Services

Assessments, advisory, and training — scoped to what you actually need.

Available as fixed-price packages or scoped individually, sized for a small or medium business — not priced like an enterprise engagement.

Not sure what you need?

That's normal, and it's exactly where we start. Before anything is scoped or quoted, we work together to figure out what's actually suitable for your business — what makes sense for your size, budget, and risk, and what can wait. If you're not sure what you need, that's not a problem you need to solve before reaching out — it's the first thing we help with.

Team reviewing findings together
01 · Assess

Security Assessments

Structured assessments against recognised frameworks — giving you a clear, plain-English maturity picture and practical recommendations, without the enterprise-scale report you'll never read.

Includes

  • Current-state maturity assessment against the relevant framework
  • Identification of gaps and remediation priorities
  • Clear, structured findings report
  • Practical, cost-effective uplift recommendations
02 · Advise

Security Consulting

Governance, risk, and compliance work that turns an assessment into an operating program: strategy, documentation, and the risk management processes that keep it current — right-sized for a lean team.

Includes

  • Multi-year cybersecurity strategy & roadmaps
  • Risk registers & risk treatment planning
  • Cybersecurity policy & standards development
  • ISMS documentation, implementation & governance support
  • Security platform operation — Microsoft Defender, Purview, and similar tooling
03 · Train

Awareness Training

Training and simulation programs aimed at your actual failure points — pitched to the audience, whether that's general staff or specific departments, so your team knows what to watch out for.

Includes

  • Security awareness training for staff
  • Phishing simulation campaigns
  • Secure coding awareness training for developers
04 · Other

Additional Services

Smaller, well-scoped work that doesn't need a full engagement — useful when you know exactly what document or review you need, or just want someone to call when something doesn't feel right.

Includes

  • Risk management support
  • Compliance support for audits & certifications
  • Vendor & third-party security reviews
  • Security documentation on request

Industries

Experience across a range of sectors.

Including banking, retail, manufacturing, and technology — the underlying frameworks and risk approach carry across industries, and engagements are scoped to the specific regulatory or contractual drivers of your sector.

Banking & Finance Retail Manufacturing Technology and others
Engagement options

Fixed-price packages or hourly consulting — whichever fits.

Pricing scaled to fit a small business budget, not enterprise overhead — confirmed up front, so there are no surprises.

Fixed-price

Scoped packages

Most pieces of work are quoted as a fixed price once the scope is agreed, so there are no surprises.

Hourly

Ad hoc consulting

Pre-purchased hours to use as needed — no fixed scope required.

Exact packages and rates are confirmed during scoping and may vary — get in touch for current pricing.

Not sure which service fits?

Send through a bit of context and you'll get pointed at the right starting point — no sales pitch, just a conversation.

Get in touch