SVC-01
IT & Cloud Advisory
Microsoft 365 hardening, identity and access, cloud security posture, backup, and business continuity.
Cybersecurity & IT Advisory Services
Secure technology for organizations that can’t afford downtime.
From cloud and Microsoft 365 to compliance, penetration testing, and security leadership, SafeOneX plans, coordinates, and delivers the cybersecurity and IT work your business depends on.
ENPTESWe work with you in English, Portuguese, and Spanish.
| Workstream | Status |
|---|---|
| Microsoft 365 hardeningConditional Access, MFA, mail security | Complete |
| Azure security posture reviewIdentity, network, logging | In progress |
| External penetration testDelivered by certified partner | Scheduled |
| Security policy suiteAligned to NIST CSF 2.0 | In review |
| Backup restore testRecovery verified for critical systems | Passed |
Illustrative example. Not client data.
Work aligned with recognized frameworks:
NIST CSF 2.0CIS Controls v8ISO/IEC 27001SOC 2HIPAAPCI DSSCMMC 2.0NIST SP 800-171Services
One accountable partner across cybersecurity and IT, from planning to technical delivery.
SVC-02
Technical Security Services
Penetration testing, vulnerability assessments, and configuration reviews, delivered with certified partners.
SVC-03
GRC & Compliance
Governance programs, policies and procedures, third-party risk management, and audit readiness.
SVC-04
Cyber Risk & Security Assessment
Control reviews, gap analysis, and a risk register ranked by business impact, with a remediation plan.
SVC-05
Security Leadership & vCISO
Fractional security leadership: strategy, policies, program oversight, and reporting to leadership.
Fixed-scope packages
Clear scope, fixed timeline, and a fixed price agreed before work starts. A simple way to begin.
2 weeks
Microsoft 365 Security Review
Review of identity, MFA, Conditional Access, email security, and sharing settings, with a prioritized hardening plan.
- Configuration findings report
- Hardening plan ranked by risk
- Results walkthrough with your team
Fixed price
Request this package3 to 4 weeks
CMMC Readiness Assessment
Gap analysis against NIST SP 800-171 for contractors handling federal information, with a roadmap to certification.
- Control-by-control gap analysis
- Remediation roadmap
- Starting SSP and POA&M documents
Fixed price
Request this package2 to 3 weeks
External Penetration Test
Testing of your internet-facing systems by a certified partner, under signed rules of engagement.
- Technical and executive reports
- Prioritized fixes
- Retest of corrected findings
Fixed price
Request this packageWho we serve
Organizations that need strong security and reliable IT without building a full in-house team.
Small & mid-sized businesses
Security and IT expertise without a full-time internal department.
Professional services
Law, accounting, and consulting firms that hold confidential client data.
Financial services
Firms that process financial transactions and sensitive personal data.
Healthcare
Organizations protecting patient data and clinical systems.
Government contractors
Federal and defense contractors preparing for CMMC and NIST SP 800-171.
International & diplomatic organizations
Missions and international bodies with elevated threat exposure.
Why SafeOneX
One partner that understands both the technology and the business risk.
- Three working languages
- Advisory, documentation, and meetings in English, Portuguese, and Spanish.
- One point of accountability
- Strategy and partner-delivered technical work under one contract.
- Risk-based priorities
- Work ordered by likelihood and business impact, not by tool alerts.
- Vendor-neutral
- We recommend what fits your environment, not what we resell.
- Clear deliverables
- Owners, deadlines, and measurable milestones for every engagement.
- Reporting leadership understands
- Technical results translated into decisions leadership can approve.
How we work
The same disciplined process on every engagement.
01
Assess
Understand your systems, data, and requirements. Establish the baseline.
02
Plan
Define scope, priorities, deliverables, and the right team.
03
Deliver
Execute the work with our specialists and partners, under one project lead.
04
Support
Monitor, report, and keep your environment secure as it changes.
Ways to work with us
Choose the model that fits your needs and budget.
PROJECT
Project-based
A defined scope with fixed deliverables, such as a cloud security review, a penetration test, or an audit readiness program.
MANAGED
Ongoing support
A monthly agreement for continuous security and IT guidance, oversight, and reporting.
ON-DEMAND
On-demand expertise
Specialist hours when you need them: incident support, vendor reviews, or technical decisions.
About SafeOneX
SafeOneX is a cybersecurity and IT advisory firm based in Arlington, Virginia, serving organizations in the United States and internationally.
We combine security expertise, technical assessment, and governance with a network of specialized partners to deliver complete cybersecurity and IT outcomes.
We protect the business, not just the technology.
Leadership
The people accountable for every SafeOneX engagement.
Marlene Marques
CEO & Co-founder
Leads SafeOneX’s business strategy, operations, and client relationships. Oversees administration, finance, contracts, and partner coordination, ensuring every engagement is well organized from first contact to final delivery.
Business strategyClient relationshipsOperationsFinance & contracts
Jacinto Marques
CTO & Co-founder
Leads SafeOneX’s technology strategy and security delivery. A cybersecurity architect focused on cloud security, identity and access, security architecture, and risk management, he defines the technical approach for every engagement and oversees the work of SafeOneX’s specialist partners.
Security architectureCloud securityIdentity & accessRisk management
Sofia Brown
Head of Client Relations & Marketing
Leads client relations and marketing at SafeOneX. Brings a background in client relationship management across the insurance and real estate sectors, focused on building lasting client relationships, supporting new client onboarding, and growing the SafeOneX brand.
Client relationsMarketingBusiness developmentClient onboarding
Free resource
Small business security checklist
20 practical checks across identity, email, devices, backups, and vendors. See where your organization stands in 15 minutes.
Let’s secure what’s next
Tell us about your project, whether it’s cloud, Microsoft 365, compliance, testing, or ongoing support. We’ll reply with clear next steps.
info@safeonex.com
Arlington, Virginia, USA
Consultations in English, Portuguese, and Spanish.
Prefer to talk first? Book a call