Security assessment & hardening
A structured review of accounts, devices, email, network and backup against recognised baselines — then the fixes, not just a scary report.
Service — Security
Security that fits your business — not fear-based selling.
Most breaches start with a phished password, an unpatched laptop or a backup that never worked. We fix the fundamentals first, then build up — with controls you can see working.
What's included
Layered protection, built in the right order
Endpoint protection & patching
Modern endpoint defence (EDR) on every device, plus the unglamorous work that stops most attacks: updates applied everywhere, on time.
Email security & phishing defence
Advanced filtering, spoofing protection (SPF, DKIM, DMARC) and link protection — because email is where most attacks begin.
MFA & access control
Multi-factor authentication rolled out without staff revolt, admin rights reined in, and leavers’ access provably closed.
Backup & ransomware resilience
Backups that are separated from the systems they protect, encrypted, and — critically — test-restored on a schedule.
Staff awareness & incident response
Short, non-patronising training that changes behaviour, plus a written plan for the bad day: who acts, what happens, who calls whom.
Honest scopeWhat we will and won’t claim
Controls you can verify — claims we can support.
Security marketing is full of theatre. Our family rule is the opposite: we only claim what we can show. You’ll see the policies applied, the patch reports, the restore tests and the phishing-simulation results — your evidence, in your tenant.
- Findings ranked by real risk and cost to fix — not by what’s most profitable to sell
- Alignment with recognised good practice, e.g. Cyber Essentials-style controls, stated precisely
- No certification or compliance claims made on your behalf without the certificate to prove it
- Incident support: contain first, restore second, lessons written down third
Good fit
Who this service is for
Businesses that "never got round to it"
You know MFA and backup need sorting; we make it painless and prove it’s done.
Firms handling client money or data
Practices, agencies and trading businesses whose clients increasingly ask security questions they need good answers to.
Anyone who’s had a near miss
A phished mailbox or ransomware scare is the moment to fix fundamentals — we’ve helped others do exactly that.
Common questions
Security — asked and answered
We’re small — are we really a target?
Small businesses are attacked precisely because attackers assume the fundamentals are missing. The good news: fixing fundamentals is affordable and blocks the vast majority of opportunistic attacks.
Can you help us towards Cyber Essentials?
Yes — we implement the technical controls the scheme requires and prepare you for assessment. Certification itself is issued by the accreditation bodies, and we’re precise about that distinction.
What do we do if we’re being attacked right now?
Call the London office. Containment guidance starts on the phone: isolate affected machines, preserve evidence, and we take it from there.
Will security controls slow my team down?
Done badly, yes — which is why we design for usability: single sign-on, sensible MFA prompts and policies tested on real workflows before rollout.
Start a conversation
Fix the fundamentals before someone finds them for you.
A short call with an engineer — not a sales script. We listen, look at what you have, and give you a clear recommendation with honest pricing.