Practical security for organisations without a security team
Firewalls, endpoint protection, access management, backup and security assessment.
You are probably here because
- Staff share one admin password for everything
- Former employees still have access to systems
- There is no firewall between the office network and the internet
- Nobody has ever tested whether a backup can be restored
Start with the boring controls
Most incidents at small and mid-sized organisations are not sophisticated attacks. They are a shared password, an account that was never disabled, an unpatched machine, or a backup that turned out to be empty.
Fixing those costs very little and prevents most of what actually happens.
What an assessment produces
A written list of what we found, ranked by how much risk it carries and how much effort it takes to fix, with the free and cheap fixes at the top. No jargon and no scare tactics.
Questions people actually ask
Where should a small organisation start?
Accounts and backups, almost always. Unique logins per person, multi-factor authentication where available, removing access when people leave, and a backup you have actually restored from. These cost little and prevent most real incidents.
Do you do penetration testing?
We do assessments and remediation. For formal penetration testing against a defined scope we will tell you honestly whether we are the right fit or whether you need a specialist firm.
Have a technology requirement?
From a single CCTV camera to software that runs a whole institution — tell us what you need and we'll tell you honestly whether we're the right fit.