Security you can actually understand
Most attacks on families and small offices are not clever — they work because people have never been shown what to look for. We explain the real risks in plain words, then help you close the gaps.
What you’re actually up against
The handful of threats that hit homes and small offices most. Understanding how each one works is half the defence — and this part is always free.
Phishing & fake messages
An email or text made to look like your bank, a delivery, or your boss, nudging you to log in or pay. One careless click can hand over a password.
Ransomware
Malware locks up your files and demands payment to release them. Good backups you’ve actually tested are what get you out without paying.
Weak or reused passwords
One leaked password unlocks everything if you use it in more than one place. A password manager and MFA stop most of this cold.
Data leaks & oversharing
Sensitive information ends up somewhere it shouldn’t — a share set to “anyone”, an old account nobody closed, a file sent to the wrong person.
AI-powered scams
Cloned voices, flawless fake emails, convincing deepfakes. AI has made scams cheaper to run and far harder to spot by eye.
Unpatched software
Out-of-date systems have known holes that attackers scan for automatically. Those update prompts you keep dismissing are mostly security fixes.
How to protect yourself
You do not need to be technical, and you do not need us, to do most of this. Start here.
- Turn on multi-factor authentication everywhere it’s offered. It’s the single biggest thing you can do — a stolen password alone stops being enough.
- Keep backups you have actually tested. A backup you’ve never restored from is a guess. Check it works before you need it.
- Install updates. On your phone, computer and router. Most updates are closing security holes, not adding features.
- Use a password manager. One strong, unique password per account, remembered for you, so a single leak can’t spread.
- Slow down on anything urgent or unexpected. Pressure is the scammer’s main tool. Real organisations are fine with you calling back.
- Give people the least access they need. Not everyone needs to be an administrator, and old accounts should be closed when someone leaves.
How we can help
Practical security work for small businesses, grounded in enterprise experience across regulated industries — without the enterprise price tag.
Vulnerability assessment
Choose the scope that fits. Each price is a fixed starting point for a typical small business, quoted up for larger environments.
Every assessment ends with a plain-English report that ranks exactly what to fix first — no jargon, no scare tactics.
Identity & access management
Quoted to scope
MFA, conditional access and least-privilege set up properly in Microsoft 365 and Entra ID, so the right people have the right access — and nobody has more than they need.
Governance, compliance & security policy
Quoted to scope
Sensible written policies, a baseline security framework, and help answering the security and compliance questionnaires that clients and insurers increasingly ask for.
Security advisory — $135/hr
A second opinion, a one-off question, or a hand after something has gone wrong. Billed by the hour, no retainer required.
Free guides
Free to read, no sign-up. Audio versions are on the way.