Interim security.

Your first candidate interviewed within two days

Fast doesn't mean sloppy. We start with a proper intake: what needs to happen, why now, what has already been tried and who this person will be working with. The question often turns out to be different from the job title — and we'll say so, because we're here to advise, not to push CVs around. Then we search a network we've been maintaining for years. That's why we can think along with you and offer a choice, and why you'll have your first candidate in for an interview within two days. If we don't have someone who truly fits, we'll tell you that too. Better an honest no than a profile that wastes your time.

When do you bring in an interim professional?

For work with a clear beginning and end: a NIS2 or DORA implementation, an ISO 27001 certification, a cloud migration that needs securing. For extra capacity when the team can't carry it for a while: a peak, a leave, a vacancy that stays open longer than planned. And for expertise you need now but don't need to keep in-house permanently — setting up a pentest programme, getting an IAM project moving. In all those cases you're buying results and pace, without having to create a permanent position. If it doesn't start with a job title for you but with something that's going on, have a look at help with a situation: per situation, what needs to happen and who leads it.

What it costs

Never more than €15 per hour margin on top of the freelancer's rate on a full-time assignment. You always see the professional's rate and our margin separately. No small print, no surprises afterwards.

Two ways to contract

Margin only. You contract the freelancer directly, or through your own broker or procurement desk, and we invoice only our margin.

Through Gruzzy. We contract the professional, you receive a single invoice and we handle payment and the model agreement. Less administration on your side.

Hiring freelancers and the Dutch DBA Act

Since 2025 the Dutch tax authority has resumed enforcement on false self-employment, and many organisations have become wary of hiring freelancers. That's a shame, because it works fine — as long as the assignment really is an assignment: a clear result or project, the professional decides how the work gets done, and there's no employer-style line of authority. We look at that right at the intake. If the work is in fact a job, we'll say so. Usually that's a permanent role through recruitment; if you really want someone temporarily on payroll, secondment is possible, although it isn't our core business. We're happy to advise on this before you sign.

Who we supply

CISO and vCISO, security engineers, cloud and application security, SOC and incident response, GRC and compliance (NIS2, DORA, ISO 27001), privacy and DPO, IAM, pentesting and red teaming. In short, the whole field — as long as security is the core of the work. Who's available right now is shown below.

We usually know them already

Most of the freelancers we propose we've known for years: we've placed them, spoken to them or followed them before. We know how someone works, which environment suits them, and whether the rate is realistic for what you get. That's why it can be fast without becoming a gamble.

If it doesn't click

Then we'd rather hear it in week one, and we'll find a replacement straight away. Interim is a relationship too, not a delivery — we keep calling, even once the assignment is running.