Microsoft 365 Security Assessment & Hardening
Turn the Microsoft 365 you already pay for into a properly secured tenant: MFA everywhere, Conditional Access, Defender, backups checked, Secure Score up.
Learn more →
Specialist IAM, UEM & security architecture for growing businesses
Identity. Devices. Security. One Zero Trust architecture.
We design, migrate and secure modern identity and endpoint environments across Okta, Microsoft Entra ID, Intune, Jamf, Kandji, Microsoft Defender and Sentinel. Senior architecture experience, delivered with practical scope and fixed-price assessments.
20+years in IT & security
Fixedprices, no surprises
RemoteUK company, UK clients
ExpertMicrosoft certified architect
Services
Identity, endpoints and security operations—designed to work together
Choose a fixed-price assessment, a transformation project or an ongoing security retainer. We can also work alongside your existing IT provider.
Intune & MDM Setup Service — Windows, Mac, iOS, Android
Every laptop and phone enrolled, encrypted, patched and wipeable — Windows, Mac, iPhone and Android — with new starters set up before the box is opened.
Learn more →
SSO & Passwordless Setup — Entra ID, Okta
One login for every app, passwordless where it counts, and leavers cut off the same day — on Entra ID, Okta or Google Workspace.
Learn more →
Dual-Layer IAM Architecture — Okta and Microsoft Entra ID
Use Okta and Entra ID together with deliberate separation of responsibilities, app access and Microsoft security controls.
Learn more →
MDM & UEM Migration Projects for Mac and Windows
Move device fleets between MDM platforms with a staged plan, compliance mapping, user communications and tested recovery steps.
Learn more →
Microsoft Defender XDR Deployment & Tuning
Connect endpoint, identity, email and cloud signals in Microsoft Defender XDR with practical policies and response workflows.
Learn more →
Microsoft Sentinel SIEM Design & Optimisation
Build useful security monitoring with intentional log sources, tuned analytics, clear ownership and cost-aware retention.
Learn more →
Cyber Essentials Consultant — Certified in Days
Need Cyber Essentials for a tender, a customer or your insurer? Gap assessment, fixes applied on Microsoft 365 and your devices, and the self-assessment completed with you — in days.
Learn more →
vCISO Service — Your Security Lead, Part-Time
A senior security lead for a few days a month: owns your policies, audits, insurer and customer questionnaires, and picks up the phone when something goes wrong.
Learn more →
Professional experience
Experience across technology and enterprise environments
Reference architecture
Trust is checked at every layer
A practical Zero Trust flow connects identity, access policy, device health, threat detection and investigation.
- IdentityOkta + Entra ID
- Conditional AccessContext and risk
- Device complianceIntune · Jamf · Kandji
- Detection & responseMicrosoft Defender XDR
- Security analyticsMicrosoft Sentinel
The right design depends on your licences, applications and operating model. We map the controls before recommending implementation.
Packages
Start with a Health Check, or go straight to the fix
Most clients start with the two-day Health Check. Prices are fixed and quoted up front.
2 days
Security Health Check
£1,250
Any business on Microsoft 365 or Google Workspace that wants to know where it stands.
5 days
Microsoft 365 Hardening Sprint
from £3,500
Up to ~150 users. Larger tenants quoted.
3–4 days
Cyber Essentials Ready
from £2,500
Businesses that need the certificate for a tender, a customer or insurance.
Free download
The Microsoft 365 security checklist
Ten settings that stop most attacks on businesses your size, each with why it matters and how to check it yourself. No email address required.
What it covers
- MFA on every account, enforced
- Conditional Access instead of Security Defaults
- Legacy authentication blocked
- Admin accounts separated and reduced
- Email authentication (SPF, DKIM, DMARC)
- Devices encrypted, patched and managed
- Sharing, guests and forwarding under control
- Backups tested, not assumed
Architecture experience
Enterprise architecture, made practical for growing businesses
Our background spans complex energy programmes, UK local government and global technology environments. We bring that architecture experience to SMEs through proportionate designs, clearly scoped projects and handovers your existing IT provider can support.
- Senior-led throughout: the architect who scopes the work does the work
- Fixed prices and fixed scope; you know the cost before we start
- Uses the Microsoft 365, Google or Apple licences you already pay for wherever possible
- Everything documented in plain English so your IT partner can support it
- Remote-first from the UK; on-site by arrangement
Most breaches we see in growing businesses were preventable with settings already included in the licence. Nobody had switched them on.
How it works
Simple, fast, no lock-in
Free call
30 minutes to understand your setup and what is worrying you. We tell you what we would fix first, free.
Health Check
Two days, fixed price. A scored report and a prioritised list you can act on with or without us.
Fix
A fixed-price sprint: hardening, device management or identity — delivered in days with your staff kept informed.
Keep it that way
Optional vCISO retainer: monthly review, questionnaires and audits owned, someone to call when it matters.
Who we work with
Businesses of 20 to 500 people
Professional serviceslaw, accountancy, consultancies
Engineering & technologysoftware, SaaS, engineering firms
Healthcare & clinicsprivate practices, dental, care
Charities & educationtrusts, schools, membership bodies
Finance & fintechbrokers, advisers, startups
Platforms:
Microsoft 365Entra IDIntuneDefender XDRMicrosoft SentinelWindows AutopilotJamfKandjiApple Business ManagerAndroid EnterpriseOktaGoogle WorkspaceCyber Essentials
Not sure where your business stands?
Book a free 30-minute call. We will tell you the three things we would fix first — no report to buy, no hard sell.