Cyber security

Protection that works while you work

Today's attackers don't need to break in. They log in with stolen passwords, or slip past basic antivirus. We protect your devices, your logins and your data, and make sure you can always get back up and running.

The basics

Three things attackers go after

Good protection covers all three. Most small businesses only have antivirus on the first.

Your devices

Laptops, PCs, servers and phones. One infected device can spread ransomware across the whole office.

Your logins

Microsoft 365, email and banking. A stolen password lets an attacker walk straight in, no virus needed.

Your data

Client files, accounts and email. If it's locked, deleted or leaked, you need a way back.

Devices

EDR: protection on every device

Endpoint detection and response. Traditional antivirus only stops threats it already knows about. EDR watches how programs behave, so it catches new attacks too.

  • Watches behaviour, not just known virusesSpots suspicious activity like files being encrypted or programs doing things they shouldn't.
  • Stops attacks in progressCuts an infected device off from the network before ransomware can spread.
  • Cleans up and shows what happenedRemoves the threat and records how it got in, so the gap gets closed.
  • Covers every deviceLaptops, PCs, servers and phones, in the office or at home.
Logins

ITDR: protection for your logins

Identity threat detection and response. Many breaches now start with a stolen password, not a virus. ITDR watches how your accounts are used and reacts when something looks wrong.

  • Spots unusual sign-insLogins from another country, at odd hours, or from two places at once.
  • Catches hijacked email accountsFlags hidden forwarding rules and inbox changes used in invoice and payment fraud.
  • Locks it down fastSigns the attacker out, blocks the account and resets access.
  • Protects Microsoft 365 and Google WorkspaceWhere your email, files and client data live.

Why antivirus on its own isn't enough

Antivirus looks for threats it has seen before. Attackers know that, so they use new tools or simply log in with a stolen password. EDR and ITDR look for suspicious behaviour instead, which is how modern attacks are caught.

Hardening

Closing the everyday gaps

Simple settings that stop a large share of attacks before EDR or ITDR are even needed.

Multi-factor sign-in

A code or app approval on top of the password, set up so it doesn't slow your team down.

Email security

Filtering for scam emails, plus settings that stop criminals sending email that looks like it came from you.

Updates and patching

Software and devices kept up to date, so known holes are closed quickly.

Right access for each person

Staff only get access to what they need, and leavers are removed straight away.

Device management

Encryption, screen locks and the ability to wipe a lost or stolen laptop or phone.

Microsoft 365 set up securely

The security settings most businesses never switch on, reviewed and switched on.

Backups and restores

Backups you can actually restore

A backup is only useful if it works on the day you need it. We set up backups that ransomware can't touch, and we test them.

  • Immutable backupsCopies that can't be changed or deleted, even by an attacker with admin access.
  • Copies kept off-siteYour data stored in more than one place, so one incident can't take everything.
  • Microsoft 365 backed up tooEmail, OneDrive and SharePoint. Microsoft keeps your service running, but protecting your data is your job.
  • Restore testsWe regularly restore files to prove the backups work.
  • Agreed recovery timesYou know how quickly each system can be back and how much data could be lost.
Recovery

If something goes wrong

A clear plan means less panic and less downtime.

  1. Contain

    Isolate affected devices and accounts so the problem can't spread.

  2. Investigate

    Find out what happened, what was affected and how they got in.

  3. Restore

    Bring systems and data back from clean, tested backups.

  4. Report

    Help with GDPR obligations, including notifying the Data Protection Commission within 72 hours where required.

Our process

How we work

  1. Assess

    We review your devices, accounts, backups and settings, and give you clear priorities.

  2. Implement

    We roll out EDR, ITDR, backups and the security settings you need.

  3. Monitor

    We keep watch for threats and unusual activity.

  4. React

    If something happens, we act quickly to contain it.

  5. Report

    Regular plain-English reports on threats blocked and fixes made.

  6. Recover

    We get you back up and running from tested backups.

Why a security partner, not just IT support

Good IT support keeps your systems running. Security needs a different focus.

General IT supportNOK security partner
Main focusKeeping email, devices and networks workingPreventing, spotting and responding to attacks
Device protectionStandard antivirusEDR that stops new and unknown threats
LoginsPassword resets when askedITDR that catches stolen passwords and hijacked accounts
BackupsBackups, if they existImmutable, off-site backups with regular restore tests
When attackedOften has to call in outside helpActs straight away to contain the problem
ComplianceBasic GDPR awarenessGDPR breach reporting and ISO 27001-aligned practice
Your people

Technology catches a lot. Trained people catch the rest.

The best protection still relies on someone pausing before they click. Our training gives your team the confidence to spot what technology misses.

  • Short, practical sessionsBuilt around real scams from your sector.
  • Safe phishing practiceRealistic test emails with a quick lesson for anyone who clicks.
  • Progress you can seeReports showing your team getting better at spotting attacks.

Common questions

We already have antivirus. Isn't that enough?

Antivirus only stops threats it already knows about. EDR watches for suspicious behaviour, so it catches new attacks, and ITDR covers stolen passwords, which antivirus can't see at all.

Isn't Microsoft 365 already backed up?

Microsoft keeps the service running, but it doesn't fully protect you against deleted, encrypted or overwritten data. A separate backup means you can restore emails and files to any point.

What happens if we're hit by ransomware?

EDR aims to stop it before it spreads. If data is affected, we isolate the problem, restore from clean backups and help you with any GDPR reporting.

We already have IT support. Do we need this?

Many of our clients keep their IT provider. We focus on security and are happy to work alongside your existing support.

What does a security check involve?

We look at your devices, accounts, email, backups and settings, and give you a plain-English report with clear priorities and costs. No work starts without your OK.

Find out where you stand

Book a security check and we'll show you what's protected, what isn't, and what to fix first.