Three engagements. Fixed scope. Rollback plans written first.

Each one is a defined deliverable with a written runbook. The shape — audit, migration, or setup — depends on what you need, not on how much time we can sell you. If none of the three fit cleanly, the consulting page covers custom engagements.

• One week

  Security architecture review

  Read-only review of your FortiGate, Entra ID, and Intune posture. PDF report with the top 5 fixes prioritized by effort and impact.

  • 1-week engagement, read-only access
  • Executive summary + top 5 prioritized fixes + evidence appendix
  • Walkthrough call + 30-day and 60-day follow-up emails
  • Bilingual deliverable · EN or ES
  Read the full scope →
• Two weeks

  FortiGate production engagement

  Two weeks of senior FortiGate work. Hardening, SD-WAN, SAML + Entra, FortiOS upgrade, FortiSwitch integration, or VPN modernization — scope picked on the assessment call.

  • 2-week sprint, FortiOS 7.4 / 7.6 production
  • Pre-engagement audit + change design + lab rehearsal
  • Execution window with us on the bridge (after-hours if cutover)
  • One week of post-engagement support + runbook + config templates
  Read the full scope →
• 8–10 hours

  UniFi small-office setup

  Cloud Gateway, switching, wireless, VLAN segmentation, guest WiFi, optional IPsec. Bilingual handoff documentation included.

  • ≤25 users, single site, remote setup
  • VLAN design + guest WiFi + optional IPsec site-to-site
  • Bilingual handoff doc + 10-incident runbook
  • Backup/restore tested before handoff
  Read the full scope →

How pricing works

Each engagement is fixed-scope and fixed-fee. The number depends on your environment — single FortiGate vs HA cluster, 15 users vs 50, single site vs branch + HQ. Pricing is communicated on the assessment call after we confirm scope, not on the public page.

Quotes land within one business day of the call. If we’re not a fit, we’ll say so on the call rather than send you something we’d be embarrassed to deliver.

Something custom?

If the work doesn’t slot into one of these three — multi-firewall migrations, Cisco FTD/FMC engagements, Entra-only identity rollouts, monitoring stack builds, AI-assisted operations — the consulting page covers spot consulting, project work, and advisory retainers.

Ready to scope it? Free 30-min assessment ↑ or email cflores@packetloss.tech directly.