A lot of "security consulting" is, structurally, a sales process wearing a consultant’s badge. The recommendation at the end tends to look remarkably like the product the consultant’s employer resells, and the account team that delivered the pitch is rarely the team that shows up to do the work.
Working independently removes that conflict entirely. There’s no reseller agreement, no partner quota, and no incentive to recommend a platform because it pays better than the alternative. The advice you get is shaped by what your organisation actually needs, sized to your budget and your team’s ability to run it — not by what’s easiest to sell.
It also means continuity. The person who does the risk assessment, writes the architecture, and — where needed — builds the platform is the same person who’ll be in the room if something goes wrong afterwards. Nothing gets lost in a handover between a pre-sales architect and a delivery team who’ve never met.
That directness isn’t for everyone — some organisations want the comfort of a large brand on the contract. But for organisations who want an honest assessment and a plan that survives contact with a real budget and a real team, independent advisory tends to get there faster, and with far less noise along the way.