Started in security at Apple. Led teams at Pure Storage, UnifyID and Robinhood. Hosts The Security Podcast of Silicon Valley and writes the blog.
About Ceed
Ceed is time tracking, client budgets, invoices, contractor payouts and the month close for a firm that bills for its team’s time. If an hour would push a client over budget, Ceed holds it for approval the moment it is logged. The invoice is computed from the agreement. Closed months do not change.
It was built by YSecurity, a security consultancy, to run its own books, and it is the record YSecurity runs on today. 0.1% of what a firm invoices. No seats, no tiers, no minimum, and no sales call.

Sasha Sinkevich and Jon McLachlanCo-founders
A note from the founders
We did not start Ceed because the world needed more software. We started it because we ran a firm that sells its team’s time, and one month we found out what it had cost us when we wrote the invoice.
YSecurity began as the two of us, a security consultancy billing in fifteen-minute increments against a monthly cap. The rules we agreed with each client lived in a spreadsheet, and they held if somebody remembered to check. One month nobody did. The work was urgent and good and the team did it, and the month ran tens of thousands of dollars past what the client had agreed to pay.
There were two things we could do, and over the years we did both. Surprise a client who trusted us, and take the call that follows. Or eat the hours, and pay our people for work nobody would pay us for. Neither was a decision. Both are what happens when the decision was never made. The money hurt. Not knowing hurt more.
So we asked what software would have to do to have stopped that month. Not tell us the next morning. Not refuse the hour and lose the work from the record. Hold it. Save the hour, mark it, and put it in front of one of us for a yes or a no, the moment it was logged. Nothing we could find did that, so we built it and ran our own books on it first.
Ceed is the record YSecurity runs on today. Every hour, every client’s budget, every invoice, every payout and every close. The rule that would have saved us that month holds itself now, at the hour. If your firm sells its team’s time, we built this for you.
Jon and Sasha
The founders
Built security from the ground up at Robinhood, Yugabyte and Symphony. Co-founded YSecurity and Cyberbase with his brother Jon.
What Ceed is
What is Ceed?
Ceed is the record of the money side of a firm that sells its team’s time: the hours the team logs, each client’s budget, the invoices, what contractors are owed, and the month close. If an hour would push a client over budget, Ceed holds it for approval the moment it is logged, and the invoice is computed from the signed agreement. It is made by YSecurity, LLC, doing business as Ceed, at ceed.so.
What does Ceed replace, and what stays?
Ceed replaces the timesheet kept by hand, the retainer math, the invoice typed by hand and the month-end reconciliation. The firm’s accounting ledger, its project tool, its chat and its payroll provider stay where they are. Ceed is the record they all work from.
Is Ceed a time tracker, an invoicing tool or professional services automation?
Ceed is the record those three usually keep apart: the hours, each client’s budget and the invoice, checked against each other at the hour. Staff log hours from Slack, the invoice is computed from the agreement, and margin per client is visible every morning, so a firm on Ceed does not keep a separate time tracker or an invoice template. Where Ceed stands beside Ignition, Anchor, the time trackers and the suites, row by row and dated, is on the comparison page.
Is Ceed a bank, payroll or accounting software?
No. Ceed never touches a firm’s money. The firm’s bank moves the money, its payroll provider pays its people, and its ledger stays where it is. Invoices and statements come out of Ceed as documents for that ledger. Where Ceed stands beside the field, row by row, dated.
Does Ceed use AI to write invoices?
The invoice is computed from the signed agreement and the record, the same way every time, so it can be checked line by line. Ceed Intelligence, the part of Ceed that reads and proposes, brings your contracts, timesheets and people files into that record, turns a sentence into an act and answers with your numbers, and you confirm everything it proposes.
What is Ceed Intelligence?
The part of Ceed that reads and proposes, anywhere you use Ceed. It reads your paper into the record: your people list, your W-2s and 1099s, your client list and the agreements you signed, your timesheets and your invoice books. It turns a sentence into the act, and it answers with your numbers. You confirm everything it proposes, every act shows its price before you say yes, and Ceed works without it.
Who is legally responsible for Ceed, and how does a firm reach a person?
YSecurity, LLC, doing business as Ceed. The founders are Jon McLachlan and Sasha Sinkevich. A firm writes to hello@ceed.so and a person replies. If a claim on this site or a row on the comparison page is wrong, the same address takes the correction, and corrections are dated when made.
Who built it
Who founded Ceed?
Jon McLachlan and Sasha Sinkevich, brothers and the co-founders of YSecurity and Cyberbase. Jon started in security at Apple and led teams at Pure Storage, UnifyID and Robinhood. Sasha built security from the ground up at Robinhood, Yugabyte and Symphony.
Why did YSecurity build Ceed?
Because YSecurity kept its own books by hand, and one month ran tens of thousands of dollars past a client’s budget, found only when the invoice was written. Nothing the founders could find held an over-budget hour for a decision at the moment it was logged, so they built Ceed and ran YSecurity on it first. YSecurity runs on it today. The month in full is in Why we built Ceed.
What is the relationship between Ceed and YSecurity?
YSecurity is a security consultancy that sells its team’s time, and Ceed is the record YSecurity built to run its own hours, client budgets, invoices, payouts and month close. YSecurity was the first firm on Ceed and runs on it today. Legally, Ceed is YSecurity, LLC, doing business as Ceed. YSecurity’s own work is at ysecurity.io.
What else have the founders built?
Jon McLachlan and Sasha Sinkevich also co-founded Cyberbase. Jon hosts The Security Podcast of Silicon Valley, more than a hundred conversations since 2021 with the people who build and run security, and writes the Ceed blog. Before YSecurity, Jon started in security at Apple and led teams at Pure Storage, UnifyID and Robinhood, and Sasha built security from the ground up at Robinhood, Yugabyte and Symphony.
Why trust a security consultancy with a firm’s billing record?
Because YSecurity ran its own books on Ceed before any other firm did, and because the record is built the way the founders spent their careers building. Who may see rates and margin is enforced on the server, not in the screen. Every edit before a month closes carries a name and a date, and a closed month sits on an append-only audit chain nobody can rewrite.
How the hold works
What does Ceed do when an hour goes over a client’s budget?
It holds the hour. The hour is saved, marked as held, and put in front of a named person for a yes or a no the moment it is logged. Approved, it goes on the invoice at the rate in the agreement. Declined, it stays on the record and off the invoice. Nothing is billed quietly and nothing disappears. Held. Not hidden. shows what the person who logged it sees.
What is the difference between holding an hour, alerting on it and blocking it?
An alert is a report. Harvest emails the morning after a budget is crossed, and Toggl Track and Clockify email within the hour, by which time the hour is already on the invoice or in the eaten pile. A block refuses the entry, as Hubstaff does and Productive can on a paid tier, so the work disappears from the record and the person who did it worked for free. A hold saves the hour, marks it, and waits for a named person to decide, so the hour and the decision both survive. Ceed holds.
What is scope creep, and how does Ceed handle it?
Scope creep is work delivered beyond what the agreement priced, without a matching change to the price. It arrives as small requests, quick fixes and “while you’re in there,” and it is usually found at the invoice. In Ceed each client’s agreement carries a budget in hours, and the hour that would cross it is held for approval the moment it is logged. Approved, it goes on the invoice at the rate in the agreement, with a name and a date on the approval. Declined, it stays on the record and off the invoice. The long version is The agreement said 40 hours. The month said 47.
What is over-servicing, and what does it cost a firm?
Over-servicing is delivering more hours than a client’s fee paid for and never billing the difference. Ignition’s 2025 survey of 273 agency managers and executives found that 57% of agencies lose $1,000 to $5,000 a month to unbilled work, and that 78% rarely or only sometimes charge for out-of-scope work. Most firms learn their own number when the month is gone. In Ceed the hour that would go over a client’s budget is held for a decision the day it is worked, so over-servicing shows up as a held hour rather than as a thinner month.
How does Ceed work with a flat retainer, when the client never sees hours?
A retainer is a flat fee sized in hours only the firm knows. Ceed keeps that private budget for each client and checks every logged hour against it, so the owner sees the hours behind the fee and the client sees only what the agreement puts on the invoice. A flat retainer invoices as a flat retainer. Nothing about Ceed puts hours in front of a client who bought a retainer to stop thinking about them. They see the fee. You see the hours. is about that budget.
Does Ceed work for hourly billing with a cap, block hours and fixed-fee projects?
Yes. YSecurity itself bills in fifteen-minute increments against a monthly cap, and Ceed was built for that first. A block of prepaid hours, a co-managed client on a monthly hour plan, a project sold at an estimate and a flat retainer are all budgets in hours, and the hour that would cross any of them is held. An agreement priced per user or per seat needs no hour budget, and Ceed leaves it alone.
Who approves a held hour, and what does the person who logged it see?
The account leader, an owner, or whoever the owner names decides, that day. The person who logged the hour sees that the entry is held and what it was for, framed as the client’s budget in question, never as their hour in doubt. The client sees what the agreement puts on the invoice, and hears about the extra before the invoice rather than on it.
Can a held hour be approved inside the budget instead of billed past it?
Yes. Approve it inside the budget and it counts there. Approve it past the budget and it is billed at the rate the agreement names. Decline it and it stays on the record, unbilled. Each answer carries the approver’s name, the date and a reason.
How do staff and contractors log hours in Ceed?
From Slack, in about a minute a day. Each workday Ceed sends one Slack reminder with the hours left per client, and the hours are logged from there. There are no timers and no screenshots, and everyone sees their own hours. The same entries produce the invoice, the contractor’s payout statement and the margin per client, so there is no second sheet to reconcile.
Is Ceed employee monitoring software?
No. Ceed watches each client’s budget, not the person. One Slack reminder a day, no timers, no screenshots, and everyone sees their own hours. A 2025 Buddy Punch survey of 534 non-management workers in the United States found that 30% feel time tracking is surveillance and 47% want access to their own records. Ceed is built for the second number. Every hour a team member works counts, and the only question is who pays for it. That one belongs to the owner.
Invoices, payouts and the close
How does Ceed compute an invoice?
From the agreement. A client’s agreement in Ceed carries the retainer or the monthly cap, the budget in hours, the rates by role, the rounding, the discounts, any yearly escalator and any equity taken as payment, versioned, with the signed paperwork attached to the version. Ceed computes the invoice from those rules and the approved hours, so the rate on the invoice is the rate in the agreement or an approved change with a name and a date on it. A month cannot bill until each person who logged hours has marked their month complete.
Can Ceed record equity or shares taken as payment?
Yes. Shares taken as fees show on the invoice and in the record at the value the firm and the client agreed, and they count in the margin per client. No other tool on the comparison page has that row.
Does Ceed pay contractors and calculate commissions?
Ceed computes the contractor’s payout statement and the commission from the same hours the invoice used, so the invoice, the payout and the commission agree without a second sheet. Commissions follow the firm’s own policy and can be gated on the client’s rating. The firm’s bank or payment rail executes the payout from Ceed’s statement, and its payroll provider pays its employees.
Does Ceed show margin per client?
Yes, every morning. Revenue, cost and margin for every client are computed from the booked hours, the rates by role and the cost of the people who worked them, and never extrapolated. They are visible to the owners and to whoever they name, and to nobody else, enforced on the server. Promethean Research found in 2026 that only 59% of digital agencies track margin by project. When the month closes, the margin is frozen with it.
What happens when a month closes, and what if a client disputes an invoice after?
The invoices, the statements and the margin for that month are frozen as a record, on an append-only audit chain, and nothing in it changes after. Every edit before the close sits on a trail with a name and a date. A dispute forty days later does not reopen the month. The correction is made in the open month, on the record, with who made it and why. Closed means closed.
Does Ceed connect to QuickBooks, Xero, Slack, Ignition or a project tool?
Slack is built and is where hours are logged. Invoices and statements come out of Ceed as documents for the ledger the firm already uses. Ignition, Anchor, ConnectWise, Autotask and the project tools stay where they are, and Ceed is the record they all work from.
Does Ceed collect payments or chase late invoices?
Payment terms live in the agreement and on the invoice, and the invoice is the firm’s to send and to follow up. What Ceed does is remove the surprise that starts most disputes: every over-budget hour was approved before it was billed, and the invoice matches what the client signed. The client paid late. The invoice was later. is about the rest of the wait.
Can a firm bring its own spreadsheets into Ceed?
Yes. Ceed Intelligence reads them: the people list, the W-2s and 1099s, the client list and the agreements, the timesheets and the invoice books. It proposes what it found, the firm confirms, all at once or row by row, and every record it added says so and opens the run that added it.
Price and access
How much does Ceed cost?
0.1% of what a firm invoices. No seats, no tiers, no minimum and no implementation fee. Invoice $200,000 in a month and pay $200. A month a firm invoices nothing costs nothing, and the rate never moves.
Why does Ceed charge a share of invoices instead of per seat?
Because the fee should rise and fall with the firm. A month a firm invoices nothing costs nothing, adding a person costs nothing, and the rate never moves. The rest of the field prices by the seat or the tier: $4 to $18 a seat at the time trackers, $39 to $499 a month by tier at Ignition, $5 a payment at Anchor, and per seat with minimums and implementation fees at the suites, as of 11 September 2026 on the comparison page.
Is there a minimum, a setup fee or a tier to pick?
No. 0.1% of what the firm invoices is the whole price. There are no seats to count, no tiers to choose between, no minimum in a quiet month and no implementation fee. That is the pricing page.
Which kinds of firms use Ceed?
Firms that sell their team’s time, from the day a second person logs an hour to a client, up to about fifty people. Ceed has a page for each of nineteen kinds: IT managed service providers (MSPs), security MSSPs, value-added resellers (VARs), IT consulting firms, security consultancies, software development shops, data and AI consultancies, staff augmentation firms, defense contractors, engineering firms, healthcare staffing, management consulting, accounting and fractional CFO practices, fractional executives, professional advisors, coaches, marketing and creative agencies, law firms, and global consulting firms. Each is under Industries.
Is Ceed for a fractional executive with two contractors?
Yes. Ceed is built for the day a second person, employee or contractor, logs an hour to a client. A fractional CFO, CISO, CMO or CTO with two contractors is exactly that firm. The principal needs to know what each retainer is costing, to pay the contractor from the same hours the invoice used, and an invoice that matches the agreement. At 0.1% of invoices, a practice invoicing $30,000 a month pays $30.
How does a firm sign up for Ceed?
With a work Google account. Sign up, and the first sign-in creates the firm. There is nothing to pay until its first invoice. Ceed charges 0.1% of what the firm invoices, so a month with no invoice costs nothing. There is no demo and no sales call. Questions go to hello@ceed.so and a person replies.
Is there a demo or a sales call?
No demo, no sales call and no form. The home page shows the product’s own screens, the held hour, every client’s budget this morning and the invoice computed from the agreement, and a firm signs up with a work Google account to see them with its own numbers. Questions go to hello@ceed.so and a person reads them and replies. The product itself is the conversation.