The bundle isn't really a single journey — it's two independent tracks running side by side. The security audit doesn't gate the website launch, and the website doesn't gate the audit. You can publish your site on day one while the audit is still being remediated, and vice versa. Here's how to think about it.
🛡 Track 1: Security
Identical to the Scope + Monitoring journey or the Full security stack journey depending on whether you added Implementation. The audit runs the moment you buy. Findings arrive within hours. From there: DIY or Implementation, mark done + reverify, then ongoing monitoring.
Common bundle pattern: Scope + 90-day Monitoring trial + Implementation Tier 1 or 2 added after reading findings. Most bundle customers do not buy Implementation upfront — they decide after seeing what's in their audit.
→ Scope + Monitoring journey (audit + alerts)
→ Full security stack journey (with Implementation T2 + Hardening Certificate)
🌐 Track 2: Website
Identical to the Website journey. AI generates your site within minutes of purchase, you edit it, publish, optionally add a custom domain, and the AI chat widget starts collecting leads.
Common bundle pattern: Website goes live within 1–2 hours of purchase. Customer is publishing and collecting leads while still working through audit findings on the other track.
How the two tracks relate
They are mostly independent products. A few touch points exist:
- Both share the customer hub at
/onboarding/<your-delivery-id>/— your post-purchase home base shows both products' status side by side. - Both use token URLs, never passwords — the audit dashboard, monitoring dashboard, website editor, and leads inbox are all accessed via permanent token links emailed at purchase. Bookmark each.
- The website AI chat is independent of the security AI chat — the chat widget on your live website is configured to your business (services, hours, team), not to your security findings. The Help Center AI chat (this product's chat) is the one trained on documentation.
- Custom domain doesn't affect security — flipping your website to its own domain (CNAME) doesn't change anything in the audit or monitoring products.
Bundle billing
Both products bill separately through Stripe. Each shows up as its own charge — Scope (one-time), Website (one-time), Monitoring (recurring if you keep it past the 90-day trial), Implementation (one-time per engagement if added). There is no bundle discount today; each product is priced standalone. Full current pricing at /pricing/.
Other things you can do anytime
Open your customer hub
Both products' status, dashboard links, and next-action prompts in one view at /onboarding/<your-delivery-id>/ — the link is in every confirmation email.
Share security evidence with an outside reviewer
Insurance broker, CPA, SOC 2 auditor, vendor-security team. Time-limited read-only link.
Share with a reviewer →Add a website editor teammate
Independent of security access. Editors invited to the website can't see audit findings.
Add a teammate →