We help you set up and harden the systems everything else runs on: networks, cloud, identity, devices and backups. The work is done alongside your IT provider and checked by the same people who test for a living.
What we cover
Most breaches we see start with something basic: an exposed service, an account without MFA, a backup nobody had restored. These are the areas where getting the foundations right matters most.
Networks and firewalls
Segmentation so one compromised laptop can't reach everything, firewall rules that match what you actually need, and secure remote access.
Cloud and email
Reviews and hardening of your cloud accounts, storage and email platform: who has access, what's exposed to the internet, and what's logged.
Identity and access
MFA everywhere it matters, single sign-on, separate admin accounts and a clear process for joiners and leavers.
Devices and patching
Secure baseline configuration for laptops and servers, endpoint protection, and a patching routine that actually keeps up.
Backups and recovery
Backups an attacker can't delete, and restore tests so you know how long getting back on your feet would really take.
Logging for detection
The right logs, kept long enough, and sent to Wazuh or Elastic SIEM, so an incident can be seen and investigated.
How a project runs
We work with your IT provider, not around them. Changes are agreed in writing before anything is touched.
Assess
How things are set up today, what's exposed and what your customers, insurer or auditor expect.
Plan
A prioritised list of changes, agreed with you and your IT provider, with the risk of each one explained.
Harden
We make the changes with your team, or guide your IT provider through them, in agreed windows.
Verify
Our Red team checks the result from an attacker's point of view, so you know the fixes work.
Built by people who break in
Most hardening guides are written by people who've never had to get around them. Ours come from penetration tests and incident response: we harden against what we see attackers actually use.
- Changes documented, so your IT provider can maintain them
- Evidence ready for Cyber Essentials, questionnaires and insurers
- A retest from our Red team once the work is done
- Monitoring through a Blue retainer if you want it afterwards
Want a second pair of eyes on your set-up?
Tell us what you run and what's prompted the question. We'll suggest where to start.