Scoped Work, a Written Price, and Something You Keep.

We're on Microsoft 365, but nobody set it up properly and we don't know what's exposed.

A customer, insurer or tender has asked us security questions we can't answer.

We're moving off Google Workspace, an old mail system, or another provider's tenant.

We've acquired a business and now have two of everything.

We're opening a second site, or half the team has gone permanently remote.

We spend a lot on IT and can't tell whether it's the right amount.

Our internal IT person needs specialist support for one project.

We need Cyber Essentials and don't know how far off we are.

IT Strategy and Roadmap

A current-state assessment, a prioritised risk register and a costed 12 to 24 month plan you can take to a board.

Microsoft 365 Design and Migration

Tenant design, mail and data migration, tenant-to-tenant consolidation, and decommissioning whatever it replaces.

Security Assessment and Remediation

Identity, device, email and data protection reviewed against a defined baseline — then fixed in the order that reduces risk fastest.

Device Management

A managed device standard built once — enrolment, configuration, encryption, patching and application delivery — so every laptop starts the same.

Cyber Essentials Readiness

A gap analysis against the scheme's current requirements and the remediation needed to be ready for assessment. We prepare you; we are not the certifying body.

Secure Remote Access

Replacing legacy remote access with something built for how the team actually works now, rather than how it worked in 2019.

Server and Virtualisation Work

Host refresh and consolidation, virtual infrastructure design and migration, and moving workloads off ageing hardware. Including the single old server nobody wants to touch.

Backup and Recovery Design

Deciding what must be recoverable and over what period — then proving it can be, rather than assuming it.

Documentation

The environment record most businesses discover they never had — and the reason the next change is cheaper than the last one.

Scoping Conversation

What the problem is, what has been tried, the deadline and the constraints. No charge and no obligation.

Discovery and Assessment

A structured review of the relevant environment. You receive findings, prioritised by risk and by effort to fix.

Options and Recommendation

Each option carries cost, effort, risk and what happens if nothing is done. You decide; we are clear about which one we would choose.

Statement of Work

Scope, deliverables, assumptions, exclusions, dependencies, timeline and price — agreed in writing before anyone starts.

Delivery

Agreed checkpoints and proper change control. A change in scope is quoted and approved, never absorbed quietly and invoiced later.

Handover

Documentation, a configuration record and a walkthrough. Where work is charged by effort, an effort log evidencing the time.

Fixed Scope

For well-defined work — assessments, migrations and defined remediation packages. One price, agreed up front, with the exclusions written down so there are no arguments later.

Time and Materials

Where the scope genuinely cannot be known in advance — investigation and diagnostic work, mostly. Always with an agreed cap and reporting against it, so an open-ended engagement is not an open-ended invoice.

Retained Advisory

Ongoing strategy input for businesses that want a technical voice in the room a few times a quarter. Typically taken alongside a support agreement.

The Report Is Yours, Even If You Walk Away

Assessments and reports are delivered whether or not you proceed with the remediation, and they are written so another provider can act on them. We would rather you had a good decision than a dependency on us.

A Phased Security Remediation Programme for a Multi-Entity Group

A group of related operating companies with inconsistent security across entities. The work was structured in tiers, sequenced so the highest-risk items were closed first, and delivered against a documented effort log the client could audit.

The outcome was a single security baseline across the group and a prioritised register of what remained, with cost attached to each item.

Presented anonymously. No client configuration, weakness or exposure detail is published here or anywhere else on this site.

Secure Remote Access and an Environment Nobody Had Written Down

Aflame Fire Services Limited, a Leicester fire suppression specialist, came to us with no documentation, ageing devices and licences being paid for but not deployed. We audited the estate, documented it, and configured secure remote access for newly acquired laptops.

Priority findings were closed within days, with no disruption to day-to-day operations. The engagement later became a managed support agreement.