Services / Security
Security built into
the infrastructure.
Firewalls, endpoint and email protection, hardened servers and backups that survive ransomware: the security that lives in the platform, designed and run by the people who build it.
Security
What we do
Security work that sits inside the infrastructure, alongside your security partner rather than instead of them.
- 01Firewall design and migrationFortiGate, Sophos XG and UTM, WatchGuard, Cisco ASA and Meraki: new designs, replacements and migrations, with the rule base rebuilt rather than copied.
- 02Rule-base reviewsEvery rule checked for who uses it, what it exposes and whether it is still needed, with a cleaned-up policy and a change plan.
- 03Endpoint and email protectionMicrosoft Defender, Trend Micro, Sophos and Bitdefender rolled out and tuned, plus email filtering for Exchange and Microsoft 365.
- 04Server and directory hardeningGroup Policy security baselines, admin tiering, local admin password management and patch levels for Windows Server and Active Directory.
- 05Ransomware resilienceImmutable and offline backup copies, backup networks the user VLAN cannot reach, and a tested order to recover identity, data and applications.
- 06What we leave to specialistsNo SOC, MDR or penetration testing. We work with your security provider and fix what their findings point at.
Technology
Platforms we work with
- FortiGate
- Sophos XG and UTM
- WatchGuard
- Cisco ASA
- Cisco Meraki
- Juniper
- Microsoft Defender
- Trend Micro Apex One
- Sophos Email
- Bitdefender
- Group Policy baselines
- LAPS
- Veeam immutable repositories
Sophos XG Firewall Engineer, Trend Micro Certified Security Expert and McAfee ePolicy Orchestrator Product Specialist; two years as a security engineer before moving into infrastructure.
How an engagement runs
Five steps, written down
Every engagement follows the same steps, with written plans and a rollback for each change.
- 01AssessUnderstand your goals, environment and challenges.
- 02ArchitectDesign the right solution for your needs.
- 03MigratePlan and execute with minimal disruption.
- 04OptimiseImprove performance, resilience and cost efficiency.
- 05SupportOngoing expertise to keep you secure and ahead.
Deliverables
What you receive
Most breaches cross a flat network. Segmenting it is unglamorous work, and the most useful security change most estates can make. Every engagement ends with documents and code you own.
- A firewall rule review with each finding ranked
- A target policy and the change plan to reach it
- Hardening baselines as Group Policy objects
- A backup isolation design
- Notes for your security partner or auditor
Experience
Experience behind it
From the founder’s own project history. Clients are described, not named.
- Retail network transitionReplaced Juniper firewalls and switches with Cisco Meraki for a UK retail co-operative, redesigning the network cabinets on the way.
- MSP firewall estateManaged Sophos XG and UTM and WatchGuard firewalls, plus Sophos email security, across managed service provider customers.
- Security engineeringSupported Trend Micro, Kaspersky, Cisco and Check Point deployments for enterprise customers as a security engineer.
FAQ
Questions we hear
Do you run a SOC or offer MDR?
No. We build and harden the infrastructure, and work with the security provider who watches it.
Do you do penetration testing?
No. We help you scope a test with a specialist, then fix the infrastructure findings it raises.
Which firewall should we buy?
The one your team can run well and your budget supports. We have worked with FortiGate, Sophos, WatchGuard, Cisco and Meraki and do not resell any of them.
Let’s build what’s next
Start a Conversation
Ready to modernise your infrastructure, strengthen your security or discuss a complex project? We’d love to hear from you.