Cybersecurity

Trained people, tested systems and reviewed code

Digital security starts with people and calls for targeted technical checks. We help you identify issues, assess risks and prioritise action.

We provide training, simulated phishing campaigns, business audits, web or API penetration testing, external exposure assessments and PHP code reviews.

Every engagement has a defined scope and produces evidence and recommendations.

Security training and assessments

Staff security awareness

We train your team on phishing, credentials, data protection and secure behaviour. Sessions include learning materials and a final assessment, with duration and participants agreed in advance.

Simulated phishing

We design authorised campaigns with scenarios and recipients agreed with the client. We provide aggregated results and training recommendations to address the behaviours identified.

Audits and external exposure

A business audit combines interviews with an assessment of a sample of systems to identify risks and priorities. An external exposure assessment examines agreed public-facing assets, exposed services and configurations.

Web and API penetration testing

We manually test a web application or API using the authorised roles and endpoints. We deliver an evidence report; the service includes a limited retest under the agreed conditions.

PHP code review

We examine agreed repositories and critical modules, covering authentication, authorisation, input, dependencies and secrets management. We document findings and recommended actions.

On-demand assessments

We carry out a targeted assessment of a specific issue, change or release. We share evidence and recommendations relating to the scope actually tested.

Evidence and priorities to guide your next steps

Technical assessments provide an executive summary, supporting evidence, the limitations of the analysis and recommended actions.