Application Security

Design reviews, threat modelling, secure coding and CI/CD controls.

Cloud & Infrastructure

Azure/AWS/GCP landing zones, identity, network and hardening.

Apps, APIs, mobile and cloud/infrastructure assessments.

CAF, ISO 27001 and NIST CSF alignment with evidence by default.

Secure digital change — architecture, modernisation and data/AI.

Hardening, detection engineering and incident support.

Board briefings, supplier assurance and investment cases.