Services Cybersecurity
Practical cybersecurity for software and cloud
We help businesses reduce common security risks in the software and cloud systems they run. That means a scope agreed in writing, a review of what is actually there, findings ranked by risk and help fixing them. We do not promise that any system is unbreakable, and we say plainly what a review can and cannot show.
Problems we help with
- Customers or tenders asking security questions you cannot yet answer
- Not being sure who has access to what, or whether a backup would really restore
- A new product about to launch that nobody has looked at from a security point of view
- A security questionnaire from a customer and no idea where to start
A good fit if
You build or run software or cloud systems and want a practical, plain-language check, or a customer is asking for evidence of good practice.
What it covers
- A security review of a web or mobile app, informed by OWASP guidance
- A review of cloud accounts: access, public exposure, logging and encryption
- Sign-in, roles and permissions designed to limit who can see and change what
- Secure release pipelines, careful handling of secrets, and backup checks
- A gap check and fix list of the issues we find
What you get
- A written scope and authorisation before any review begins
- Findings ranked by risk, with fix guidance in plain language
- Help fixing the most important items, if you want it
- A re-check of the items we fixed together
- A gap report and checklist of what to fix, if that is your goal
Every project follows the same five stages, from discovery to support. See how a project runs.
How a review works
- A written scope and authorisation: what is included, what is not, and who agreed.
- The review itself, using read-only access wherever possible.
- Findings ranked by risk, written in plain language.
- Fixes: we help, or you hand them to your own team.
- A re-check of what was fixed.
What we will not do
- Promise that you will never be breached
- Issue security certificates or accreditations
- Test any system without the owner's written permission
- Call our work penetration testing, or claim accreditations we do not hold
- Use fear to sell
How we handle your data
We ask for the least access the work needs, use named accounts protected by multi-factor sign-in, and end access when the work ends. Please do not send passwords or details of security weaknesses by email or through our website; we will agree a safe way to share anything sensitive.
Questions about Cybersecurity
Do you do penetration testing?
Not as a service in its own right. A penetration test is a human-led attempt to break into a system, usually done by a specialist firm with recognised accreditation, and we do not hold one. We can review and fix things first, and help you scope a test with an independent provider. We only test systems you own or have given us written permission to test.
Can you get us a security certificate or accreditation?
No. We do not issue or hold certificates or accreditations. We can review your systems, give you a ranked fix list and help you fix the most important items.
We think we have been hacked. Can you help?
We can help you work out what to do first and tidy up afterwards, but we are not an emergency response or forensics team. Contact your bank if money is involved, report it through the UK's national cyber crime reporting service, and see the National Cyber Security Centre's guidance for businesses.
What access do you need, and how is it protected?
Only what the scope needs, normally read-only, through named accounts protected by multi-factor sign-in. Access ends when the work ends. The details are agreed in the written scope.
Will you find everything?
No. A review is a snapshot of what we looked at, on the day, within the agreed scope. Automated tools miss flaws in how an app works, and systems change after we leave. We tell you what we covered and what we did not.
How long does a review take, and what does it cost?
It depends on the size of the system and how much access we get. We agree scope, timing and price in writing after a short call, before any work begins.
Get in touch
You can email us at [email protected].