Services

From quick overview to permanent security partner

Every engagement starts with a free, no-obligation pre-analysis and a fixed price. Pick a service to see what it covers — or call us and we will help you choose the right place to start.

Assessment · 01 / 10

Security QuickScan

A fast overview of the biggest risks in your Active Directory or Microsoft 365 — with zero operational impact, when you want to get started without a large budget.

  • Top 10 prioritised findings with recommendations
  • Choose the AD or M365 track
  • Concise report + 30-minute walkthrough
Assessment · 02 / 10

Microsoft 365 Security Assessment

Our flagship analysis of your cloud environment: identity, mail, sharing, apps and audit — can anyone sign in where they should not — and how far can they then get?

  • Entra ID, MFA, Conditional Access, PIM & GDAP
  • Exchange, SharePoint, OAuth apps, Intune & Defender
  • Executive summary + prioritised action plan
Assessment · 03 / 10

Active Directory Security Assessment

A full review of your on-premises crown jewels — including an offline penetration test of every password in the AD database, with zero operational impact.

  • GPOs, delegations, trusts, service accounts & LDAP
  • Offline password test against known wordlists
  • Thorough report with prioritised findings
Assessment · 04 / 10

Identity Security Review

The focused variant of the M365 assessment: identity, access and permissions only — a faster engagement with a sharp scope.

  • MFA coverage, legacy protocols & break-glass
  • Conditional Access policies for all user types
  • OAuth permissions, roles & guest access
Assessment · 05 / 10

Privileged Access Review

The shortest paths to Domain Admin: privileged accounts, delegations and attack paths in your Active Directory.

  • Tier-0 accounts & privileged groups
  • Kerberoasting & AS-REP exposure
  • Overall privilege-escalation risk assessment
Assessment · 06 / 10

Internal Attack Surface Review

Remote analysis of your internal attack surface via a portable sensor — you connect power and network, we handle the rest.

  • Host discovery, open ports & CVE matches
  • AD enumeration, SMB shares & poisoning risk
  • No software installation, minimal calendar friction
Offensive · 07 / 10

Penetration Testing

Targeted offensive testing of selected systems or surfaces — when you want proof that your defences hold up in practice.

  • Defined scope and rules of engagement
  • Performed by certified specialists (GPEN, CEH)
  • Findings documented with reproducible evidence
Offensive · 08 / 10

Assume Breach

We assume the attacker is already inside — and show how far a compromised account or machine can actually get.

  • Realistic lateral-movement scenario
  • Reveals the real consequences of a single phishing click
  • Concrete recommendations to break the attack chain
People · 09 / 10

Security Awareness

Practical awareness via Microsoft Attack Simulation: phishing simulation, targeted training tracks and measurable progress.

  • Baseline measurement of your real click rate
  • Training tracks for phishing, CEO fraud & MFA fatigue
  • Report + plan for continued awareness work
Recurring · 10 / 10

CISO Service

Your permanent security partner with a finger on the pulse: we know your environment and spar with you on matters big and small — CISO capability without a full-time hire.

  • Specialists who know your environment
  • Sparring on matters big and small — one call away
  • Monthly prioritisation & execution

Microsoft 365 or Active Directory?

The two main assessment tracks each cover their own security surface. If you have both, both assessments make sense — we recommend starting where the risk is greatest.

Choose the Microsoft 365 track

  • You use Microsoft 365 for mail and files
  • Your users sign in to the cloud
  • You want accounts protected against phishing
  • You share data with external parties
  • You have apps connected to Microsoft 365

Choose the Active Directory track

  • You run your own Windows servers
  • You operate an Active Directory domain
  • You want the paths to Domain Admin mapped
  • You want your passwords tested
  • You worry about on-prem ransomware

Facing a security incident right now?

Our emergency response answers around the clock — one call and our specialists are on it.

CALL 61 100 911
First step

Ready to have your security verified?

A free, no-obligation pre-analysis. A fixed price. A concrete plan you can act on right away.

Book a free pre-analysis