Work we have done enough times to name.
Four engagement shapes with known scope and known duration, plus the product we built for ourselves. Scope is fixed before anything starts. Cost depends on what we find, so we quote after we have looked, never before.
Codebase Audit Sprint
Two weeks. We tear apart your AI-generated codebase and ship a written report: bugs, anti-patterns, security gaps, ranked by severity, with concrete fixes and a remediation roadmap.
- Static analysis + manual review of every module
- Threat model + OWASP gap report
- Test coverage assessment
- Performance & bundle audit
- 2-hour walkthrough call with your team
RAG Pipeline Starter
Production-ready retrieval-augmented generation pipeline on your data: ingest, embed, index, query, evaluate. Vector DB of your choice, dual LLM providers, eval harness with golden questions.
- Ingestion pipeline (PDF, HTML, Notion, Drive)
- Vector DB setup (pgvector / Pinecone / Weaviate)
- Hybrid retrieval + reranker
- OpenAI + Anthropic provider failover
- Eval harness with golden Q&A set
SOC 2 Type I Sprint
10 weeks to your SOC 2 Type I report. We bring the controls, the auditor relationship, and the policy templates. You bring product context. Includes 6 months of post-cert maintenance.
- Policy & procedure pack (24 documents)
- Drata or Vanta deployment
- Auditor introduction & cycle management
- Pen-test coordination
- Quarterly check-ins for 6 months
Production Operations Retainer
We run your platform. PagerDuty rotation, incident response, capacity planning, monthly cost-optimization reports. Two senior SREs on call, dedicated channel, 30-min P1 SLA.
- 24x7 on-call coverage (2 SREs)
- P1 SLA: 30 min / P2: 4 hrs
- Quarterly architecture reviews
- Monthly cost reports + reduction targets
- Runbook authoring + game days
Zenith AI
AI-powered submission intelligence that filters spam with 99% accuracy, scores leads, analyzes sentiment, and generates smart replies. Eight layers of security, real-time analytics, and a developer-first REST API.
- 99% spam detection accuracy
- Automatic lead scoring (hot, warm, cold)
- AI-generated smart replies
- Real-time analytics dashboard
- Developer-first REST API
A call with the engineer who would do the work.
- You send the problem.A few sentences: the system, the constraint that hurts most, the timeline. No form-filling exercise, no discovery deck.
- An engineer replies, not a salesperson.Within one working day, from contact@infodivelabs.com. The person who answers is one of the people who would build it.
- We tell you what we think, free.Including when the answer is that you do not need us, or that the thing you asked for is the wrong thing to build. That conversation costs nothing and carries no obligation.
- Then we scope and quote.Once we know what is actually there. Fixed scope before anything begins, and a number we can stand behind because we looked first.