Five practices, run by the people who work the incidents.
Security reviews, incident response, secure architecture, cloud and AI security, and SensorZero — consultants who spend their week in live audits, breaches and design reviews, not just selling them.
What we do
Security reviews, incident response, secure architecture, cloud and AI security, and SensorZero.
Security Reviews & Compliance
Assessments and audits that identify the risks worth fixing first, measured against the framework your insurers, customers and contracts hold you to.
- Vulnerability assessments & penetration testing
- Compliance audits (ISO 27001, IRAP, Essential Eight)
- Security architecture reviews
- Policy & governance framework development
Incident Response & Forensics
Containment first, questions second. We establish how they got in, what they touched, and how to get you trading again.
- Incident response & containment
- Digital forensics & root cause analysis
- Malware analysis & threat intelligence
- Post-incident recovery & hardening
Secure Architecture & Code
Designing secure systems and reviewing code so vulnerabilities are caught long before they reach production.
- Secure architecture design & review
- Application security testing (SAST/DAST)
- Code review & vulnerability remediation
- DevSecOps integration & CI/CD security
Where we look
- Threat model & trust boundaries
- Authentication & session handling
- Access control & IDOR
- Injection & input validation
- Secrets & key management
- Dependencies & supply chain
- CI/CD pipeline & build integrity
Cloud & AI Security
Protecting cloud infrastructure and AI systems with controls suited to how quickly both change, then making the drift visible.
- Cloud security architecture (AWS, Azure, GCP)
- Cloud security posture management (CSPM)
- AI/ML model security & privacy
- Container & Kubernetes security
Where we look
- Identity & privilege boundaries (IAM)
- Public exposure & network paths
- Storage & data-at-rest controls
- Logging, audit trails & retention
- Container & Kubernetes workloads
- Model access, prompts & data flow
- Posture drift over time (CSPM)
SensorZero — SIEM & AI Security
Advanced threat detection with AI-assisted response. Not just another dashboard — a platform built by defenders who work real breaches, sized for teams who don't have a SOC.
- Full SIEM & log management
- Endpoint, network & cloud collection
- AI-assisted alert triage & investigation
How our assessments work
The assessment is delivered as a report of findings, risk ratings and a prioritised remediation roadmap.
Assess
A review against Essential Eight or ISO 27001, or a straight technical test, delivered as a prioritised list rather than a document dump.
Remediate
We work through the list with your team or your IT provider, hands on the keyboard where that is the fastest route.
Monitor
Detection and log retention running continuously, so the posture you paid for is the posture you still have in six months.
Respond
If something does happen, the people responding already know your environment. That is hours saved on the worst day.
Our detection platform — available on its own, at sensorzero.com
Simple & Secure Websites
Fixed-price, AWS-hosted websites for SMBs — a secure alternative to clunky WordPress and cPanel hosting, from $120/year.
Tell us what you need
A 30 minute conversation, no obligation. You will leave it knowing what we would do first and roughly what it costs.