Security that holds up under pressure.
Find out where you're exposed, fix what matters first, and be ready when something goes wrong. Hands-on security work, from reviews and hardening to live incidents and compliance.
The short version, in a few minutes.
A plain-English walkthrough of this page. Prefer reading? Everything in the video is covered below.
You might be here because…
- We've never had a proper security review, and I'm not sure where to start.
- A customer wants Cyber Essentials before they'll sign.
- We take card payments, and PCI DSS feels overwhelming.
- If we were breached tomorrow, I don't know who would do what.
What's really going on.
Most organisations aren't caught out by exotic attacks. They're caught out by the basics: unpatched systems, weak access controls, exposed services, and data kept longer or more widely than it should be. Those gaps grow quietly as systems change.
Meanwhile, customers, insurers and regulators keep asking harder questions. Without someone who understands both your systems and the threats, security turns into either a tick-box exercise or a constant worry.
Sound like you?
- You've never had an independent security review, or the last one is out of date.
- A customer, insurer or contract requires Cyber Essentials.
- You take card payments and need to meet PCI DSS.
- You hold personal data and want confidence in your GDPR position.
- You've had an incident or a near miss, and need help now.
- You're launching or changing a system and want security designed in.
Step by step.
- Step 01Review
I review your systems, network, access and data handling to find where you're really exposed.
- Step 02Model threats
We work out who might attack you, how, and what would hurt most, so effort goes where the risk is.
- Step 03Test
Penetration testing shows which weaknesses can actually be exploited, not just which ones exist in theory.
- Step 04Harden
I fix and harden systems in priority order, and design security into new work from the start.
- Step 05Prepare
You get an incident response plan your team knows how to use, plus compliance work for Cyber Essentials, PCI DSS and GDPR.
The outcome.
- A clear, prioritised picture of your real risks.
- The most serious gaps closed first.
- Systems hardened and tested, not just documented.
- An incident plan that people know how to follow.
- Real progress on Cyber Essentials, PCI DSS and GDPR.
- Staff who understand their part in keeping things secure.
However you need me
Advisory, a fixed-scope project, a support retainer, or embedded in your team. Day rate, fixed price or monthly.
See engagement models →We're a small organisation. Is this for us?
Yes. Attackers don't only target large companies. The work scales to your size, and the first priority is usually closing the basic gaps attackers rely on.
Can you help us get Cyber Essentials?
Yes. I can check where you stand against the requirements, fix the gaps, and get you ready for certification.
What if we have an incident right now?
Get in touch straight away. Incident response is part of my security work: containing the problem, finding out what happened, recovering, and closing the gap that let it in.
Do you only advise, or do you fix things too?
Both. I'm hands-on, so I can review, test, harden and help your team put things right, not just hand you a report.
Often goes with…
AI security
AI brings new ways for data to leak and systems to be misused. I help you find those risks, design against them and keep them under control, so you can use AI with confidence.
Read more →Cloud & infrastructure
On-prem, cloud or hybrid: I design and build platforms that stay up, grow when you need them to, and cost what they should. Then I make sure your team can run them.
Read more →Emergency backstop
When a core system has to come down, I build a stop-gap pipeline that keeps orders, data and transactions flowing. Your customers and partners carry on as normal while the real repair happens underneath.
Read more →How exposed are you, really?
Tell me what you run, what data you hold and what's worrying you. I'll suggest a sensible first step.