Cybersecurity services for small and mid-sized businesses
Twenty services, grouped the way most work runs: assess where you stand, fix what matters, and keep senior advice on hand, plus a few specialist capabilities. Most businesses start with an assessment, often the Cybersecurity Health Check.
Assess
Find out where you stand
Fixed-scope reviews that show what is exposed, what matters and what to fix first.
Cybersecurity Health Check
A fixed-scope review of identity, email, backups, endpoints and remote access, ending in a short list of what to fix first.
Microsoft 365 Security Tune-Up
A review of how your tenant is configured, with specific changes to make accounts, email and shared files harder to break into.
Cyber Insurance Readiness
A gap review of your controls against typical insurer requirements, so renewal questions get honest answers.
Ransomware Readiness
An assessment of whether your backups, access controls and response plan would hold up if ransomware got in.
Backup & Disaster Recovery Assessment
A check that your backups cover what matters, are protected, and can be restored within a time the business can live with.
Business Email Compromise Assessment
A review of the account, mailbox and payment-process weaknesses behind business email compromise.
AI Security Assessment
A review of how your people use AI tools, what data goes into them and which controls and policies you need.
Vendor Security Assessment
A review of a vendor's security controls, the access they would have and what your contract should require.
Fix
Fix what matters
Guidance for your IT provider on fixing what matters, in priority order, then a check that it worked.
Remediation Guidance & Retesting
Guidance for your IT provider or team on fixing the highest-priority findings, followed by a retest of the original findings.
Security Architecture
Practical security architecture for cloud, identity and networks, with a roadmap your team or IT provider can build from.
Advise
Keep senior help on hand
Security leadership, architecture and governance that continue after the assessment.
vCISO Services
Part-time, senior security leadership covering strategy, risk, policy and reporting to leadership.
Virtual Security Architect
Independent security architecture expertise for projects and technology decisions, working alongside your existing IT provider.
Security on Call
The security questions that arrive without warning, answered by someone who already knows your environment.
GRC Advisory
Risk assessments, policies, control mapping and audit readiness against the frameworks your customers and regulators ask for.
AI Governance & Assurance
An ISO/IEC 42001 AI management system and NIST AI RMF controls, with the evidence an auditor, customer or board will ask for.
AI Risk & Compliance Advisory
AI risk and impact assessments, responsible-AI programs and readiness for the EU AI Act and Canadian guidance.
Specialist
Specialist capabilities
Offensive testing of applications and AI, industrial systems, and secure data destruction.
Penetration Testing
Manual, consultant-led testing of web applications, networks, cloud, mobile apps and APIs, reported by business risk.
AI Application Security Testing
Security testing of LLM applications, chatbots, RAG systems and AI agents, mapped to the OWASP Top 10 for LLM Applications.
OT / ICS Security
IEC 62443-aligned assessments and programs for operational technology, planned around safety, uptime and industrial constraints.
Data Sanitization
Documented media sanitization to NIST SP 800-88, with chain-of-custody records and a certificate for every asset.
Not sure where to start?
Book a free 45-minute call. We will tell you which service fits, and which ones you can skip.
Book a Security Consultation