The Critical-Conduit Assessment covers one conduit and takes a few weeks, at a fixed price set after scope confirmation. It is off-path throughout — we never transmit on your network, and the tap/SPAN change is made by your team under your change control. No device inserted, no writes, no change to any validated system. You walk away with one clear deliverable your engineering team owns — countersigned by your engineer and cryptographically signed by us. A second conduit is scoped and priced separately.
A conduit is the link between an operator screen and the controller that runs a physical thing. One conduit is the unit of sale: we take a single, high-consequence one and work it end to end. If you want a second conduit covered, it is scoped and priced separately — never bundled in as an assumption.
Six steps on the one conduit in scope. Facilities and clinical/plant engineering are in the room from day one — they own the equipment, and their sign-off is what turns findings into decisions.
Four documents covering the one conduit in scope.
Wardhelm is a small, senior practice, not a bench of rotating consultants. Yechiel is the engineer who scopes the conduit, runs the passive capture, does the analysis, and sits in the findings workshop — the same person from the first call to the final report. You always know who is on your site.