Security engineering with evidence, not a dashboard.
Identity hardening, a security information and event management (SIEM) system we run ourselves, vulnerability scanning, phishing simulation, Cyber Essentials Plus readiness and incident response for small and mid-sized firms.
Book a security reviewWhat's included
- Identity: Conditional Access baselines (multi-factor authentication for everyone, legacy authentication blocked, device-code sign-in blocked), break-glass design, admin-account separation, Windows LAPS (Local Administrator Password Solution).
- Email: Mimecast or Microsoft 365 protection, with sender authentication (SPF, DKIM and DMARC).
- SIEM: Wazuh with agents on servers and workstations, syslog from network gear, custom rules, alert-to-ticket.
- Vulnerability scanning with Greenbone; phishing simulation with GoPhish.
- Group Policy security baselines for Windows estates (firewall, Microsoft Defender Antivirus, autorun, macro blocking, update deadlines, local admin control).
- Cyber Essentials Plus readiness: a structured review against the five controls, then the remediation, then the evidence.
- Incident response: containment, credential and session revocation, persistence checks, hardening afterwards.
- Network: UniFi, FortiGate and Palo Alto Networks firewalls, segmented networks, a virtual private network (VPN) mesh with per-client tags.
We map controls to the US National Institute of Standards and Technology Cybersecurity Framework (NIST CSF 2.0), Cyber Essentials and the UK General Data Protection Regulation (UK GDPR), and will show you the mapping on request.
What you can expect
Response targets
These are the response targets in our standard agreement. They are targets, not a signed service-level agreement (SLA): the terms that apply to you are the ones in your contract. Business hours are Monday to Friday, 09:00–18:00.
| Priority | Definition | Response | Resolution target |
|---|---|---|---|
| P1 Critical | Business operations halted (email down, ransomware in progress, directory outage) | 1 business hour | 4 business hours |
| P2 High | One significant function affected (a server down, one team cannot work) | 4 business hours | 1 business day |
| P3 Normal | Single user or non-critical issue | 1 business day | 3 business days |
| P4 Low | Information or change requests | 2 business days | 5 business days |
Critical incidents out of hours are covered by agreement in your contract.
Tools we run
Tell us what isn't working.
A 30-minute call, no slides. We ask about your estate, your auditor if you have one, and what you would like to stop worrying about.
Book a security review