Capability
What we look after
Six things we run for you, to targets we publish and report against every month.
Modern Workplace
Every user, every device and every policy standardised under a single security standard.
- Managed Microsoft 365 and Google Workspace
- Identity protection and MFA enforcement
- Patch management and application governance
- Monthly compliance-ready reporting
- Unlimited remote support included
Security & Compliance
Continuous threat visibility, governance and the monthly evidence your auditors and insurers ask for.
- Managed security monitoring
- Endpoint detection and response
- Audit trail and log retention
- Access and configuration reviews
- Evidence packs for audit and insurance
Secure Infrastructure
A hardened network foundation that stays hardened, with drift detected rather than discovered.
- Secure network architecture
- Monitored firewalls, switches and wireless
- Configuration drift detection
- Firmware and security patching
- Quarterly resilience reviews
Data Protection
Independent, immutable backup with recovery proven by testing rather than assumed.
- Cloud backup for mail, files, sites and collaboration
- Independent, immutable storage
- Defined retention policies
- Recovery and restore testing
- Backup integrity reporting
Services & Connectivity
Every line and handset on one supplier, one bill.
- Business mobile plans
- VoIP phone systems
- Broadband and leased lines
- DNS, domain and hosting
- Integrated support and billing
AI Integration, Securely
AI that works, and does not open a door you cannot close.
- Data exposure assessment before AI is enabled
- Copilot deployed under controlled conditions
- Business system integration through Keystone
- Permission-aware access and full audit trail
- Ongoing governance as part of your managed service
Assurance
Proving it, not just claiming it
Certification, testing and training — the evidence side of security, run as part of the same service.
Cyber Essentials
Certification achieved, and still valid the following year.
- Pre-assessment gap review
- Remediation of anything that would fail
- Self-assessment submission support
- Cyber Essentials Plus preparation
- Annual recertification managed
Penetration Testing
Controlled testing on your terms, with the findings fixed rather than filed.
- Scoping against your actual risk
- External and internal network testing
- Web application testing
- Prioritised plain-English report
- Remediation carried out
Security Awareness Training
Short online training and simulated phishing, with reporting that shows where the risk sits.
- Baseline assessment of current risk
- Short online courses, minutes at a time
- Simulated phishing campaigns
- Automatic follow-up for anyone who clicks
- Reporting for audits and insurers
AI integration
AI that does the work without exposing the data
Our customers are not asking for an AI project. They want AI that does something useful and does not create a problem their auditor will find later. We are a security-first managed services provider, so we do it in that order — assess, secure, then deploy.
AI does not create new data risks. It exposes the risks that already exist.
Method
How we work
Assess
Document what exists, including the parts nobody wants to discuss.
Standardise
Remove the variation that causes most incidents.
Secure
Apply controls and prove they are working.
Operate
Run it day to day against agreed measures.
Improve
Review quarterly with real data, not a slide.
Then round again — reviewed quarterly
Service desk
Every ticket has a fix target, not just a response target
Every ticket gets a priority when it is raised, and each priority carries both a response target and a fix target. These are our standard service desk targets, and we report against them every month.
The service desk is UK based. You speak to the people who look after your systems, not a queue that hands you on.
Standard targets
- Priority one, a fault stopping the business — answered in 1 hour, fixed in 4
- Priority two, a fault stopping a person or a team — answered in 4 hours, fixed in 24
- Priority three, degraded but working — answered in 8 hours, fixed in 48
- Priority four, requests and changes — completed within 5 working days
Featured case study
AWS spend cut by a third, platform properly separated
Monthly AWS spend reduced by around a third, a product platform separated so development no longer shares space with live customer workloads, and a Windows and macOS estate across three continents brought under one standard.