Services

Due diligence, board counsel, consultancy, compliance support and security architecture.

Penetration testing, application security, threat modelling, product security and AI security.

Managed services, cloud infrastructure, automations, endpoints and identity, run month after month.

Framework programmes that survive audit: ISO 27001, FCA, GDPR, DORA, NIS2 and more.

Use AI with confidence. We test your models, LLM apps and data pipelines for prompt injection, data poisoning and leakage, and set the governance regulators expect.

Find and fix flaws in your software before attackers do. Code and dependency scanning, API and authentication testing, and secure coding built into how your team already ships.

Your build and release pipelines hardened against the OWASP Top 10 CI/CD Security Risks: secrets, dependencies, runners and artefacts locked down without slowing releases.

Secure cloud platforms built and migrated as code on Azure, AWS and Google Cloud. Landing zones, planned migrations, modernised workloads and costs you can explain.

Find out which weaknesses an attacker could actually exploit in your networks, applications and cloud, and get a prioritised list of what to fix first, followed by a retest.

Security built into the software and connected products you sell, from design requirements and release gates to SBOMs, vulnerability disclosure and the evidence your customers ask for.

Cyber risk management that gives you a prioritised risk register, an agreed risk appetite and treatment plans your board can act on, aligned to ISO 27001 and NIST CSF 2.0.

Find out how strong your security is today and what to fix first. A point-in-time review of your controls, benchmarked against recognised frameworks, with a prioritised roadmap.

Find out how a system could be attacked while it is still on the whiteboard. You get a threat model, prioritised mitigations in your backlog and a method your engineers can reuse.

Know which weaknesses in your estate attackers are most likely to use, and get them fixed first. Continuous scanning, risk-based prioritisation and verified remediation.

Your systems share data and your routine processes run themselves. Workflow automation and systems integration that are monitored, secured and maintained.

Your Azure, AWS and Google Cloud estates stay configured securely, month after month. Landing zones, guardrails and continuous posture management, with misconfigurations found and fixed.

Your laptops, phones and tablets stay enrolled, encrypted and patched, from first boot to secure disposal. Lost devices are locked or wiped, and only healthy devices reach your data.

Your Google Workspace stays secure and well run. Admin console hardening, 2-Step Verification, device management, app access control and Google Vault for UK teams.

The right people reach the right systems, and leavers lose access on the day they go. Multi-factor authentication, single sign-on, lifecycle automation and privileged access, designed and run for you.

Your users get fast help and your systems stay patched, monitored and documented. Service desk, infrastructure operations and on-site support under one agreement.

A Microsoft 365 tenant that is hardened, well run and ready for audit. Identity, email, data and device controls configured properly, plus day-to-day administration and user support.

Your staff learn to spot and report phishing, fraud and social engineering. Phishing simulations, role-based training and progress you can measure and show your board.

Bespoke websites your team can update, plus web apps, portals and integrations when you need them. Designed, built and supported under one agreement.

Put the CIS Critical Security Controls and CIS Benchmarks to work in your organisation. A prioritised plan, hardened systems and evidence you can reuse across audits.

Pass Cyber Essentials and Cyber Essentials Plus first time. We find the gaps, fix them and guide you through certification, then keep the controls working all year.

DORA compliance support for UK financial firms and ICT suppliers serving the EU. Gap analysis, remediation and the evidence your EU regulators and clients expect.

Show the FCA your firm can stay within its impact tolerances. Operational resilience and cyber evidence for authorised firms, built from real testing rather than paperwork.

UK GDPR compliance you can evidence: data mapping, DPIAs, breach readiness and technical measures that stand up to ICO questions.

Get ISO 27001 certified with an information security management system your team can run. Gap analysis, risk assessment, Statement of Applicability and audit preparation.

NIS2 compliance support for UK organisations with EU operations or EU customers. Gap analysis, incident reporting readiness and supply chain evidence.

NIST Cybersecurity Framework 2.0 services for UK organisations. Maturity assessment, a funded roadmap and control evidence mapped to ISO 27001.

PCI DSS compliance support for UK merchants and service providers. Scoping, SAQ guidance, remediation and annual revalidation against v4.0.1.

Security architecture and design that builds protection into your systems from the start. Zero trust roadmaps, reference architectures and design reviews across cloud, identity and network.

Prove your security to customers, auditors, insurers and investors, with tested controls, answered questionnaires and an evidence pack you can reuse.

Independent cyber security advice for your board. Clear risk reporting, briefings on regulation and director duties, and crisis exercises, so your directors can make and defend decisions.

Meet the frameworks your customers and regulators expect, and stay there. Gap analysis, policies, evidence packs, audit preparation and control monitoring across overlapping standards.

Cyber security consultancy that gives you a clear plan and the help to deliver it: strategy, roadmaps, maturity assessments, policy and incident readiness, scoped to the question you need answered.

Senior technology and security leadership without a full-time hire. A part-time CISO, CTO or CIO who owns your strategy, reports to your board and builds your team.

Know what you are buying before you sign. Independent technical due diligence on a target's security, systems, code and people, with findings you can price into the deal.