Offline or AI-assisted
Choose an offline assessment, where scanning runs inside your environment and no data leaves it, or an AI-assisted assessment that connects securely to your environment for faster, deeper analysis.
Services
IT assurance services
Fixed-scope reviews with a clear deliverable, or ongoing assurance alongside your programme. Every engagement is tailored to the standard you need to meet.
Security assurance reviews
An independent, evidence-based assessment of your security controls, giving leadership an honest picture of risk.
- Assessment against the NCSC Cyber Assessment Framework (CAF) objectives and principles
- Assessment against the NIST Cybersecurity Framework (CSF) 2.0 functions: Govern, Identify, Protect, Detect, Respond and Recover
- Review against NCSC guidance, including the 10 Steps to Cyber Security and the Cloud Security Principles
- Board-ready assurance rating and risk-ranked findings
Cloud & Microsoft 365 assurance
A detailed review of how your Azure and Microsoft 365 environments are configured, governed and monitored.
- Microsoft Cloud Adoption Framework (CAF) and Azure landing zone review
- Assessment against the Microsoft cloud security benchmark (MCSB) and the Azure Well-Architected Framework
- Microsoft 365 configuration against Microsoft security best practice and Zero Trust guidance
- Microsoft Defender for Cloud, Defender XDR and Microsoft Sentinel coverage
- Microsoft Secure Score analysis and remediation plan
Identity & access assurance
Identity is now the perimeter. We test whether yours holds.
- Microsoft Entra ID, Conditional Access and MFA coverage review
- Privileged Identity Management (PIM) and admin account hygiene
- Access reviews and joiner-mover-leaver processes
- Guest and external access risk
Compliance & audit readiness
Prepare for certification or audit with a clear view of the gaps and how to close them.
- Cyber Essentials and Cyber Essentials Plus readiness against the five technical controls
- Pre-assessment ahead of your certification body's audit
- ISO/IEC 27001 gap analysis
- Policy, procedure and evidence pack review
Project & design assurance
Independent assurance over change programmes so problems are caught at design, not in production.
- High and low level design review against NCSC secure design principles
- Designs checked against NCSC architecture patterns, such as Safely Importing Data, and cross domain solution principles
- Interim design authority and go-live readiness assessments
- Assurance documentation for formal security review
Third-party & supplier assurance
Understand the security posture of the suppliers and managed service providers you rely on.
- Supplier security questionnaires and evidence review
- Managed service provider and tenant access review
- Contractual security requirements
- Ongoing supplier risk monitoring
Assessment options
An assessment shaped around you
Every review can be tailored in four ways, so you get the depth, method and output that fit your organisation.
Comprehensive or focused
Assess your whole estate end to end, or a focused, representative sample of systems, tenants or controls when you need answers quickly.
Remediation guidance to suit you
Choose the level of support you need: prioritised recommendations, detailed step-by-step remediation guidance, or hands-on help followed by a re-test.
Dashboard-style PDF report
Results delivered as a PDF report with dashboard-style summaries: ratings, scores and charts at a glance for leadership, backed by detailed findings for your engineers.
Frameworks & standards
We assess against recognised frameworks
Where two frameworks share the CAF abbreviation, we always say which we mean: the NCSC Cyber Assessment Framework or the Microsoft Cloud Adoption Framework.
Ways to engage
Flexible engagement models
Fixed-scope review
A defined assessment with an agreed price and timeline, ending with a report and walkthrough.
Ongoing assurance
Regular check-ins and reviews alongside a programme, acting as independent design authority.
Remediation support
Hands-on help to fix what we find, followed by a re-test to confirm it's resolved.
Subcontract & white-label delivery
We work as a subcontractor to consultancies, managed service providers and resellers, delivering assessments on your behalf and under your brand where you need it.
Referral partnerships
Introduce clients who need independent assurance, and we'll refer work outside our scope to trusted partners. Referral arrangements are available for partners.
Need confidence in your IT?
Tell us what you need assured, whether that's a new cloud platform, an upcoming audit or a supplier you have to rely on. A short call is usually enough to scope it.
Start a conversation