misc-notes

Misc Notes about Solanasis

Our mission is to save companies from the pain of security incidents, failed disaster recovery and operational headaches.

We are passionate about being the biz partner that is helping your org uplevel consistently. Although we are focused on only a few key areas initially, our vision is to grow into a trusted hands-on growth firm that can help our partners reach new heights by getting all of their systems and processes dialed in.

We focus on the 80/20 -

We are focused on setting up recurring subscriptions for ongoing maintenance to keep this clean and clear.

Personal growth for all of our team members.

We ensures the company doesn’t go out of business because of a hack, a lawsuit, or a failed audit.

Focus

Focus Areas

• Security Assessment

• Disaster Recovery Verification

• Data Migrations

• CRM Setup

• Systems Integration

• Responsible AI Implementation

• fractional CISO” (Chief Information Security Officer) for SMBs

• Focusing on Enterprise and Nonprofits - Fractional CTO and COO type of roles

• Streamlining Operations

  • Integrating AI and Synching up their systems properly

• Data Migrations

  • using a GUI tool that makes it easier for them to see the relationships and mappings
  • and AI to analyze their data between their two DBs

• Ensuring their systems are production ready

• negotiating on their behalf with their vendors

• CRM Setup and Consulting

• Security Assessments and Pen-testing (later)

  • if we don’t find a single issue then we will refund their payment
  • Setting up the right automated scans
  • Helping them interpret the automated scan results
  • Staff are the biggest security risk
  • Providing simple playbooks/guidance on how to
    • prevent social hacking

• Backup and Recovery

  • if you don’t have redundant backups - then you can’t really count on them

• Helping Vibe Coders bring enterprise-level functionality/architecture into their apps

  • E2E testing

Our Difference

• Hands-on
  • we roll up our sleeves and get the work done
  • we prove what actually needs to be done
• An amazing network of specialists to pull from based on your needs and budget
• AI is a junior analyst. You need a senior security engineer who knows how to use AI effectively.
• Full Refund if we can’t find any security vulnerabilities, and all of the security and recovery best practices are fully in place

Backup and Recovery

• Verify that your backups actually can be recovered
• Ensure that your backup strategy is sufficient
• Your IT might claim that everything is setup properly but we actually verify it
  • so you can sleep soundly knowing that you had a second pair of eyes
• We run the full pentesting suite but safely
  • and we do this during off hours so no disruptions

Deliverables

• Report Card and Fix-it Plan

Maybe

• Scan the google drive for any files containing credentials

Security

• Are staff using proper password managers with distinct passwords for each site?
• We don’t do pentesting ourselves but have a partner that does

Our Code Security Review Tool

• We’ve built on our tool which does Multi-Model security scans of ALL of your codebase
  • Claude is amazing yet incredibly lazy - it won’t check each of your codebase, even if you keep telling it

Limitations/NOT

NOT penetration testing — You’re not trying to hack into their systems. You’re reviewing configurations, policies, and settings. Pen testing requires specialized certifications, tools, and insurance. That’s a different (and more expensive) service you can add later.

NOT ongoing IT management — You’re doing a point-in-time assessment with recommendations. You’re not becoming their IT department (unless they want to pay you monthly for that too).

NOT a guarantee of security — No assessment can guarantee a company won’t be breached. You’re identifying known gaps and providing a roadmap to fix them.

---

Competitor Quotes

From Ziah Orion’s Deep Gem

Our end-to-end approach includes: **Scope (AI Blueprinting & Process Mining): We work closely with clients to map and optimize their operations before automation. **Build (Custom Automation & SIEM Integration): We develop and unify AI tools under our proprietary “System Information & Enterprise Model” (SIEM), ensuring a cohesive brand knowledge layer for all future automations. **Train (Team Adoption & Agent Swarms): We guide teams to confidently use new AI workflows, culminating in specialized “AI employees” that handle key tasks. I’m passionate about preserving each client’s unique IP while delivering tangible ROI. My role involves strategic direction, forging innovative partnerships, and continually evolving our AI solutions to meet the complex needs of businesses aiming to grow from eight figures to nine. By serving as a fractional Chief AI Officer (CAIO) for our clients, we ensure they remain at the forefront of AI-driven innovation—without compromising what makes them one-of-a-kind.