Network security and resilience
Security is not a product you install. It is a set of decisions you can defend when someone asks why.
Most organisations do not need another dashboard. They need fewer ways in, clearer boundaries, current patches, credentials that are not shared, and a realistic answer to what happens if the worst case occurs.
We assess the estate, reduce the attack surface, and design the controls around how the business actually operates. Every recommendation is tied to a risk and a concrete change — with the evidence to show it was done, and a recovery path that has been exercised rather than assumed.
Where this usually starts
01
Exposure nobody can see
Services reachable from the internet that should not be, default credentials, expired certificates, unpatched appliances. We find them, close them, and leave a monitoring baseline behind.
02
A plan that has never been used
Incident and recovery documents written for compliance rather than reality. We rewrite them around the systems in use and rehearse the parts that matter.