Engagements

Build, secure,
automate.

Three practice areas. Websites built to last and maintained over time. Security, from assessment to compliance. AI and automation, shipped to production. Scope and budget fixed in writing before day one.

Engagements

From assessment to operations.

Three practice areas: websites, security, AI and automation. Scope and budget fixed in writing before day one.

Websites

Fast, secure and sober websites. Built to last, maintained, and visible on Google as well as in AI assistants.

Websites · Build

Website build

4 to 10 weeks

A fast, secure site that is easy to keep alive.

  • Structure, design and copy aligned with your brand
  • Modern, documented code that you own
  • Performance, accessibility and SEO measured before delivery
  • Security and GDPR built in from the design stage
Request a call
Websites · Operations

Maintenance and evolution

monthly subscription

A site that stays current, available and secure, month after month.

  • Security and dependency updates
  • Hosting, backups and uptime monitoring
  • Content and feature changes
  • Monthly report: performance, security, traffic
Request a call
Websites · Visibility

SEO and GEO search visibility

monthly subscription

Found on Google, and cited by AI assistants.

  • Technical, semantic and competitive audit
  • Pages, structured data and performance optimised
  • GEO: presence in answers from ChatGPT, Perplexity and Google AI Overviews
  • Expert content and monthly tracking of rankings and citations
Request a call
Websites · Custom build

Custom web applications

6 to 16 weeks

Client portals, extranets, line-of-business tools: what brochure sites cannot do.

  • Scoping of journeys and data with your teams
  • User accounts, roles and access rights
  • Connection to your existing tools: CRM, ERP, payment
  • Security, testing and documentation delivered with the code
Request a call
Websites · Compliance

Accessibility remediation

3 to 6 weeks

A site usable by everyone, and compliant with the law.

  • Audit against RGAA and the European Accessibility Act
  • Fixes to code, content and journeys
  • Accessibility statement and multi-year plan
  • Testing with screen readers and keyboard navigation
Request a call
Websites · Starting point

Audit and redesign

2 weeks

What is holding your site back today, and how to fix it.

  • Performance, search visibility, accessibility, security
  • Analysis of journeys and friction points
  • Prioritised, costed redesign plan
  • Clear readout, usable even without us
Request a call

Security

From assessment to provable compliance.

Security · Starting point

Posture assessment

14 working days

Where you stand, and what is missing.

  • Scope qualification: essential or important entity
  • Measured gap against the ten Article 21 measures
  • Asset and dependency mapping
  • Sequenced remediation plan, presented to management
Request a call
Security · Governance

Fractional CISO

monthly engagement

Accountability sits with management. We carry the file with them.

  • Security posture and risk register steering
  • Monthly committee and board reporting
  • Management training required by Article 20
  • Your point of contact with clients and authorities
Request a call
Security · Tooling

Security tooling integration

4 to 8 weeks

A tool installed is not a tool in service.

  • SIEM, EDR, IAM: deployment and configuration
  • Wiring into the existing information system
  • Detection rules and runbooks
  • Handover to your internal teams
Request a call
Security · Verification

Penetration testing

1 to 3 weeks

Find the flaws before those who are looking for them.

  • Web applications, APIs, external and internal network
  • Realistic attack scenarios, scope validated in writing
  • Detailed report: evidence, severity, fixes
  • Retest after remediation
Request a call
Security · Certification

Preparation for ISO/IEC 27001 certification

3 to 9 months

From gap analysis to the certification audit.

  • Gap analysis and scope of the management system
  • Risk analysis, statement of applicability, policies
  • Internal audit and management review
  • Support through to the certification audit
Request a call
Security · People

Awareness training and phishing simulations

annual subscription

The first attack vector is still people. They can be trained.

  • Phishing simulation campaigns tailored to your activity
  • Short modules for each population: management, teams, newcomers
  • Management training required by Article 20 of NIS2
  • Progress dashboard, quarter after quarter
Request a call
Security · Crisis

Incident response retainer

annual subscription

When an incident happens, you know who to call.

  • Response plan and crisis exercises prepared in advance
  • Priority intervention: containment, investigation, restoration
  • Notifications to authorities within NIS2 and GDPR deadlines
  • Lessons learned and hardening plan
Request a call

AI and automation

Systems in production, steered and governed. Not prototypes.

AI · Production

AI shipped to production

4 to 6 weeks

A prototype does not survive production. We ship what does.

  • Agents and RAG over your internal knowledge bases
  • Production rollout with observability and cost control
  • Guardrails, logging, human review
  • Handover to your teams or managed operations
Request a call
AI · Operations

Managed AI agents

monthly subscription

Your agents in production, monitored and under control.

  • Design and deployment of agents on your tools and data
  • Continuous monitoring: response quality, costs, incidents
  • Regular evaluations and model updates
  • Access rights, guardrails and action log
Request a call
AI · Automation

Process automation

4 to 8 weeks

Repetitive work handed back to the machines.

  • Mapping of manual tasks and what they cost
  • Workflows wired into the tools you already run
  • Automated evidence collection and filing
  • Monitoring, alerting and error recovery
Request a call
AI · Governance

AI governance

3 to 6 weeks

Know which AI tools run in your organisation, and under which rules.

  • Inventory of AI uses and tools, including undeclared ones
  • Risk classification under the EU AI Act
  • Usage policy, roles and validation workflow
  • Documentation ready for an inspection or a client audit
Request a call
AI · Adoption

AI training and adoption

1 to 3 days

Teams that use AI well, and safely.

  • Workshops tailored to roles: management, operations, technical teams
  • Concrete use cases drawn from your activity
  • Usage rules: sensitive data, confidentiality, verification
  • Roadmap of uses to deploy first
Request a call
AI · Customer relations

AI assistant for your customers

4 to 8 weeks

An assistant that answers accurately, and knows when to hand over.

  • Answers grounded in your content and up-to-date data
  • Integration into your site, messaging or existing support
  • Handover to a human when the question requires it
  • Measurement of answer quality and requests handled
Request a call
AI · Security

AI systems security

2 to 4 weeks

Your agents and chatbots tested the way an attacker would test them.

  • Prompt injection and jailbreak testing
  • Search for data leaks and excessive access
  • Review of rights, connected tools and logs
  • Remediation plan and guardrails to deploy
Request a call

The security formats cover NIS2, DORA, ISO/IEC 27001, GDPR and the ReCyF from ANSSI, France's national cybersecurity agency, whose requirements overlap heavily. Every engagement is scoped before it is priced: perimeter, sequencing and budget are agreed in writing, and only change if you widen the scope. Websites are yours, code and documentation included.

Method

How an engagement runs.

The same sequence for every format, with a named owner at each stage.

  1. Diagnostic

    Review of what exists: website, system, process. Risks, gaps and priorities.

  2. Architecture

    Control design, technology choices, flow and accountability modelling.

  3. Implementation

    Control deployment, operational documentation delivery, knowledge transfer.

  4. Operation

    Maintenance, continuous review, long-horizon maturity support.

FAQ

Frequently asked

What people ask us before signing.

How does an engagement start?

With a thirty-minute call to qualify the need. Within fourteen working days you receive a written scope: perimeter, sequencing, costed commitment. Nothing starts before you approve it.

What does an engagement cost?

The budget is set at scoping, once the perimeter is known: number of systems, target regulatory level, timeline. You get a firm figure in writing before anything starts, and it only changes if you widen the scope.

Can formats be combined?

That is the most common case. An audit often leads to a compliance programme, then to an ongoing engagement. Each step is scoped separately: you decide on the next one every time, with no cascading commitment.

What does a Valtieri website include?

Modern, documented code that you own. Performance, accessibility and search visibility measured before delivery. Security and GDPR built in from the design stage. Optional monthly maintenance: updates, backups, monitoring and improvements.

Do you work outside Paris?

Yes, across France and remotely. Scoping workshops and strategic reviews happen on site when the context calls for it; the rest is controlled remote work.

How is this different from your products?

Engagements are time-boxed missions. Presidio is the platform we publish to steer compliance day to day: risk register, evidence, action plans. It works on its own, and an engagement can build on it without being required to.

Do you work with SMEs?

Yes, whenever the stake is real: a website to rebuild, a NIS2 obligation, a client audit to pass, a process to automate. We would rather say no early than start an engagement that makes no sense for you.

Not sure which format fits?

Thirty minutes is enough to decide. If none of these fits, we will tell you so.

Request a call