Cybersecurity for businesses

Know what your company has exposed and close it before it becomes a problem

Most incidents at small and mid-sized businesses are not sophisticated attacks: they are a fake email, a reused password, an open remote access or a backup that was never tested. They are concrete problems with concrete solutions that do not require an in-house security department.

We work with companies of 10 to 200 people.

Request an assessmentcalendar_today See what we dosouth

Who this service is for

storefront

Companies that depend on a management, invoicing or inventory system and could not operate a single day without it.
fact_check

Suppliers to large companies (mining, banks, exporters) that received a security questionnaire or a certification requirement.
badge

Professional practices, clinics and retailers that handle personal data of clients and patients and must comply with data protection regulations.

What we do

Security assessment

Review of email, remote access, devices, backups, administrator accounts and internet-exposed services. Deliverable: a plain-language report of what is at risk, ordered by urgency, and a remediation plan your current IT provider can execute.

Ransomware and phishing protection

Email configuration to stop impersonation, two-factor authentication on every critical account, isolated and verified backups, and closure of unnecessary remote access. These are the measures that prevent the vast majority of incidents at companies of this size.

Staff training

Phishing drills and short sessions for administrative and management staff, who are the targets of email fraud and fake transfer requests.

Data protection compliance

Personal data inventory, the security measures required by the applicable regulation and documentation of data-processing policies. Legal aspects, such as registration with the data protection authority, are coordinated with your legal counsel. The minimum needed to comply, with no surplus bureaucracy.

Responding to client requirements

Preparation of answers to security questionnaires from large clients and of the documentation needed for ISO 27001 when a contract requires it.

Managed security

Monthly support: review of accounts and access, of alerts and of critical updates, plus a direct contact when something looks off. The role of a security lead without hiring one full time.

Why SMBs choose us

check_circleWe speak in business terms: what could stop, for how long, and what it costs to prevent it.
check_circleWe do not sell licenses or hardware. We recommend what is needed, whoever makes it.
check_circleWe work with your current IT provider, not against them.
check_circleApplied research experience in threat detection and malware analysis, with patents and publications in the field.

Frequently asked questions

We are small. Would anyone really attack us? expand_more

Attacks on SMBs are not targeted: they are massive and automated. They aim at any company with an email account, a remote access or a misconfigured backup. Size does not protect you; configuration does.

Do we have to change our systems or antivirus provider? expand_more

Not necessarily. We work on what you already have and coordinate with your current IT provider. We recommend changes only when what exists cannot cover the risk.

What if we already had an incident? expand_more

Contact us directly. The first step is to contain and preserve evidence; then recover and close the entry point. The sooner you act, the smaller the damage.

Direct contact

Request a security assessment

Tell us which systems you use and what worries you. We reply within 48 business hours.

Assessment request Confidential