Services

Testing, monitoring, certification, response.

Every engagement is scoped in writing and priced fixed. You always know what we are doing, when, and what you receive at the end.

Core services

What we deliver, and what you get at the end.

Penetration testing

Automated scanners find the obvious. We find the chained flaws that actually get an attacker to your data.

External infrastructure: internet-facing hosts, VPNs, mail and remote access
Internal infrastructure: assumed-breach testing from inside the network
Web applications and APIs: auth, access control, injection and business logic
Cloud review: AWS, Azure and GCP configuration and identity
Build reviews: laptop and server gold images

Deliverable: ranked findings with reproduction steps, an executive summary, and a free retest once remediated.

Managed detection & response

Most breaches are not sophisticated. They are simply unnoticed for weeks. We watch continuously so that does not happen to you.

Endpoint, server and cloud workload telemetry
24/7 analyst triage, with no unattended alert queues
Detection tuning against your actual environment
Containment actions within pre-agreed authority
Proactive threat hunting
Monthly reporting written for non-technical readers

Deliverable: continuous coverage, a named escalation path, and a monthly review call.

Compliance & certification

Certification should improve your security, not just produce a certificate. We prepare you properly, then support you through assessment.

Cyber Essentials: self-assessment preparation and submission
Cyber Essentials Plus: remediation ahead of the hands-on audit
ISO 27001: gap analysis, ISMS build, internal audit
UK GDPR: data protection and records-of-processing reviews
Supplier assurance questionnaires answered properly

Deliverable: gap analysis, evidence pack, dry-run audit, and support on assessment day.

Incident response

When it has already happened, the first hours decide how bad it gets. Call us and an experienced responder picks up.

Emergency containment and isolation
Forensic imaging and timeline reconstruction
Ransomware triage and recovery planning
Business email compromise investigation
ICO notification and insurer reporting support
Post-incident review, so it does not recur

Deliverable: containment, a defensible forensic report, and a hardening plan.

Not sure what you need?

Start with a security health check.

A short, fixed-price review of your external footprint, patching posture, backup arrangements and identity configuration. It tells you where you actually stand, and what to spend on first.

Ask about a health check

Looking for infrastructure rather than assessment? We also host and rent servers.