Security reviews & risk assessments
Independent reviews of your current security, the information you hold and the threats that matter to you. We turn the findings into a practical, prioritised plan rather than a long list of theoretical problems.
Services
Security that fits the organisation.
We help organisations understand where their real risks are and put proportionate safeguards in place. Our work covers technology, people, suppliers, policies and governance — because effective cybersecurity is never just an IT problem.
Security strategy & advice
Support with security architecture, technology choices, policies, suppliers and governance. We bridge the gap between technical controls and the people who actually have to work with them.
Training & awareness
Engaging, plain-English sessions built around the risks people encounter in real work. Training can be tailored for journalists, production teams, managers or an organisation as a whole. And because we ban unexplained jargon, we offer £20 to anyone in an awareness session who catches us using it.
Data protection
Practical help understanding what personal data you hold, how it moves through the organisation and where unnecessary risk can be reduced. Compliance matters, but good data protection should also simplify how an organisation runs.
Standards & assurance
Certifications can be worthwhile, but they’re only one element in effective cybersecurity. We never recommend them for their own sake – and we always choose controls and standards that match the way an organisation works.
Ongoing support
Security is not a one-off exercise. We can provide continuing advice, periodic reviews and support when circumstances change or a specific security problem arises.
Cyber Essentials
Useful baseline security
Cyber Essentials provides a practical baseline for common security risks. We can help assess readiness, address gaps and prepare for certification where it makes sense. Certification is not a substitute for managing wider risks.
Our approach
Advice, not products.
We don't sell security software or hardware and we're not tied to particular vendors. Our job is to understand the problem, explain the risk clearly and recommend solutions that are appropriate to the people who will use them.
Sometimes that means new technology. Often it means configuring what you already have properly, simplifying a process or changing a working practice.
Talk to us about security →