Assess
Clarify the current state, evidence, risks and practical choices.
Services
Choose the outcome. Build the capability around it.
34 defined public-facing services across cybersecurity, security operations, vCISO advisory, AI, technology, infrastructure, research and education.
Cyber Security Services
Cyber security consultancy, engineering, testing and operational improvement.
Cyber Security Services
Cyber security
Practical security engineering across SOC design, logging, vulnerability management, authorised penetration testing and remediation.
Best forSOC maturity assessment · SOC design or improvement
- SOC maturity scorecard and target state
- Security capability and asset baseline
- SOC operating model and service catalogue
SOC consultancy
SOC maturity, operating-model and capability design for organisations building or improving security operations.
Best forSOC maturity assessment · SOC design
- SOC maturity scorecard
- Target operating model
- Detection and response backlog
SIEM consultancy
SIEM strategy, implementation support, use-case design and operating improvement.
Best forSIEM selection · SIEM implementation
- SIEM requirements
- Use-case catalogue
- Onboarding plan
Penetration testing
Authorised, scoped penetration testing for web applications, infrastructure and external attack surface.
Best forWeb application testing · Infrastructure testing
- Testing report
- Prioritised findings
- Technical evidence
SOC maturity
A structured assessment of security operations maturity across people, process, technology, detection and response.
Best forSOC maturity baseline · SOC investment planning
- SOC maturity scorecard
- Capability gaps and strengths
- Target operating model recommendations
SOC-CMM
Security operations maturity review using a structured capability model and improvement planning.
Best forSOC capability assessment · Maturity benchmarking
- SOC-CMM maturity view
- Evidence summary
- Capability gap analysis
View all Cyber Security Services capabilities
- Cyber security strategy, consultancy and architecture
- SOC maturity, consultancy, design and build planning
- SIEM strategy, implementation and configuration support
- Security monitoring and telemetry design
- Vulnerability scanning and vulnerability management
- Authorised web application and infrastructure penetration testing
- External attack-surface assessment
- Threat detection and security alert triage
- Patch-management coordination
- Incident response planning and response support
- Security automation and operations optimisation
- Configuration reviews and remediation verification
- Security audits, risk assessments and maturity roadmaps
- Supplier security and third-party risk assessments
Compliance Services
Framework readiness, assurance, control evidence and practical improvement.
Compliance Services
Cyber assurance
Cyber security, compliance-readiness and evidence support across Cyber Essentials, IASME, ISO/IEC 27001, DSPT and wider frameworks.
Best forCyber Essentials readiness · Cyber Essentials Plus readiness
- Confirmed assurance scope and route
- Control-and-evidence matrix
- Prioritised gap and remediation register
Cyber Essentials
Readiness, remediation and evidence support for organisations preparing for Cyber Essentials.
Best forFirst-time applicants · Renewal preparation
- Readiness assessment
- Prioritised action plan
- Evidence checklist
Cyber Essentials Plus
Technical preparation and remediation support for Cyber Essentials Plus independent assessment.
Best forCE Plus preparation · Technical control review
- Technical readiness report
- Remediation tracker
- Assessment evidence plan
ISO 27001
Practical ISMS, risk, controls and evidence support for ISO/IEC 27001 readiness and improvement.
Best forISO 27001 readiness · ISMS improvement
- ISMS implementation plan
- Risk treatment approach
- Control and evidence register
SOC 2
Readiness support for organisations aligning security controls and evidence to a SOC 2 examination.
Best forCustomer assurance · SOC 2 readiness
- Readiness gap assessment
- Control matrix
- Evidence calendar
Managed compliance
Ongoing support for control ownership, compliance evidence, review rhythms and assurance preparation.
Best forOngoing assurance · Evidence management
- Compliance operating plan
- Evidence register
- Review calendar
NHS DSPT
Readiness and evidence support for organisations completing the NHS Data Security and Protection Toolkit.
Best forNHS suppliers · Health and care organisations
- DSPT readiness summary
- Evidence and ownership checklist
- Gap and action register
IASME Cyber Assurance
Readiness and evidence support for IASME Cyber Assurance and its Level 1 and Level 2 assessment routes.
Best forIASME Cyber Assurance readiness · IASME ICA Level 1
- Readiness report
- Requirement and evidence map
- Prioritised remediation plan
View all Compliance Services capabilities
- Cyber Essentials readiness and remediation
- Cyber Essentials Plus preparation
- IASME Cyber Assurance and IASME ICA Level 1 and Level 2 readiness
- IASME Quality Principles readiness
- ISO/IEC 27001 consultancy and ISMS support
- SOC 2 readiness and compliance support
- NHS DSPT readiness
- NCSC CAF, NIST CSF and CIS Controls mapping
- Cybersecurity GRC and risk assessments
- Security audits, assurance and gap assessments
- Cybersecurity maturity assessments and roadmaps
- Remediation planning and verification
- Security policy and documentation development
- PCI DSS and customer assurance support
vCISO & Advisory
Fractional leadership, strategy and decision support.
vCISO & Advisory
Technical consultancy
Evidence-led architecture, vendor, cloud and delivery decisions with practical outputs.
Best forArchitecture review · Technology roadmap
- Executive summary
- Current-state diagram
- Prioritised findings
vCISO
Fractional cybersecurity leadership across strategy, governance, risk, assurance and board-level reporting.
Best forGrowing organisations · Leadership coverage gap
- Security operating plan
- Leadership reporting pack
- Prioritised risk register
View all vCISO & Advisory capabilities
- vCISO and fractional CISO services
- Cybersecurity strategy and security governance
- Board-level security reporting
- Security roadmaps and risk management
- Compliance programme and security programme management
- Security architecture and transformation
- Security leadership as a service
- Technical due diligence and independent decision support
AI & Technology
AI governance, automation and secure application delivery.
AI & Technology
Bespoke solutions
Portals, automations, integrations and internal systems shaped around a real operational workflow.
Best forRepeated manual task · Disconnected systems
- Current and proposed workflow maps
- Prioritised product scope
- Prototype and interface system
AI consultancy
AI strategy, governance, workflow discovery and practical implementation planning.
Best forAI strategy · Workflow automation
- AI opportunity map
- Risk and governance recommendations
- Prioritised roadmap
AI security
Security and governance assessment for AI adoption, AI-enabled workflows and AI-supported products.
Best forAI risk assessment · AI governance
- AI risk assessment
- AI governance baseline
- Control recommendations
Application development
Secure application, API and automation development for defined business and operational needs.
Best forApplication development · API development
- Technical design
- Working implementation
- Test and deployment plan
View all AI & Technology capabilities
- AI consultancy, strategy and governance
- AI security and AI risk assessments
- AI policy and governance design
- AI implementation, integration and automation
- AI-assisted cybersecurity and GRC workflows
- Application, web-application and API development
- Workflow and automation development
- AI application discovery and implementation
- Legacy application modernisation
Infrastructure
Cloud, workplace, identity and managed technology operations.
Infrastructure
Business email
Microsoft 365 and Google Workspace email configured for trusted delivery, controlled access and maintainable administration.
Best forNew business email setup · Existing email security review
- Email and identity architecture
- Configured authentication records
- Mailbox and group register
Workspace migrations
Email, files, calendars and identity moved through discovery, pilot, controlled cutover and stabilisation.
Best forMicrosoft 365 → Google Workspace · Google Workspace → Microsoft 365
- Migration scope and dependency register
- Target configuration baseline
- Data and permission map
Hosting
Defined hosting environments, deployment, DNS, backups, monitoring and operational ownership for websites and web services.
Best forReview or move existing hosting · Managed hosting for a new service
- Layered infrastructure diagram
- Environment and access register
- Deployment runbook
IT support
User, device, identity and workplace support with an agreed scope, priority model and escalation route.
Best forEstablish support for a team · Improve an existing support arrangement
- Supported-service catalogue
- User, device and access register
- Priority and escalation model
IT management
IT health checks and ongoing IT management across support, systems, suppliers, risk, change and improvement.
Best forIT health check · Stabilise day-to-day IT
- IT health report and priority plan
- System and supplier register
- Responsibility and service matrix
VPS hosting
Managed VPS and secure application hosting with explicit infrastructure, access and recovery responsibilities.
Best forManaged VPS · Secure application hosting
- Hosting architecture
- Access and hardening baseline
- Recovery procedure
Patch management
Patch-management assessment, operating-model design and improvement for systems, applications and endpoint estates.
Best forPatch process review · Endpoint patching
- Patch-management baseline
- Operating procedure
- Exception register
IT health check
A structured review of IT systems, identity, devices, suppliers, support, resilience and operational ownership.
Best forIT estate review · Growing organisations
- IT health report
- Risk and dependency summary
- Quick-win list
View all Infrastructure capabilities
- VPS, managed VPS and secure application hosting
- Web and cloud hosting
- Infrastructure and cloud management
- Backup and disaster-recovery planning
- Server hardening, monitoring and maintenance
- IT consultancy, IT support and IT health checks
- Microsoft 365, Entra ID and Intune consultancy
- Network and endpoint management
- Identity and access management
- Backup, patch and IT security hardening
Website & Digital
Business website design, development, hosting and ongoing care.
Website & Digital
Website design
Accessible, high-performing websites and web services built around clear content, reusable components and a controlled launch.
Best forNew marketing site · Existing-site redesign
- Approved sitemap and page architecture
- Design tokens and component library
- Production-ready website
Website development
Accessible, reliable website implementation for business sites, content-managed websites, integrations and custom features.
Best forBuild from approved designs · CMS setup or improvement
- Working website or agreed feature set
- Configured CMS and content model
- Test and launch checklist
Website hosting
Practical hosting, updates, backups, security and maintenance for public business websites, with responsibilities agreed up front.
Best forChoose or review website hosting · Move a website to a new host
- Hosting and responsibility summary
- Migration or setup plan
- Backup and recovery notes
View all Website & Digital capabilities
- Website design and redesign
- Website development and CMS implementation
- Website hosting, security and maintenance
- Web-application security
- Performance optimisation
- Domain and DNS management
- SSL/TLS management
Research & Education
Applied research, training and practitioner-led learning.
Research & Education
Security research
Applied cybersecurity research, technology evaluation and proof-of-concept support.
Best forTechnology evaluation · Applied security research
- Research brief
- Evaluation method
- Findings summary
AI research
Applied AI research, evaluation and proof-of-concept planning for security and organisational use cases.
Best forAI research · Model evaluation
- Research brief
- Evaluation plan
- Risk considerations
Education & training
Practitioner-led cybersecurity, compliance, secure development and AI-security learning for teams and education partners.
Best forTeam workshops · Executive training
- Session plan
- Learning materials
- Facilitated session
View all Research & Education capabilities
- Security, AI and cybersecurity R&D
- Applied security and AI-security research
- Cyber-compliance and security-automation research
- Academic and industry collaboration discussions
- Proof-of-concept development and security-technology evaluation
- Cybersecurity, compliance and Cyber Essentials training
- Security awareness, SOC/SIEM and GRC training
- AI-security and secure-development training
- Executive training, workshops and masterclasses
- University and college industry-teaching discussions
Engagement model
A focused assessment, implementation or ongoing partnership.
The website explains available routes; the agreed scope, commercial commitments, responsibilities and coverage are always confirmed in writing.
Build or improve
Deliver a defined change through visible decision gates.
Operate and evolve
Establish an ongoing rhythm for leadership, controls, systems or improvement.
next / briefTalk to Sudo
Not sure which service fits?
Describe the outcome, current environment and deadline. We will route the first conversation without forcing you into a label.