Resources

Useful, current, and free of sales theatre.

Our knowledge hub, the case studies behind our work, and a running tracker of the regulatory deadlines that actually matter. Want a personalised read? The 2-minute compliance readiness check is the fastest place to start.

Take the readiness check See all tools
A laptop, notebook and coffee on a desk

Knowledge hub

Long-form, plain-English, genuinely useful.

All insights
Network cabling and indicator lights in a data centre
Operational resilience

When should you security test a technology migration? Before it goes live, not after

Waiting until a technology overhaul is finished before testing it leaves new systems live and unchecked while the old ones are still running. How to align security validation to each deployment phase, and what it catches.

Read
A person signing a document at a desk
Compliance

How do misconfigurations cause breaches? The 27-minute problem

Most breaches start with a misconfiguration, not a zero-day. Why configuration drift defeats point-in-time compliance, and how to close the gap between finding a problem and fixing it at machine speed, safely.

Read
A person signing a document at a desk
Certification

Cyber Essentials for supply chain contracts: how to certify at speed and stay compliant

The Cyber Resilience Pledge means major buyers now require Cyber Essentials from their suppliers. How to certify fast, meet the 14-day patching rule and stay compliant all year, without a large security team or budget.

Read
Board-level resource hub

Guides for the people accountable for cyber risk.

The questions every Managing Partner should ask, how to report cyber risk to a board, cyber insurance renewal, Cyber Essentials Plus, supplier questionnaires and ransomware readiness.

Open the hub

Case studies

Named clients, real outcomes.

All case studies
Education, independent schoolSherborne Girls: securing remote and hybrid learning, without slowing it downAn independent school needed students and teachers to use the web and email freely and safely. We helped them raise their security posture and cut phishing, acting as an extension of their IT team.Read the story
Travel, luxury travel & experiencesBlack Tomato Group: stronger security and a leaner stack, at lower costA luxury travel group wanted to raise its security posture while optimising spend. We consolidated overlapping tools, ran a pen test, and deployed unified endpoint management, managing every vendor conversation for them.Read the story
Threat & regulation tracker

The deadlines worth a place in your plan.

DORA, the EU AI Act, NIS2, the UK Cyber Security and Resilience Bill, the EU Cyber Resilience Act, PCI DSS and more, with who each one affects and the dates that matter.

Open the tracker

Prefer a straight answer to a download?

A 30-minute call with a senior advisor will often get you further than any template. No prep, no pitch.

Book a call