Cyber security that's actually looked after
Most small businesses that get breached had security software. What they didn't have was anyone watching it, updating it and training the people using it. That's the part we do.
- Cyber Essentials certified
- Monthly vulnerability scans
- Dark web monitoring
- Monthly staff training
Six layers, one team
No single product stops attacks. Security works in layers, so that when one is beaten, the next one catches it. These are the layers we put in place and run for you.
People
Short monthly security awareness training, so your staff recognise a phishing email, a fake invoice or a "CEO" asking for gift cards. Most attacks start with a person, not a computer.
Devices
Endpoint detection and response on every PC and laptop. It doesn't just scan for known viruses, it watches for suspicious behaviour and can isolate a device before an attack spreads. Patches go on automatically.
Business-grade email filtering that removes phishing, malware and impersonation attempts before they reach the inbox, plus correctly set SPF, DKIM and DMARC records so criminals can't send email as you.
Identity
Multi-factor authentication on every account, a business password manager so nobody reuses passwords, and dark web monitoring that tells us when staff credentials turn up in a leak.
Network
Properly configured firewalls, separate networks for guests and devices that don't need to talk to your PCs, and secure remote access for staff working from home.
Visibility
Monthly internal and external vulnerability scans and 24/7 automated monitoring, so weaknesses are found and fixed by us rather than discovered by someone else.
Why we only sell security as part of managed IT
You can't buy our security products on their own, and that's deliberate. Business security tools aren't designed to be run by the business that owns them. An endpoint alert at 7pm needs someone who knows what it means. A firewall needs updating as threats change. Email filtering needs tuning so it stops the right things and lets the rest through.
A security product nobody is watching gives you a false sense of safety, which is worse than knowing you're exposed. So security comes with the people who run it, as part of our managed IT support or co-managed IT.
What we use
We choose tools we'd trust with our own business, and we're open about what they are.
| Layer | What we use |
|---|---|
| Endpoint protection | WatchGuard EPDR (endpoint protection, detection and response) |
| Email security | Proofpoint |
| Passwords | Keeper business password manager |
| Firewalls | WatchGuard |
| Phones and tablets | Hexnode mobile device management |
| Microsoft 365 | Multi-factor authentication and Microsoft's own security controls, set up properly |
Tooling is charged at our supplier's price as a separate line, with no margin added.
Cyber Essentials
Cyber Essentials is the UK government-backed scheme that sets out the basic controls every business should have: firewalls, secure configuration, user access control, malware protection and patching. It's increasingly asked for by customers, public sector contracts and insurers.
We hold Cyber Essentials ourselves, and the managed service is built around the same controls. If you want to get certified, we'll get your setup ready for it and help you through the assessment, whether that's Cyber Essentials or the independently tested Cyber Essentials Plus.
When something goes wrong
If a member of staff clicks something they shouldn't, or an account is compromised, ring us. We contain it first: lock the account, isolate the device, stop the damage spreading. Then we find out what happened, put it right and help you work out whether anything needs reporting to the ICO. No blame, and no hourly bill, because incident coordination is part of the service.
Think you've been hacked right now? Read what to do in the first hour, then call us on 01792 94 94 94.
Free guides
Plain-English guides you can use whether or not you're a customer.
Questions
Isn't antivirus enough for a small business?
Not any more. Traditional antivirus recognises known threats. Modern attacks use stolen passwords, phishing and legitimate tools, which antivirus doesn't see. Endpoint detection and response, email filtering, multi-factor authentication and trained staff close those gaps.
We're too small to be a target, aren't we?
Most attacks aren't targeted. They're automated, sent to thousands of businesses at once, and they succeed wherever the defences are weakest. Small businesses are attractive precisely because they tend to have fewer defences.
Can we buy just the security tools?
No. Security is only available as part of our managed or co-managed service, because the tools need someone running them to be any use.
What does the security training involve?
Short monthly sessions your staff complete online, covering things like phishing, passwords and safe use of email. Little and often works far better than one long annual course.
Can you help us get Cyber Essentials?
Yes. We hold it ourselves, and we'll prepare your systems and support you through the assessment for Cyber Essentials or Cyber Essentials Plus.
Local, and on site when it matters
We're based in Mumbles and come on site across South Wales, from Carmarthen and Llanelli to Neath, Port Talbot and Bridgend. See IT support in Swansea or all the areas we cover.
Find out where you stand
We'll look at your email, devices, accounts and network and tell you plainly what's exposed and what to fix first.