For sensitive reports, ask for my PGP key in the first message and send details in the encrypted reply. I read everything and answer within two business days.
You describe the system and what is keeping you up. I tell you whether an engagement is the right instrument, or whether a workshop or a single review would serve you better.
One page: what gets tested, what is out of bounds, what you receive, and what it costs. Fixed fee, fixed dates, named deliverables.
Findings arrive as they land, not in a final-week dump. Every engagement ends with a regression suite or a documented process your team owns.