Start with the map. The rebuild comes after.
The usual reaction is to commission rebuilds. It is the most expensive order to work in: you rebuild before the ground has been mapped, and the estate fragments again within two years. Here is the order we follow, and what each step covers.
We quote a rebuild once the register exists.
-
0
Reconnaissance
What is publicly attributed to you, set against what you believe you own. Domains, subdomains, hosts, certificates and platforms visible from the outside.
You receive two things: a number, and the list. It is often the first time the two have been put side by side. This step works entirely from the outside, so it starts before any access to your systems, any confidentiality agreement or any supplier’s consent.
-
1
The map
The full register, status and routing, the search and brand surface, triage of public exposures, migrations and inherited domains, the graph linking parent company, brands, countries and networks, drift in content and legal data, and the concentration of platforms and suppliers.
Then what follows from it: ranked control gaps, a ninety-day plan, and a briefing for the board. Every finding is marked confirmed, estimated or open, with what is needed to reproduce it.
Beyond those volumes the quote follows the reconnaissance: we price a map once its scope is known.
-
2
The registers
Seven registers to keep. A group that prefers to move step by step often buys the first two:
- The asset register: domains, DNS, certificates, hosting, platforms, access, renewal dates.
- Who answers for what: executive owner, operational owner, escalation path.
- Identity: the parent domain, the source of record, where brands and countries sit.
- The migration rule: mappings, redirects, email, monitoring, retirement criteria.
- Platform controls: versions, extensions, backups, release testing.
- The data of record: legal notices, entities, points of sale, contact details.
- Holding suppliers to account: responsibilities, access, evidence format, independent acceptance.
-
3
The watch
The watch keeps the map current. Domains renew, suppliers change, a site is launched quietly. It follows availability, certificates, DNS, newly discovered subdomains, staging exposure, brand results, legal drift and migration regressions.
- Up to 10 domains and 5 live sites
- Up to 30 domains and 15 live sites
- Up to 80 domains and 40 live sites
- Beyond that
The monthly fee follows these bands. It is settled on the real count of domains and sites established by the map.
Alerts as events occur, a monthly control report, a quarterly review for the board, an annual re-baselining.
-
4
Interventions
Contain an exposure, restore routing or a certificate, run a migration, clarify an entity architecture, correct legal data and points of sale, open and keep a subsidiary’s first site, or verify work delivered by another supplier.
AADL builds the agreed replacement system in your repository. When a correction requires heavy development on the live infrastructure or formal incident response, it remains with the team or specialist best placed to act: we provide context, set acceptance criteria, coordinate the hand-off and verify the result. AADL works alongside each discipline, in its place.
What the order spares you
A rebuild commissioned before the register is paid for twice: once to do it, once to repair what it broke by surprise. A forgotten redirect, an interrupted mailbox, years of accumulated standing lost on a domain everyone assumed was dead.
The other order costs less, because you finally know what you are rebuilding.
The order also helps you get found: what is of record at home is what an assistant looks to confirm elsewhere.