Security help you can sit down with.
We work with businesses that have no security team of their own: firms of five to fifty people who know they should be doing more, and would rather be told the truth than sold a product. We are based in Cardiff, so if a conversation is easier in person, it can be.
Most of this works from anywhere. Some of it does not.
We will not pretend geography decides whether security advice is any good. Most of what we do, from reviewing a cloud tenancy to writing a policy, works just as well over a call, and plenty of our work is for firms nowhere near us.
Where being nearby genuinely helps is the parts involving people and premises: running a training session your staff actually turn up to, walking a site to see what is plugged in, or sitting in the room when a board decides what it is willing to spend. Those go better face to face, and we can do them without putting travel on the invoice.
We are a member of Cyber Wales, the industry network for the sector here, and we are registered with the Information Commissioner’s Office under ZC077967.
Compliance-heavy firms, mostly.
Solicitors
Client confidentiality, the Solicitors Regulation Authority's expectations, and the conveyancing fraud that targets firms handling completion funds.
Accountants
Client financial records, HMRC credentials, and the invoice redirection attempts that arrive every January and every July.
Dental and medical practices
Patient records, the Data Security and Protection Toolkit, and equipment that has to keep working while it is being secured.
Firms bidding for public work
Cyber Essentials is a condition of many public sector contracts, and the deadline usually arrives before the certificate does.
What these have in common is that somebody else, a client, an insurer or a regulator, has started asking them to prove their security. That is usually what brings people to us, and it is a solvable problem.
Three ways in.
Security assessment
A one-off assessment of where you stand, what is exposed and what to fix first.
Priced per engagementCyber Essentials Readiness Sprint
A two-week sprint, priced up front, that gets you ready to pass Cyber Essentials.
Priced per engagementIf you are not sure which, start with the free security check. It takes about two minutes, asks nothing technical, and gives you a report you can act on whether or not you ever speak to us.
Working with us
Yes, where it helps. Training sessions, walking a site and board meetings are better in person, and for firms in and around Cardiff and the surrounding area that costs you nothing extra. Assessment and advisory work is usually done remotely because it is faster that way, not because we are avoiding the trip.
We work across South Wales and the rest of the UK. Anywhere within a reasonable drive we will come to; further afield we agree travel in the quote before you commit to anything, or we do it remotely.
No. We are not tied to a vendor and we do not take commission on the tools we recommend. Where a service needs a specialist, such as penetration testing or round-the-clock monitoring, we bring in a partner we have vetted and manage them for you.
No, and nobody offering consultancy should tell you they do. Certificates come from accredited certification bodies. We get you ready to pass, complete the assessment with you and support you through it.
No. The smallest engagements we do are a single assessment or a one-off training session, and plenty of clients start there and go no further. If the honest answer is that you do not need us yet, we will say so.
Tell us roughly what you have and what is worrying you, and we give you a fixed quote before anything starts. We do not publish prices, and we do not quote hourly for work we can scope.
Not sure where your biggest risks are?
The free two-minute security check gives you a scored report and the next thing to fix.