Expertise

If you need deep security expertise, you are in the right place.

Our security focus is on Microsoft environments, but our expertise also covers multicloud setups on the following platforms: Google Cloud, Amazon Web Services (AWS) and on-premise solutions.

We concentrate in particular on identity (Entra ID, Active Directory), endpoint management (Intune), rolling out Microsoft’s security capabilities and on architecture.

As part of a security project we also build the infrastructure, carry out the migrations and survey the current state of the environment.


These are the domains we know inside out, with decades of experience:

01

Entra ID, Active Directory & identities

Entra ID, Conditional Access, privileged access and the sharp edges of hybrid environments. The usual starting point is dozens of policies, written at different times for different reasons, that nobody dares delete. We do the work few people want to do: bringing old service accounts and permissions under management.

Keywords: Entra · IAM · Conditional Access

02

Microsoft 365 & Azure

Microsoft 365 and Azure hardened so the settings hold up to both an audit and everyday use. We go through the environment against the CIS Benchmark and Secure Score, and tell you which findings actually mean something in your environment. Most often the first thing to fix is E5 protection that was never switched on.

Keywords: CIS Benchmark · Secure Score · Azure Policy

03

Intune & endpoint management

Intune and application control. Application control is the single most effective protection for an endpoint, and also the one most organisations leave undone. We have built allowlists with AppLocker and App Control for Business, and whole desktop platforms for thousands of users.

Keywords: Intune · App Control · Autopilot

04

Microsoft Sentinel & Defender XDR

Detection that produces alerts someone has time to act on. We always start from what is collected and what is actually needed, because Sentinel bills for the data it ingests whether or not anyone looks at it. We build the monitoring, and help with SOC processes and automation.

Keywords: SIEM · SOAR · Defender XDR

05

Microsoft Purview

Classification, data loss prevention (DLP) and retention set up to steer behaviour rather than just produce reports. We start from what data exists and who can reach it, because you cannot target protection at data that has not been classified.

Keywords: DLP · Sensitivity Labels · Data Governance

06

AI agents, governance & compliance

AI agents and AI-enhanced agents call for a new kind of governance. We built our first governance models for non-human identities before anyone called them agents. Whether it is Agent 365, Foundry-based agents or Power Platform security, we can help.

Keywords: Agent 365 · Copilot Studio · Foundry

The expertise is in our people.

Our team is made up of senior security architects, two of them Microsoft MVPs. We tell you straight what's worth doing and what isn't.

Get to know us better

Not sure where to begin?

Drop us a line and we will work out together which option suits you best.

Get in touch