Services
Ten disciplines that we practise properly rather than list optimistically. Take one of them, or let us join the pieces up for you.
A site is the first security signal a customer reads. We make it look like the company you actually are.
Hosting is not a commodity when the site carries your certificates, your forms and your reputation.
Business email on your own domain, configured so it arrives and so nobody can send as you.
Move private keys out of configuration files and into hardware you can hold in your hand.
A certificate authority is easy to install and hard to run. We do the part that comes after installation.
Keycloak does almost everything out of the box. The last ten percent, the part that matches how your organisation actually signs in, is where we come in.
Most breaches we are called in to review begin with a file that moved the wrong way.
Automate the handoffs between your systems instead of hiring around them.
Product engineering with the security model designed in on day one, not bolted on at go-live.
Native Android and iOS applications, or one Kotlin Multiplatform codebase, working with your security model rather than around it.
Engagement
Whichever you pick, the deliverable includes documentation your own engineers can act on without calling us first.
Fixed fee, 2 to 3 weeks
We review what you have — PKI, transfer channels, hosting, application security — and hand back a prioritised, costed remediation plan.
Fixed scope, milestone billed
We design and deliver the system: a root CA, an SftpS deployment, an automation platform, a web or mobile product.
Monthly retainer
We keep it running: monitoring, patching, certificate lifecycle, incident response and a named engineer who knows your estate.
Describe the problem in plain language. We will tell you which discipline it belongs to, even if the answer is that you do not need us.
