Hong Kong skyline protected by digital security arcs

Services

Bitcoin and crypto security services.

Layered, non-custodial security support for self-custody, hardware wallet backups, SIM-swap defense, inheritance continuity, and advisor-led digital asset governance.

Entry Services

Start with the smallest useful step.

These are paid entry points, not replacements for the three Layers. Diagnostic tells you what needs fixing across email, phone, credentials, and asset exposure. Starter gets a basic Bitcoin or crypto self-custody setup moving. The Layers are the deeper implementation engagements.

ENTRY SERVICE

Security Diagnostic

A paid assessment and written report. It can stand alone, or become the first phase of a deeper Layer 1, 2, or 3 engagement.

$249

60-minute Expert Diagnostic

Password, SIM, and email hygiene audit
Attacker's-eye risk analysis
Prioritized vulnerability report
Clear recommendation: self-fix, Layer 1, Layer 2, or Layer 3

What's included in detail

A focused one-hour audit. We work through your highest-risk email, phone, credential, and recovery paths, then give you a written vulnerability report sorted by attacker payoff. This is the assessment and decision point. If you want Fortress21 to implement the fixes, the fee credits 100% toward a Layer engagement within 30 days.

Ask About Diagnostic

100% credit toward a Layer engagement within 30 days

ENTRY SERVICE

Sovereign Starter

A guided entry session for basic self-custody. It gets you safely started without pretending to replace a full Layer 2 continuity architecture.

$299

120-Minute Guided Session

Hardware-wallet readiness and setup guidance
Private signing interface orientation
First transaction-signing rehearsal
Starter action plan and upgrade path

What's included in detail

You bring the hardware (we recommend a list ahead of time) and we guide the setup while every secret stays in your hands. By the end of two hours you have a basic self-custody setup, a rehearsed signing flow, and a written action plan. Full Layer 2 is the deeper continuity build: metal backups, redundancy, family recovery protocol, and a Physical Legacy Kit.

Ask About Starter

100% credit toward a Layer engagement within 30 days

Specialized Security Layers

Pick the level of defense that matches your assets and risk.

Three implementation engagements, three depths. We recommend the smallest one that genuinely solves your problem.

LAYER 01: PERIMETER

Digital Perimeter Hardening

The implementation layer for email, phone, and credential security. It begins with the Diagnostic if you have not already completed one.

1-Day Engagement

Diagnostic review and risk report before implementation
Credential Hardening: better 2FA and FIDO2 hardware authentication
Communication Shield: SIM-intercept and email reset-loop lockdown
Credential Governance: high-entropy generation, no human memory required

What's included in detail

A full day, in person or over secure video. We move every important account onto hardware-key authentication, lock down your phone number against SIM-swap, audit every recovery channel, and migrate your credentials onto a high-entropy manager you will actually use. You walk away with a hardened digital identity and a written runbook for maintaining it.

Harden Perimeter

LAYER 02: SOVEREIGN

Sovereign Infrastructure and Continuity

The full sovereignty and continuity build: professional single-authorization storage, durable backups, and a verified path for your family.

2-Day Engagement

Sovereign Foundation: zero-trust hardware cold-vault generation
Resilient Storage: metal-plate imprinting and single-point-of-failure proofing
Continuity Protocol: heir transition framework, no technical assistance required
"Break Glass" Documentation: Physical Legacy Kit for estate settlement

What's included in detail

Two structured days. Day one: hardware verification, air-gapped setup ceremony, metal-plate backup creation, redundancy distributed across locations you control. Day two: continuity protocol. We co-author the Physical Legacy Kit with you, rehearse the recovery procedure with your designated heir, and verify the kit works under realistic conditions before the engagement closes. Sovereign Starter clients can upgrade into this when they are ready for the full continuity build.

Establish Sovereignty

LAYER 03: CITADEL

Distributed Authorization and Governance

Customizable institutional-grade resilience designed to remove human error and single points of failure at every level.

2-Day Engagement

Multi-Key Distributed Authorization: M-of-N multisig, no unilateral control
Geographically Redundant Infrastructure: keys held across jurisdictions
Fiduciary and Trustee Coordination: a governed framework for professional access
Strategic Anti-Coercion: time-locks and decoy protocols

What's included in detail

Highly customized. Every Citadel engagement starts with a threat-modeling session where we map your actual risk profile against jurisdictions, family structure, fiduciary relationships, and physical-safety considerations. The build itself usually spans two days plus coordination calls with your attorney or trustee. We work in mixed-vendor multisig (typically 2-of-3 or 3-of-5), with documented signing policies, geographic redundancy, and where the threat model justifies it, time-locks and decoy layers.

Build the Citadel

Ongoing Support

Private Client Support: Retainer

Avoid "operational rust." Direct access to expert support for annual health checks, hardware updates, and technical management, so your architecture evolves with the threat landscape.

Enquire About Retainer

Common Questions

Service questions

Direct answers for clients comparing entry services, self-custody support, and deeper Layer engagements.

What is non-custodial digital asset security?

Non-custodial digital asset security means Fortress21 helps you design and implement the security process while you keep sole control of keys, recovery words, passphrases, credentials, and assets.

Which Fortress21 service should I start with?

Most clients start with the Security Diagnostic because it produces a written vulnerability report and clarifies whether you need self-fix guidance, Layer 1 perimeter hardening, Layer 2 continuity architecture, or Layer 3 multisig governance.

Is Sovereign Starter the same as Layer 2?

No. Sovereign Starter is a guided entry session for basic self-custody. Layer 2 is the full continuity build: hardware wallet ceremony, durable backups, redundancy, family recovery protocol, and Physical Legacy Kit.

Can Fortress21 work with clients outside Hong Kong?

Yes. Fortress21 is Hong Kong-led and supports Hong Kong, APAC, and US clients through secure online engagements when the work can be done safely without an in-person ceremony.

Not sure which service fits?

Tell us what you are trying to protect. We'll point you toward the smallest engagement that actually reduces risk.