Find out what would actually stop an attack
Most of what we find is not missing products. It is features you already pay for that were never switched on. Forty-five minutes to find out which.
Request this assessmentWho books this
- A customer, insurer or tender has asked how you secure their data
- You have security products but nobody is certain what they are set to do
- You are on Business Premium or E5 and suspect you are not using it
- Something happened recently, to you or to someone you know
What you get
- What your existing licences already cover, and which of it is switched off
- The identity, endpoint, email and backup gaps, ranked by risk removed per pound
- A plain answer on whether you would pass Cyber Essentials today
- What we would do first, and what is not worth doing at all
What we need from you
- Read access to your Microsoft 365 security and compliance settings, or a screen share
- An honest answer on who has administrative accounts, including old ones
- Whether anyone has tested a restore, and when
When not to book this
If you already run managed detection and response, patch to a documented standard and test restores on a schedule, this is not for you. We would be reading your reports back to you.
One we have done
Certified Cyber Essentials
How a client closed its security gaps and achieved Cyber Essentials certification, meeting the assurance its contracts and supply chain demanded.
Read what we actually didA UK client. Our case studies are anonymised at our clients’ request, so they name no client and no sector.
Other assessments
- Microsoft estate review: Forty-five minutes and a written summary. What you are licensed for, what is switched on, where the gaps are, and what we would fix first.
- Cloud cost review: Non-production running around the clock, orphaned resources nobody decommissioned, and licences still assigned to leavers. Forty-five minutes to quantify yours.
- Cyber Essentials readiness check: The five control themes, checked against what you actually run. Most first-time failures are the same handful of things, and all of them are cheaper to fix before you apply.
Show all 12 assessmentsShow fewer assessments
- Application compatibility assessment: Migrations do not stall on operating systems, they stall on a handful of applications nobody can account for. This sorts your estate into the four groups that actually matter, before you commit budget to any of it.
- Virtual desktop review: Whether you are choosing between Azure Virtual Desktop and Windows 365 or already running one and paying more than you expected, this is the same review: what the estate is doing, what it costs, and what it should cost.
- Copilot readiness check: Copilot does not grant anyone a single permission they did not already have. It just makes what they already had very easy to find, which is why the permissions work belongs before the licences and not after.
- Backup and recovery review: Everyone has a backup. Far fewer have a restore. The question worth answering is not whether jobs are running, it is when somebody last proved one and how long the business would be down.
- Application and reporting discovery: Most bespoke software goes wrong at scoping rather than in the build, and the most valuable thing a first conversation can do is establish whether you should be commissioning software at all.
- Endpoint and Intune review: Not whether Intune says the estate is compliant, but whether that means what you think it means: what is enrolled, what has gone quiet, which policies are actually winning, and what you could prove if somebody asked.
- DfE digital standards baseline: Sixty minutes against all twelve DfE digital and technology standards, the six core ones first. You get a governor-ready summary of where you stand and a dated plan for each gap, whether or not anything else follows.
- RDS health check: Connection Broker, Session Hosts, Gateway, Web Access, licensing, profiles and load balancing, reviewed as one estate. You get an executive summary to take to budget approval, the technical findings with their root causes, and a rectification path in the order we would do it.
- Kemp LoadMaster health check: Load balancers are the classic forgotten appliance. We review your LoadMaster's configuration backup and logs offline, so nothing connects to or changes the appliance, and you get a written report on its health with the evidence behind every finding.