Harden Google Cloud. Be ready to respond.

GCP security engineering & incident response for startups and scale‑ups. We build the controls, tune the signals, and help you respond—calmly.

Start with a GCP Baseline Browse services
We integrate with Vanta/Drata—Lexcia implements and validates the actual GCP controls.
GCP Engineering
Org, IAM, network, data
IR & Readiness
SCC, playbooks, drills
Continuous Checks
Drift & attack surface
Evidence Ready
SOC2/ISO mapped

Productised services

GCP Baseline

Org policies, logging/KMS, IAM cleanup, 12‑week roadmap.

From £4,950

IAM Lockdown

Service account hygiene, WIF, least privilege, break‑glass.

£2,750

Network Guard

Private access, egress control, VPC‑SC fit.

£3,500–£6,500

Data Shield

Secrets, CMEK, rotation & DLP basics.

£2,200

BuildSafe

Artifact signing, OIDC to CI, deploy gates.

£2,950

SCC Watch

Setup + monthly tuning & review.

£1,950 then £650/mo

IR Ready

Runbook, comms tree & 1 tabletop.

£1,950

RedCheck

Continuous “pentest‑lite” with triage.

From £1,200/mo

IR Retainer

Reserved hours, paging, forensics.

From £950/mo

Playbooks & proofs

Download our GCP security checklist and read the pillars we use on real projects.

Open playbooks