Stage 1 · Inventory
Every device and what it runs.
Our services, in detail
Four services aimed at the risks that actually cause incidents.
Program 01 · Mostly doing, not buying
Cyber Essentials readiness
Most small organisations fail on the same two things: unsupported software still in use, and everyone working as a local administrator. Neither needs a purchase. We work through the controls, fix what is fixable, and tell you honestly when you are not ready rather than submitting an assessment that fails.
Stage 2 · Gap list
Against the five controls.
Stage 3 · Fix
Mostly configuration, not purchases.
Stage 4 · Refer
To a licensed Certification Body.
Stage 1 · Accounts
Including leavers still enabled.
Stage 2 · Admin rights
Separated from daily use.
Stage 3 · Patching
Made routine, not occasional.
Stage 4 · Unsupported
Named, with a plan to replace it.
Program 02 · Admin rights first
Security review and patching
The dull controls prevent most incidents: keep software patched, remove administrator rights from daily accounts, turn off what nobody uses, and delete the accounts of people who left two years ago. We go through those rather than selling a product that sits on top of the problem.
Program 03 · A restore you have seen
Backup and recovery testing
Almost everyone has backups. Far fewer have ever restored one, and ransomware encrypts backups it can reach. We test a restore in front of you, check that at least one copy is genuinely offline or immutable, and give you an honest recovery time rather than a reassuring one.
Stage 1 · What is covered
And what nobody realised was not.
Stage 2 · Restore test
Performed, with you watching.
Stage 3 · Offline copy
Verified as actually unreachable.
Stage 4 · Recovery time
Measured, then written down.
Stage 1 · Training
Short, practical, no jargon.
Stage 2 · Simulation
To build reporting, not to shame.
Stage 3 · Reporting route
One obvious way to raise it.
Stage 4 · Drill
What the first hour looks like.
Program 04 · Reporting, not blaming
Staff training and phishing
Simulations used to catch people out teach staff to hide mistakes, which is the opposite of useful. We run them to build the habit of reporting quickly, because the gap between a click and a report is what decides how bad an incident becomes.
Going for Cyber Essentials?
A free first call on where you actually stand against the five controls.