Skip to content
sgit/ store
Produced with model assistance. Read the disclosure

store.sgit.ai / who it is for / startups

You are a startup, and diligence is coming

A founder who will be asked these questions by somebody else, and would rather see the answers first. You arrive asking: “What is diligence going to find before it finds it?”

Nothing on the offer list was built pointing this way. Everything below was built for one of the other two buyers, and what is on offer here is the same work run in the opposite direction. That is a real gap and it is stated here rather than papered over with a heading: there is no seventh product behind this page. does not exist yet 11 Sep 2026

What the market looks like here

read, not run Two funded incumbents, a free tier beneath them, and both already publish the answer. Selling a founder a posture document is selling into a commoditised tier — so that is not what is here. The unoccupied offer is the reverse one: the same components, pointed the other way.

What you are actually buying

The investor's review, run early, and run for you. There is no separate product behind that sentence: you buy tier 3 or tier 4 and say which direction you want it run in.

Start at tier 3 — £500 unless you already know you need more than it. Every card below says what arrives and what does not before it says how to pay.

Built for somebody else, and it still answers yours

Tier 3£500

Can you correct it for my situation?

The vault, with the mandate corrected against your situation rather than against a starting assumption, and a written note of what changed.

delivered by a person Done by a named security professional, and done many times: six vaults of this work are published and open to read, including an eleven-step risk-acceptance walk over one evolving register. What you buy at this level is that person's time turned on your situation rather than a template's.

1 to 3 daysfrom your reply, not from your payment

Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.

The payment link has not been issued yetWhat arrives, and what does not →

Tier 4£1,500

Can somebody go through it with my team?

Two half-hour sessions with your team, the behaviour policy built from the interview, and a security professional's review and sign-off.

delivered by a person Two sessions with a named security professional, who reviews the work and signs it off. The method is published and open to read — an agent's grant, its mandate and the delta between them, and eleven linked threat models presented at a conference in Barcelona.

1 to 5 daysfrom your reply, not from your payment

Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.

The payment link has not been issued yetWhat arrives, and what does not →

Tier 2£50

Can I have a vault I hold the keys to?

A vault of your own with the pack in it, a licence carrying your name, and no public key on it.

exists and runs Built, and it runs today. A template shape is built into a vault by one command; yours is that, licensed to you, with the public key off it.

1 to 2 daysfrom your payment

Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.

The payment link has not been issued yetWhat arrives, and what does not →

Attaches to whichever of those you buy

Add-onBy depth band

Can I have the same result in a form the board will read?

The same result as a document, a deck, an infographic, and in a second language.

part exists The generator exists. The check that proves every variant carries the same facts does not, so the guarantee that would make this worth buying is not printed here yet.

With the level it attaches tosame clock

Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.

Priced against the offer it attaches toWhat arrives, and what does not →

What you are not buying

Nothing on this page is a compliance assessment, and no page here claims conformity to any standard. Outputs are model generated and marked as such where they are delivered. Where a finding reaches you it has been reproduced first — recall-optimised agents run at 0.388 precision, so what is sold is triage and never raw findings. measured 10 Sep 2026

You run agents →You are an investor →All six, side by side →

Which agent do you run? → How buying works → Every claim, with its state →