Identity hardening
Conditional access, MFA coverage, privileged role review and break-glass procedure in Entra ID.
All services
Practice
Security & Governance
Secure, and able to prove it.
Identity, endpoints, data and evidence — designed together so security work turns into something you can show a client, an insurer or an auditor.
Start a conversationWhat usually goes wrong
- Admin rights and old accounts nobody has reviewed in years.
- MFA is on for some people, some of the time, on some apps.
- Files shared with 'everyone in the organisation' because it was quicker.
- No retention policy, so nothing is ever deleted and everything is discoverable.
- An incident plan that exists as a conversation, not a document.
What is included
Endpoint & email protection
SentinelOne and Microsoft Defender deployed, tuned and monitored — with someone actually reading the alerts.
Data & permission governance
AvePoint and Purview to find oversharing, apply labels and enforce lifecycle rules across Microsoft 365.
Access reviews
A recurring cycle where owners confirm who still needs access, with the outcome recorded.
Incident readiness
A written playbook, contact tree and one rehearsed drill per year.
Evidence pack
A maintained folder answering the questions that appear in security questionnaires.
How we deliver it
01
Baseline
We measure the current state against a written baseline and score it, without judgement.
02
Sequence
Fixes are ordered by risk removed per hour of disruption, not by what is easiest to sell.
03
Implement
Changes go in during agreed windows with a rollback path documented in advance.
04
Maintain
Quarterly review of drift, new risks and anything the last three months changed.
What you end up with
- A written security baseline with a current score
- MFA and conditional access covering every account
- Documented owners for data, systems and access
- An evidence pack you can send without a scramble
Technology we use
Care plans
Straightforward monthly plans.
Priced per user, per month, billed monthly. Your quote depends on device count, locations and existing licensing.
Essential
For teams of 10-40 who mainly need reliable support.
€ 29per user / month
Includes
- Service desk during business hours
- Microsoft 365 user and licence administration
- Device setup, onboarding and offboarding
- Patching and antivirus monitoring
- Annual environment review
Complete
Most chosenFor 25-150 people who want IT fully handled.
€ 45per user / month
Includes
- Everything in Essential
- Proactive monitoring and maintenance
- Intune device management and standard builds
- Backup with tested restores
- Technical account manager and quarterly review
- Roadmap and budget planning
Secure+
For organisations with audit, insurer or client requirements.
€ 62per user / month
Includes
- Everything in Complete
- Identity hardening and conditional access design
- Access reviews and logging retention
- Incident response playbook and drill
- Security awareness sessions
- Evidence pack for audits and questionnaires
All plans include onboarding, documentation and a named contact. No lock-in beyond a 1 month notice period.
Getting started
From first call to fully supported in about four weeks.
01
Intro call — 30 minutes
You tell us what is slowing people down. We say honestly whether we are a fit.
02
Environment review — 1 week
We look at your accounts, devices, backup and security, then share what we found in plain language.
03
Proposal — fixed price
A plan, a monthly price and a prioritised list of what to fix first. No obligation.
04
Onboarding — 2 to 3 weeks
We document, take over support, and give your people one place to ask for help.
Talk to the practice lead
A 30-minute call is enough to tell whether this is the right starting point for you.
Start a conversation