--- title: "Method: map, test, strengthen · Vasques.tech" description: "Map, Test and Strengthen: how a security project works, how long it takes, what it costs and what you get." url: https://vasques.tech/en/method language: en alternate: https://vasques.tech/metodo.md updated: 2026-10-15 --- # Three steps. No surprises. You know what will happen, when, and what it costs before we start. And your business keeps running throughout. ### Map We talk about how the business sells, serves customers and operates. Then we list which systems, clouds and access exist, and which are critical to revenue. **You get** A visual map of your environment and its most sensitive areas. ### Test With written authorization, we simulate real attacks and review configurations. Tests are scheduled with you so they don't disrupt sales or staff. **You get** A report in business language, plus the technical detail for IT. ### Strengthen We fix what threatens the business most, first. We can make the fixes, support your IT team or vendor, then retest. **You get** Fixes in place, a retest and a plan for the months ahead. ## What a typical project looks like Timelines vary with the size of the environment. This is an example for a mid-sized business with an online store, an ERP and one main cloud. ### Day 1: First conversation 30 minutes to understand the business and its concerns. Free. ### Week 1: Proposal and authorization Scope, timeline and price fixed in writing, together with the testing authorization. ### Weeks 2–3: Mapping and testing Work coordinated with your team, at times that don't get in the way of sales. ### Week 4: Results presentation One meeting with leadership and one with IT. Each in its own language. ### After: Fixes and retest Follow-up on fixes and confirmation that they worked. ## What business owners usually ask **How much does it cost?** It depends on the size of the environment and what makes sense to test. After the first conversation, you get a fixed-price proposal. No hourly billing and no surprises at the end. Many businesses start with a smaller assessment and expand later. **How long does it take?** A typical assessment takes two to four weeks, from first contact to results presentation. Larger or multi-cloud projects can take longer. The timeline is set in the proposal. **Will it stop my sales or systems?** That's not the goal, and we plan so it doesn't happen. More sensitive tests run outside peak hours, with an agreed emergency contact. If something looks risky, we stop and check with you before continuing. **I already have an IT team (or vendor). Does this still make sense?** Yes. We work with them, not instead of them. An outside view finds what people in the day-to-day don't have time to see, and your team gets a detailed technical plan to act on. **Is my data safe with you?** We sign a confidentiality agreement before starting. We access only what's necessary, read-only where possible, and evidence is deleted at the end of the project as agreed. **What happens after the project?** You keep the report, the plan and the retest of fixes. If you'd like, we can set up periodic reviews, for example every six months or before major changes. ## Shall we start with the map? The first conversation is free and already gives you a clear idea of where to start. ## Contact - WhatsApp (preferred): [+55 (51) 99711-7717](https://wa.me/5551997117717?text=Hi%20Felipe%21%20I%20found%20you%20through%20vasques.tech%20and%20would%20like%20to%20talk%20about%20my%20business.) - E-mail: [felipevasquesh@gmail.com](mailto:felipevasquesh@gmail.com) - LinkedIn: [Felipe Vasques Heyman](https://www.linkedin.com/in/felipevasquesh/) - Porto Alegre, RS, Brazil · working remotely across Brazil and abroad