IRONWARD · HONG KONG · LIMITED TO 10 COMPANIES

Day Zero — Hong Kong

One day on site. Two assessments. Zero invoice.

We come to your office in Hong Kong for one working day. By the end of it you know where AI can take real work off your team, where an attacker would get in first, and what to fix in the next 90 days — in writing, with evidence. For the first ten Hong Kong companies, we do not send an invoice.

In security a zero-day is the flaw nobody has seen yet. Day Zero is the day a company finally sees its own.

Isometric illustration: a shielded server on a grid, three observation points connected to it, a verified check mark and an evidence record.

Slots

Slots
10 open
0 scheduled
of 10
  1. Slot 1: open
  2. Slot 2: open
  3. Slot 3: open
  4. Slot 4: open
  5. Slot 5: open
  6. Slot 6: open
  7. Slot 7: open
  8. Slot 8: open
  9. Slot 9: open
  10. Slot 10: open

Applications close 31 January 2027, or when ten slots are taken.

What you get

Two assessments, one day, in writing.

Security exposure snapshot

  • External attack surface: domains, exposed services, mail security (SPF/DKIM/DMARC), leaked credentials check
  • Identity and access review: admin accounts, MFA coverage, offboarding gaps, shared passwords
  • Cloud and SaaS configuration review (Microsoft 365 / Google Workspace / AWS / Alibaba, whichever you run)
  • Backup and recovery reality check: when was the last restore actually tested
  • Supplier-security readiness under Hong Kong’s Cap. 653, if your customers are designated operators
  • Everything read-only, under a written authorisation you sign on the day; nothing is exploited, nothing is changed

AI readiness map

  • The five processes where AI agents would save the most hours, measured against your real volumes
  • Data you already have that could feed them, and what is missing
  • Where an AI agent must never act without a human — your approval points, written down
  • Build / buy / wait verdict for each process, with a cost band
  • A 90-day plan that fits one engineer, or none

Deliverables

A 12–20 page report (EN or 中文), an evidence pack, a 45-minute debrief with your directors within five business days. Yours to keep, whoever you work with next.

On our price list

Security exposure snapshot
HK$28,000
AI readiness map
HK$20,000
Together
HK$48,000
For Day Zero companies
HK$0

Our own price list, November 2026.

Why free, honestly

We are choosing our first design partners.

IRONWARD is in active development and we are selecting ten Hong Kong design partners. The fastest way to build the right product is to sit in ten real offices. We ask for two things in return: the debrief with a director present, and permission to quote anonymised findings (never your name) in what we publish. There is no obligation to buy anything, and we will tell you if IRONWARD is not a fit.

Who qualifies

Five checks before you apply.

  • 01Company incorporated in Hong Kong with a valid Business Registration
  • 0210 to 500 staff, office in Hong Kong where the day takes place
  • 03A director or owner attends the opening and the debrief
  • 04You run at least one of: Microsoft 365, Google Workspace, a cloud account, an ERP/CRM
  • 05Not a security vendor, MSP or consultancy

How it works

Four steps.

  1. 01

    Apply

    3 minutes, on this page.

  2. 02

    20-minute call

    To confirm fit and pick the day.

  3. 03

    The day on site

    09:30–17:30, read-only, under your written authorisation.

  4. 04

    Report and debrief

    Within five business days.

The authorisation you sign on the day

Read the authorisation letter (PDF)

Dates

Applications open now, close 31 January 2027 or when ten slots are taken. Days are scheduled on weekdays from the week of 24 November 2026.

Day Zero is run by the founder in person; dates depend on his Hong Kong travel weeks and are confirmed on the 20-minute call.

Questions

Short answers.

Is anything installed?
No.
Do you need admin passwords?
No — a director logs in beside us; we never hold credentials.
Is it really free?
Yes, no invoice, no card, no trial that converts.
What if we are bigger than 500 staff?
Write to us; Day Zero is for SMEs, larger teams get the paid Diagnostic.
What happens to our data?
Findings stay in your evidence pack; we keep a copy for 90 days for the debrief, then delete it; nothing is used to train anything. Personal data notice

Application

Apply for Day Zero

Ten Hong Kong companies. One day each. Applications close 31 January 2027.

Three minutes. We reply personally within two business days.

* Required

Your company

8 digits, as printed on your BR certificate. We validate the format only.

You

Your company address. Personal mailboxes are not accepted.

+852 by default. Other country codes are accepted.

Your systems

Select all that apply.

Scheduling

Pick up to two. Weekdays only.

Consent

Verification

Day Zero is offered by AIFLOW LABS LIMITED (Hong Kong, Company No. 78586258), the maker of IRONWARD.

Day Zero is offered by AIFLOW LABS LIMITED (Hong Kong, Company No. 78586258), the maker of IRONWARD. · Personal data notice (PDPO) · ilessio@aiflowlabs.io