Cybersecurity consultancy
Emberwick Crossing Security · Cybersecurity consultancy · Seattle, WA
Anouk Holmqvist leads engagements at Emberwick Crossing Security, a cybersecurity consultancy in Seattle, and uses this to follow every assessment from the client's request through the signed rules of engagement and the testing to the delivered report and the payment.
Software and ITWork ordersDocuments and e-sign4 tables · 6 views · 2 forms · 1 dimension set · 1 dashboard · 1 digest · 2 documents · 1 notification · 1 stage rule set · 1 agent
Use this templateWork board
EngagementsRequested5
Brindlemoor — external network testEC-5101Brindlemoor Credit Union
Larkmere — phishing simulationEC-5102Larkmere Online Retail
Cobalt — web application testEC-5103Cobalt Fen Software
Ostrander — cloud reviewEC-5104Ostrander Manufacturing Works
Quillon — incident tabletopEC-5105Quillon Hospitality Group
Scheduled5
Hartwell — policy gap reviewEC-5106Hartwell Pediatric Associates
Northgate — external network testEC-5107Northgate Municipal Water District
Silverlode — web application testEC-5108Silverlode Law Group
Marlowe — cloud reviewEC-5109Marlowe Point Insurance
Pennybridge — phishing simulationEC-5110Pennybridge School District
Testing4
Tamarack — external network testEC-5111Tamarack Freight Logistics
Wrenfield — web application testEC-5112Wrenfield Dental Partners
Larkmere — cloud reviewEC-5113Larkmere Online Retail
Brindlemoor — incident tabletopEC-5114Brindlemoor Credit Union
Report sent8
Marlowe — external network testEC-5115Marlowe Point Insurance
Cobalt — cloud reviewEC-5116Cobalt Fen Software
Northgate — web application testEC-5117Northgate Municipal Water District
Quillon — phishing simulationEC-5118Quillon Hospitality Group
Hartwell — web application testEC-5119Hartwell Pediatric Associates
3 morePaid6
Brindlemoor — cloud reviewEC-5123Brindlemoor Credit Union
Tamarack — incident tabletopEC-5124Tamarack Freight Logistics
Marlowe — web application testEC-5125Marlowe Point Insurance
Wrenfield — phishing simulationEC-5126Wrenfield Dental Partners
Larkmere — web application testEC-5127Larkmere Online Retail
1 moreTables
Engagements
28 sample rows · 19 columnsEach security assessment from the client's request through the signed rules of engagement, the testing and the report to the payment.
| Engagement | Engagement number | Client | Kind of assessment | Led by | Status | Requested on |
|---|---|---|---|---|---|---|
| Brindlemoor — external network test | EC-5101 | Brindlemoor Credit Union | External penetration test | Cornelius Adeyemi-Strand | Requested | Oct 3, 2026 |
| Larkmere — phishing simulation | EC-5102 | Larkmere Online Retail | Phishing simulation | Anouk Holmqvist | Requested | Oct 2, 2026 |
| Ostrander — cloud review | EC-5104 | Ostrander Manufacturing Works | Cloud configuration review | Tobias Ferreira-Langley | Requested | Oct 2, 2026 |
| Quillon — incident tabletop | EC-5105 | Quillon Hospitality Group | Incident tabletop | Anouk Holmqvist | Requested | Oct 1, 2026 |
| Cobalt — web application test | EC-5103 | Cobalt Fen Software | Web application test | Marisol Kuznetsova-Pike | Requested | Sep 29, 2026 |
| Hartwell — policy gap review | EC-5106 | Hartwell Pediatric Associates | Policy gap review | Anouk Holmqvist | Scheduled | Sep 29, 2026 |
| Marlowe — cloud review | EC-5109 | Marlowe Point Insurance | Cloud configuration review | Tobias Ferreira-Langley | Scheduled | Sep 29, 2026 |
| Northgate — external network test | EC-5107 | Northgate Municipal Water District | External penetration test | Cornelius Adeyemi-Strand | Scheduled | Sep 28, 2026 |
| Pennybridge — phishing simulation | EC-5110 | Pennybridge School District | Phishing simulation | Anouk Holmqvist | Scheduled | Sep 28, 2026 |
| Silverlode — web application test | EC-5108 | Silverlode Law Group | Web application test | Marisol Kuznetsova-Pike | Scheduled | Sep 27, 2026 |
| Brindlemoor — incident tabletop | EC-5114 | Brindlemoor Credit Union | Incident tabletop | Anouk Holmqvist | Testing | Sep 24, 2026 |
| Tamarack — external network test | EC-5111 | Tamarack Freight Logistics | External penetration test | Cornelius Adeyemi-Strand | Testing | Sep 23, 2026 |
16 more rows
Clients
12 sample rows · 9 columnsThe organizations that hire the consultancy, with their security contact, terms and the day the master agreement was signed.
| Client | Industry | Security contact | Contact email | Contact phone | Payment terms | Master agreement signed |
|---|---|---|---|---|---|---|
| Brindlemoor Credit Union | Finance | Rhiannon Castellanos-Wolfe | rhiannon.castellanos@brindlemoorcreditunion.org | (206) 555-0120 | Net 30 | Apr 13, 2025 |
| Cobalt Fen Software | Software | Lucius Marchetti-Nkemelu | lucius.marchetti@cobaltfensoftware.com | (206) 555-0129 | Net 30 | Sep 20, 2025 |
| Hartwell Pediatric Associates | Healthcare | Desmond Oyelowo-Pratt | desmond.oyelowo@hartwellpediatricassoc.com | (206) 555-0123 | Net 30 | Aug 1, 2025 |
| Larkmere Online Retail | Retail | Calista Tran-Ogunleye | calista.tran@larkmereonlineretail.com | (206) 555-0138 | Net 15 | Nov 9, 2025 |
| Marlowe Point Insurance | Insurance | Giselle Hollander-Mbeki | giselle.hollander@marlowepointinsurance.net | (206) 555-0150 | Net 30 | Apr 18, 2024 |
| Northgate Municipal Water District | Government | Philomena Strand-Ibrahim | philomena.strand@northgatewaterdistrict.org | (206) 555-0132 | Net 45 | Jul 7, 2024 |
| Ostrander Manufacturing Works | Manufacturing | Tiberius Achterberg-Osei | tiberius.achterberg@ostrandermfg-works.com | (206) 555-0147 | Net 30 | Dec 9, 2025 |
| Pennybridge School District | Education | Odessa Valdivia-Hart | odessa.valdivia@pennybridgeschools.org | (206) 555-0144 | Net 45 | Sep 15, 2024 |
| Quillon Hospitality Group | Hospitality | Leopoldine Pellegrino-Sato | leopoldine.pellegrino@quillonhospitalitygroup.com | (206) 555-0153 | Net 15 | Feb 7, 2026 |
| Silverlode Law Group | Legal | Barnabas Eriksen-Quaye | barnabas.eriksen@silverlodelawgroup.com | (206) 555-0141 | Net 30 | May 23, 2025 |
| Tamarack Freight Logistics | Logistics | Ingrid Fossum-Adebayo | ingrid.fossum@tamarackfreightlogistics.net | (206) 555-0126 | Net 45 | Nov 4, 2024 |
| Wrenfield Dental Partners | Healthcare | Anselm Rooney-Dlamini | anselm.rooney@wrenfielddentalpartners.com | (206) 555-0135 | Net 30 | Jan 18, 2026 |
Findings
36 sample rows · 5 columnsWhat each test turned up, how serious it is and whether the client has fixed it.
| Finding | Engagement | Severity | Where it stands | Found on |
|---|---|---|---|---|
| EC-5111 — Open file share reachable from the internet | Tamarack — external network test | Low | Open | Oct 4, 2026 |
| EC-5111 — Exposed admin console on a forgotten host | Tamarack — external network test | High | Open | Oct 4, 2026 |
| EC-5114 — Ransom decision has no approver | Brindlemoor — incident tabletop | Medium | Open | Oct 4, 2026 |
| EC-5114 — Customer notice template missing | Brindlemoor — incident tabletop | Critical | Open | Oct 4, 2026 |
| EC-5113 — Admin role with no second factor | Larkmere — cloud review | High | Open | Oct 3, 2026 |
| EC-5113 — Unused access keys never rotated | Larkmere — cloud review | Low | Open | Oct 3, 2026 |
| EC-5112 — Order lookup shows other customers' records | Wrenfield — web application test | Critical | Open | Oct 2, 2026 |
| EC-5112 — Session token survives logout | Wrenfield — web application test | Medium | Open | Oct 2, 2026 |
| EC-5117 — Session token survives logout | Northgate — web application test | High | Fixed | Sep 20, 2026 |
| EC-5117 — Stored script in a profile field | Northgate — web application test | Low | Fixed | Sep 20, 2026 |
| EC-5115 — Open file share reachable from the internet | Marlowe — external network test | Critical | Accepted risk | Sep 19, 2026 |
| EC-5115 — Exposed admin console on a forgotten host | Marlowe — external network test | High | Open | Sep 19, 2026 |
24 more rows
Forms and booking
Open an engagement
FormOpen an engagementUsed by the engagement lead when a client agrees to an assessment, before any paperwork goes out.
What should the engagement be called? *
What engagement number is next? *
Which client is it for? *
What kind of assessment is it? *External penetration testWeb application testCloud configuration reviewPhishing simulationPolicy gap reviewIncident tabletop
What day did they ask?
What fixed fee did we agree?
Open the engagementAsk for an assessment
FormAsk for an assessmentA page on the consultancy's site where an organization asks what a security assessment would involve.
What is your organization called? *
What does the organization do?FinanceHealthcareLogisticsSoftwareGovernmentRetailLegalEducation
Who is the security contact?
Which email should the proposal go to?
What number can we reach them on?
Request a proposalDashboards
Engagements and cash
EngagementsOwed on delivered reports0
Engagements by status
- Requested5
- Scheduled5
- Testing4
- Report sent8
- Paid6
Fees by kind of assessment
- External penetration test$85,550
- Phishing simulation$24,000
- Web application test$131,400
- Cloud configuration review$49,400
- Incident tabletop$19,250
- Policy gap review$33,000
Findings by severity28
Also included
- Work boardStage rules
- Rules of engagementDocumentThe authorization a client signs before any testing, naming the work, the dates and the fee.
- Report cover letterDocumentThe note that travels with the findings report and asks the client to settle the balance.
- Reports waiting on paymentDigest
- Rules signedNotificationTells the lead as soon as an engagement reaches Scheduled so testing time is blocked the same day.
Related templates
- IT asset managementNettlefield Valley Systems4 tables · 7 views · 1 form · 1 dashboard · 1 digest · 1 stage rule set · 1 agentGallery
- App studioPinecrest Harbor Apps4 tables · 7 views · 1 form · 1 dashboard · 1 checklist · 1 notification · 1 agentGoverned columns
- App studioFlintridge Hollow Apps4 tables · 5 views · 1 form · 1 dimension set · 1 dashboard · 1 digest · 1 notification · 1 stage rule set · 1 agentImports
- Computer repair shopSaltmeadow Fields Computer Repair3 tables · 4 views · 1 form · 1 dimension set · 2 drill-downs · 1 digest · 1 notification · 1 agentDrill-down
- Computer repair shopIvybridge Grove Computer Repair4 tables · 7 views · 2 forms · 1 dimension set · 1 drill-down · 1 digest · 1 notification · 1 stage rule set · 1 agentTimeline
- Computer repair shopVelvetmoor Creek Computer Repair4 tables · 6 views · 1 form · 1 dashboard · 1 stage rule set · 1 agentGallery