Solid technical SEO and ongoing tuning so customers can find you.
Focused pages built to convert visitors for a launch or campaign.
Move to a new platform or host without losing content, rankings, or uptime.
Enterprise-grade know-how, sized for small businesses.
Straight answers on what tech you need, what you don't, and how to set it up right.
Get problems diagnosed and fixed quickly, without waiting for an on-site visit.
Servers configured, patched, and maintained so they run reliably and securely.
Cloud environments set up cleanly and kept secure, organized, and cost-aware.
A tested plan to get your data and systems back when something fails.
A network that is reliable, segmented sensibly, and locked down.
Stop spoofing of your domain and get your emails delivered to the inbox.
I build workflows that connect your apps and cut repetitive manual tasks for your team.
Clear runbooks, SOPs, and reports your team can rely on.
Retainers & Packages
Predictable scope, predictable cost. Ask for a quote on any package.
Ongoing updates, backups, and monitoring for one predictable monthly fee.
A fixed-scope security assessment with a clear, prioritized report.
Design, build, basic security, and SEO in one package, ready to go live.
Regular scheduled testing so new weaknesses are caught early.
Regular oversight of your security posture with clear periodic reports.
A gap analysis plus a remediation roadmap to get you audit-ready.
Help scoping, launching, and triaging a bug bounty program.
About the firm
ForgeVanguard Cyber Consulting provides practical cybersecurity and technical services for businesses and individuals. The firm specializes in bug bounty research, penetration testing, vulnerability assessments, and compliance advisory, and also offers website design, development, maintenance, and broader IT consulting.
Every engagement is led by hands-on expertise, supported by streamlined processes that keep work efficient and consistent, with clear findings, actionable recommendations, and direct human oversight throughout.
About Steve
I help organizations strengthen their security through practical penetration testing, vulnerability research, and compliance-focused assessments, drawing on active experience across major bug bounty platforms. Through ForgeVanguard Cyber Consulting I also deliver website design, development, and maintenance alongside broader IT support. My work combines direct expertise with efficient workflows so clients receive clear, actionable results under consistent human review and control.
I'm Steve Drew, founder of ForgeVanguard, with more than 15 years in IT. I started out repairing and building systems and worked my way up to Senior System Administrator on a Microsoft Azure hybrid enterprise environment protected by Defender XDR, with a focus on digital forensics and incident response (DFIR) and bug bounty work.
Certifications: CompTIA Security+, CompTIA A+, ITIL 4.
Why work with me
Fifteen-plus years of building, fixing, and administering real systems, not just theory.
You get clear explanations and prioritized next steps you can actually act on.
Help scaled to small businesses and individuals, without the enterprise price tag or upsell.
Your data, your incidents, and your findings stay confidential.
Offensive testing skills are used to make your defenses better, always with permission and a clear scope.
You work with me directly, from first call to final report.
Contact
Tell me a little about what you need. If you're dealing with an active incident, say so in your message and I'll prioritize it.
Your details are only used to reply to you. See the privacy notice.