Cyber Security
Defensive security, hardening and response
Risk assessment, server and cloud hardening, continuous monitoring and incident response, aligned to recognised frameworks and built to hold up under attack.
Services
Security Architecture & Risk Assessment
Gap analysis against NIST CSF or ISO/IEC 27001 controls, a prioritised risk register and a security roadmap leadership can fund.
- NIST CSF 2.0
- ISO/IEC 27001:2022
- CIS Controls v8
Server & Infrastructure Hardening
Linux and Windows servers hardened to CIS Benchmarks: least-privilege access, SSH and TLS configuration, firewalling, logging and patch baselines.
- CIS Benchmarks
- OpenSSH
- TLS 1.3
Cloud Security Posture Management
IAM least-privilege review, misconfiguration remediation and continuous posture monitoring across AWS, Azure and GCP against CIS cloud benchmarks.
- AWS Security Hub
- Microsoft Defender for Cloud
- Prowler
Managed Detection & Response
SIEM/XDR monitoring with 24/7 alert triage, threat hunting and guided response, built on Wazuh or Elastic and mapped to MITRE ATT&CK.
- Wazuh
- Elastic Security
- Sigma rules
Incident Response & Digital Forensics
Rapid containment, eradication and recovery after a security incident, with forensic root-cause analysis and evidence handled for legal and regulatory needs.
- NIST SP 800-61
- Velociraptor
- Volatility
Vulnerability Management Programme
Continuous authenticated scanning, prioritisation by CVSS and EPSS exploitability, and patch SLAs tracked to closure across your estate.
- OpenVAS
- Nuclei
- CVSS v3.1
Compliance Readiness
Readiness support for ISO/IEC 27001, SOC 2, PCI DSS and the Kenya Data Protection Act: gap analysis, policies, technical controls and audit preparation.
- ISO/IEC 27001
- SOC 2
- PCI DSS v4.0
Have a project to scope?
Tell us your objectives and constraints. We reply within one business day.