21 services
What we are engaged to do
Three practices. Testing and assessment on one side, investigation and response on the other, and the work that keeps an organisation standing in between.
Security
Assess and strengthen
Test what you already have, find what is exposed, and prioritise the fixes that reduce real risk across infrastructure, applications, cloud, identity, and endpoints.
01
Cybersecurity Consulting & Advisory
Strategic security guidance, programme development, and expert advisory for organisations building or improving their security capabilities.
02
Cybersecurity Audits & Security Reviews
Systematic review of controls, configurations, policies, and practices to find gaps and measure effectiveness against established frameworks.
03
Vulnerability Assessment & Penetration Testing
Identify and validate weaknesses through structured vulnerability assessment and manual penetration testing of your systems and applications.
04
Network Security Assessment & Testing
Evaluate network architecture, segmentation, device configurations, and perimeter controls to identify exposure and lateral movement risk.
05
Web Application & API Security Testing
Manual and automated testing of web applications and APIs for authentication, authorisation, injection, and business logic flaws.
06
OT Security Maturity Assessment
Assess the security posture of operational technology and industrial control systems so physical processes stay safe and available.
07
Mobile Application Security Testing
Assessment of iOS and Android applications: local data storage, communication channels, authentication, and runtime protections.
08
Cloud Security Assessment & Testing
Review of cloud configurations, access controls, storage policies, and security practices across AWS, Azure, GCP, and other platforms.
09
Active Directory & Identity Security
Assess Active Directory configuration, trust relationships, privilege escalation paths, and identity controls to reduce credential risk.
10
Endpoint Security Assessment & Hardening
Evaluate endpoint configuration, security agent coverage, hardening baselines, and local privilege controls across workstations and servers.
Investigation
Establish what happened
Forensic examination, incident response, and threat hunting. Determine the scope, reconstruct the timeline, and document the result as evidence.
11
Digital Forensics & Cyber Investigations
Structured forensic examination of digital evidence to establish facts, reconstruct events, and support organisational decisions.
12
Mobile Phone Spyware Detection
Is someone else listening to your conversations? Detection of Pegasus, stalkerware, and stealth monitoring tools on iOS and Android.
13
Digital Forensics & Incident Response
Combined forensic analysis and incident response: investigate the incident, determine scope, and guide recovery while preserving evidence.
14
Incident Response & Breach Investigation
Response support during an active incident, including containment guidance, forensic triage, and breach scope determination.
15
Compromise Assessment & Threat Hunting
Proactive search for indicators of compromise, persistent threats, and unauthorised activity that existing detection has missed.
16
Malware Analysis & Reverse Engineering
Static and dynamic analysis of suspicious files to determine behaviour, capability, persistence mechanisms, and indicators of compromise.
Resilience
Prepare for the next one
Detection and response maturity, adversary simulation, compliance programmes, and security leadership without a full-time hire.
17
Ransomware Investigation & Readiness
Test your readiness for ransomware, investigate active incidents, and build response playbooks and recovery strategies.
18
Threat Intelligence & Attack Surface Monitoring
Monitor your external attack surface, track relevant threat actor activity, and surface exposed assets and leaked credentials.
19
Security Operations, SIEM & SOC Consulting
Design, evaluate, and improve security operations: SIEM deployment, detection engineering, and SOC process maturity.
20
Red Teaming & Adversary Simulation
Objective-based adversary simulation that tests detection and response against realistic attacks on your critical assets.
21
Cybersecurity Compliance, GRC & vCISO
Compliance programme development, governance and risk management, regulatory alignment, and virtual CISO support.
Not sure which
Describe the situation instead
If you are not certain whether you need an assessment, an investigation, or something in between, say what has happened or what you are worried about. We will tell you which engagement fits, and whether it needs to happen now.