What we do
Defend Security and resilience for confidential work.
We protect what your firm is trusted with, keep a tested way back and give you the paperwork to prove it.
Active defence. Threats stop, you don’t.
The problem
Firms trusted with confidential files are worth attacking.
Phishing that looks like a client
Invoices, client documents and shared files make perfect bait. One click on a convincing email can have your mailbox emailing every contact you have.
Insurers asking harder questions
Cyber insurance questionnaires ask about multi-factor sign-in, admin accounts, backups and incident plans. “We think so” isn’t an answer.
Data you’re liable for
Client files have to stay confidential, and archives available for years. Losing them to ransomware or a failed backup isn’t an IT problem, it’s a liability.
Proof, not promises
The evidence file.
What protects your firm, written down as it is, ready on the day an insurer, a client or an auditor asks.
- Devices Every laptop, workstation and server, with its protection and patch level.
- Sign-in Multi-factor sign-in, conditional access and admin roles, as they’re set up.
- Admin access Who holds admin rights: passwords in a vault, every use logged.
- Backups What’s backed up, and when a restore was last tested.
- Incidents What happened, what we did and what we changed.
- Insurer questionnaire Answers that are true today, and the gaps we closed to get there.
What’s included
Protection that’s built in, not bolted on.
A current security stack, run by the same team that runs your IT, so security never stops at a handover.
- Email security and archiving Spam, phishing and malware filtered before mail reaches your people, with long-term archiving.
- Endpoint protection Managed protection and threat detection on every laptop, workstation and server.
- Backups with restore tests Backups for Microsoft 365, servers and devices, plus regular restore tests.
- Privileged access management Admin passwords in a vault, not a spreadsheet. Access logged and limited to the people who need it.
- Identity and sign-in security Multi-factor sign-in, conditional access and admin roles configured in Microsoft Entra ID, with baselines enforced across your tenant.
- Patching and hardening Operating systems and applications kept current, devices configured to a documented baseline.
- Incident response When something happens, we contain it, clean up, tell the people who need to know and write down what we changed.
- Insurer and audit readiness We help you answer the insurer’s questionnaire truthfully and close the gaps it reveals, with records you can hand over.
- Clean takeovers When you change provider, we remove the old provider’s agents and access, so nobody keeps a way in.
Who owns it
Security decisions made by someone who knows your firm.
Your TechPilot weighs security against how your teams actually work: strong enough to satisfy the insurer, practical enough that nobody goes looking for workarounds.
- Reports risk to management in plain language, with what it costs to close
- Signs off exceptions deliberately, instead of letting them happen by accident
- Takes charge when an incident hits, with our security specialists
Proof
Provider exit in three weeks
At takeover the firm had received no backups from its previous provider. Before the switchover, new backups were running and disaster recovery had been tested three times.
Read the case- of engineering work in three weeks
- 173 h
- from receiving access to the old provider’s shutdown
- 9 days
- disaster recovery tested before the switch
- 3×
- people working on Monday morning
- 50
Questions we get
Can you help with our cyber insurance questionnaire?
Yes. We go through it with you, answer what’s true today and close the gaps before renewal, so your answers are accurate if you ever need to make a claim.
What happens if someone clicks a phishing link?
Tell us straight away. We lock the account, check what was accessed or sent, clean up and tell you exactly what happened and what we changed.
How do you handle our data under GDPR?
We work under a data processing agreement (Art. 28 GDPR) and only process your data to run and protect your systems.
Keep going
All offerings
Start
Talk it through.
30 minutes with a senior engineer. Deadlines and risk, not buzzwords. If we’re not the right fit, we’ll say so.
- No first level
- No surprises
- Pilot before you buy