A self-serve pack to close a freelancer workshop: invoicing mail, repository, domain, laptop, copies, and client access. 79 PLN gross. Invoice from tomek.st, files by email after payment.
CONTENTS
- five Markdown files, ready to print or export to PDF
- a five-point sample on this page
- the rest after payment clears
FEATURES
- 40-point checklist for a one-person workshop
- a password policy you fill in
- an incident card for one person
- 15 prompts for your own exports
- decision log: present / missing / deferred
REQUIREMENTS
- authority to change your own accounts
- about 2–4 hours in one block or two evenings
- a password manager, or a decision to set one up while you work
The pack is for someone who invoices from their own mailbox, keeps code in a repository, and does not have a security hire. The close-the-basics week stays free and is arranged for a 5–30 person firm. Hygiene 48h is shorter and covers one workshop.
What arrives after payment
Five files:
- a 40-point checklist,
- a one-page password policy with room for your rules,
- an incident card for when mail, the domain, or the repository fails,
- 15 prompts to paste into your own model — only for exports you already have the right to read,
- a decision log.
The files do not sign in to your accounts. They contain no intrusion instructions, no scan of someone else’s network, and no bypass of someone else’s MFA.
Price and delivery
79 PLN gross. The order is the form at the bottom of this page. The invoice comes from tomek.st. I send the files after payment clears, to the address in the order.
The order template includes consent to delivery of the digital content before the 14-day period ends. Without that consent I do not send the files immediately, because for digital content that consent is the condition for starting delivery.
Sample
Five of the forty points:
- the mailbox that sends invoices has a phishing-resistant second factor (passkey or security key), not SMS alone,
- the domain registrar has MFA, and the recovery mailbox is not a mailbox whose password sits in a repository,
- the backup does not live only on the same disk as the work,
- a link to client files names specific people and has an end date,
- a change of the account number on an invoice is confirmed on a second channel, a number you already know, not by replying to the email.
Out of scope
A pentest, work on a system you have no right to touch, a review of more than one workshop, a guarantee that an incident will not happen.
If you want me to walk the same scope on one target and send a report: Baseline review — 349 PLN gross, express note 149 PLN gross.