Fractional Security Architect
A senior security architect embedded with your leadership and engineering teams a set number of days per month: design reviews for new agent features, incident support, vendor and model evaluation.
Monthly retainer · no minimum term beyond the first month
Review new features against the controls our architecture reviews design: agent identity and credential lifetime, authorization at the tool-call boundary, memory and config writes, MCP and tool trust, sandboxing and egress.
Named engineers from kickoff stay on your shared Slack channel, and critical findings are reported the same day, not in a final report.
We help you evaluate vendors and models against the threat model written for your system, so the security review happens before the contract does.
We read your code and your infrastructure before we write a recommendation. Findings come with the mechanism, not just the CVSS score, so your engineers understand why a control matters and can extend it without us. We write designs your team can implement, and when you want us to implement them, we do that too. Every engagement ends with something you own: a threat model, a design document, a test suite, or working code.
For Series A to C companies that need the judgment before the headcount.
“We are early and cannot justify a security hire yet.”Start with the architecture review →
Our principals served as security architects on Amazon Marketplace, Payments, and Prime Air, where the review standards they wrote became the baseline for new products.
They built application security and anti-abuse programs at SaaS companies like Smartsheet, including detection systems that held up under the industry-wide password-spray campaigns of 2024 and 2025, and designed the agentic identity and authorization model for a mature multi-tenant platform.
In 2019 Foretheta ran the penetration test of Stacks' public web properties, working directly with its Head of Engineering, reporting twice a week, and closing with a final report and wrap-up review inside a three-week window. We have provided security code review to teams building on the Stacks Clarity platform since.
20+
years of security engineering across Amazon, Microsoft, Smartsheet, and telecom
1,000+
engineers trained and mentored on secure-by-design practice
Procurement
security programs that cleared enterprise procurement and opened upmarket sales
Pre-launch
penetration tests delivered on deadline for public technology companies
Tell us what your agents do, what they can reach, and what worries you. We will tell you where we would look first and whether a review makes sense.
The fractional architect is a monthly retainer with no minimum term beyond the first month. Email security@foretheta.com.