We get you to signed proof. Then we leave.
Surfil services are deliberately finite: every engagement ends with your team self-sufficient and your uninstall path intact. No embedded consultants, no dependency by design.
Four ways we help, each with an exit
Every engagement is a fixed sequence with a defined end state - not an open-ended retainer.
Onboarding & migration
Any paid planGuided install across your agents, MCP consolidation, and a Guard simulation period before any enforce goes live.
Fleet rollout
Team & EnterpriseStaged rollout for larger orgs: registry first, discovery second, policy last - so enforcement never arrives before evidence.
Compliance evidence setup
EnterpriseMap your control framework into Charter and produce offline-verifiable evidence bundles your auditors run themselves.
Weave curation
Team & EnterpriseStand up your canonical knowledge network: authority rules, expiry, and review workflow so agents read trusted, fresh facts.
Simulate first. Always.
One principle governs every service engagement, because it governs the product.
Nothing enforces on day one
Guard and Policy run in monitor and simulate until the would-block report has been reviewed by your team - not ours.
Evidence before action
Every step of a rollout produces a signed artifact before the next step is taken. If the evidence isn't there, the rollout pauses.
Rollback stays byte-exact
The clean-uninstall guarantee holds throughout: at any point in any engagement, backing out restores every config exactly.
Four tiers, stated plainly
Response targets as we actually operate them - the honest version of a support matrix.
| Tier | Price | What you get | Available on | Response |
|---|---|---|---|---|
| Community | included | Docs, help center, community channels. | Any plan | best-effort |
| Standard | included | Email support with a one-business-day reply target. | Pro & Team | 1 business day |
| Priority | add-on | Shared channel, four-hour response target, named contact. | Team | 4-hour target |
| Enterprise | custom | SLA, dedicated engineer, quarterly security review. | Enterprise | per SLA |
Services we deliberately don't offer
A services page should also say no. Ours says it three times.
No embedded consultants
We won't staff your team long-term. If an engagement needs to run forever, we designed it wrong - and we'd rather fix that.
No custom forks
One product, one spine, for everyone. Custom builds would fragment the security surface every other customer relies on.
No certification theater
We'll set up evidence your auditors verify themselves. We will not sell you a “Surfil Certified” stamp - it would mean nothing.
Tell us your agents and your team size
We'll map a simulate-first plan with a defined end state - and tell you honestly if you don't need us for it.