All services Tailored Security Solutions
Bring us the problem. Get a fixed scope, a senior expert and an answer you can act on.
For questions that don’t fit a standard service, such as a vendor to vet, a system to check or a decision to defend. We scope the work first, and whoever scopes it leads it.
“Our new payroll provider wants admin rights to Microsoft 365. Do we say yes?”
- What we do
- Review the permissions they request, their security documents and a safer setup.
- You receive
- A two-page recommendation and a call with you and the vendor.
- Who does it
- One senior consultant, start to finish.
“We moved to Microsoft 365 and Azure fast. Nobody has checked the setup since.”
- What we do
- Review identity, conditional access, sharing and admin roles against your real usage.
- You receive
- A prioritized hardening list, and the changes applied with your admin if you want.
- Who does it
- A cloud security specialist.
“We’re building a new SaaS platform. Is the design sound before we write the code?”
- What we do
- Threat-model the design: data flows, trust boundaries, secrets, tenancy.
- You receive
- Design risks ranked, with the fix for each, before they become code.
- Who does it
- A senior security architect.
“Our MSP proposes a $90k security stack. Do we need all of it?”
- What we do
- Compare the proposal to your actual risks and what you already own.
- You receive
- Keep, cut or replace, line by line, with reasons.
- Who does it
- An independent advisor; any referral fee disclosed up front.
What each leader gets
- CEOA clear recommendation
- Fixed scope agreed before work starts
- Plain-language answer you can take to the board
- CTOTechnical depth, no disruption
- Works with your team and your stack
- Fixes specific to your environment
- CISOEvidence you can defend
- Findings mapped to the standards you report on
- Proof for every claim
Hands-on, across the whole stack
We work hands-on in the configuration, the code and the logs, alongside your team.
- Cloud & identity
- Microsoft 365 / Entra ID
- Active Directory
- AWS · Azure · GCP
- Network & infrastructure
- Firewalls & VPN
- Segmentation
- Wi-Fi
- Applications & code
- Web apps & APIs
- Secure code review
- CI/CD pipelines
- Devices & hardware
- Workstations & mobile
- IoT & connected devices
- Hardware testing
- Detection & response
- Logging & alerting
- EDR / SIEM tuning
- Incident playbooks
- Data & resilience
- Backups & recovery
- Encryption
- Data classification
You get a scope sheet before anything starts
One page listing what we’ll do, what we won’t and what you’ll get, so there are no surprises.
“Our new payroll provider wants admin rights to our Microsoft 365. Do we say yes?”
Client’s question, call of 2026-09-15
- In scope
- The permissions the provider’s app requests in Microsoft 365
- Their security documents (SOC 2 Type II report, questionnaire)
- A narrower setup that still lets payroll sync
- Out of scope
- Full Microsoft 365 audit
- Penetration testing the provider’s systems
- Deliverable
- Two-page written recommendation, then a 45-minute call with you and the provider.
Outcome (added at close)
Yes, with conditions. The app asked for Directory.ReadWrite.All, write access to every account. Read-only User.Read.All covers what payroll sync needs. Consent to be reviewed in 12 months.
Examples on this page are illustrative.
Discuss Your Requirements
Tell us what's going on. The expert who would lead the work replies within 1–2 business days, in English or French.