What you receive
- An architecture design
- Infrastructure as code
- Automated build and release
- Containers, where they fit
And 3 more
- Monitoring and alerts
- A cost report
- A handover
For: Products outgrowing one server or a set-up done by hand.
Cloud, security and support
Live systems kept secure, current, fast and looked after.
Choose what you need
QA and Testing
Fewer bugs in production, and tests that catch them before release.
What you receive
- A test strategy
- Automated tests for your key journeys
- Tests running on every release
- Accessibility checks
And 3 more
- Performance checks
- A bug report process
- Training for your team
For: Teams shipping bugs their customers find first.
What you receive
- A scan of what is exposed to the internet
- A review of gateways, databases and storage
- A review of secrets and access
- A backup restore test
And 3 more
- A findings report
- A prioritised fix list
- Cyber Essentials gap notes
For: Businesses and SaaS teams unsure how exposed they are.
Hardening Sprint
A production system locked down and documented.
What you receive
- The fixes, applied
- Network and firewall rules
- Access control changes
- Logging and alerts
And 2 more
- An incident runbook
- A retest report
For: Teams that need the findings fixed, not just listed.
GDPR and Data Protection Review
Clear records and controls that stand up to questions.
What you receive
- A map of where personal data flows
- A record of processing
- A DPIA for AI or high-risk processing
- Retention rules
And 3 more
- A supplier and contract checklist
- Privacy notice updates
- An action plan
For: Organisations handling personal data in apps or AI tools.
What you receive
- Access and accounts recovered
- A review of the code and hosting
- Backups checked and restored once
- Urgent fixes and security updates
And 3 more
- Documentation of how it all works
- A plan for what to improve
- A move onto a support plan
For: Owners of a live app or website whose developer has left.
Cloud Cost Review
A clear view of where the money goes, and a ranked list of savings.
What you receive
- A breakdown of what you pay for and why
- Unused and oversized resources found
- Savings ranked by effort and risk
- Quick wins applied, with your approval
And 2 more
- Budgets and alerts so it stays under control
- A walkthrough session
For: Businesses whose cloud bill keeps growing and nobody is sure why.
Compliance Readiness
You know exactly what stands between you and the certificate, and the gaps get closed.
What you receive
- A gap check against the standard you need
- Policies written in plain English
- Technical controls put in place
- Evidence collected and organised
And 2 more
- Support through the assessment
- A plan to stay compliant
For: Businesses asked by customers or partners for Cyber Essentials, ISO 27001 or SOC 2.
What can a stranger see about our systems?
Outside-in security look. What anyone on the internet can see about your systems, and the five fixes that matter most.
- You give us written permission and the addresses to check
- We check certificates, email settings and anything exposed, from the outside only
- A short report with the fixes in order
- It is free. There is nothing to pay and nothing to sign.
- The report is yours to keep and share, whatever you decide.
- No sales call unless you ask for one.
From first message to done
- 1
A first conversation
The problem, the people and the systems already in place.
- 2
Discovery
Time-boxed, with the people who will use it. It ends in a written brief.
- 3
A written quote
What it covers, what it does not, and how long it takes.
- 4
Sprints
A demo at the end of every sprint, on a copy of the real thing: weekly on smaller builds, every two weeks on larger ones.
- 5
Launch and run
We hand over cleanly, or stay to run and improve it.
Questions people ask
What does each service cost?
We send a written quote after your request. It says what it covers and what it does not.
Where should we start?
Services marked "Good first step" are small and fixed, so you can see how we work before committing to more. If you are unsure, tell us the problem in Get started and we will suggest one.
Who owns the work?
You do. Code, designs and documents are yours, and the quote says so in writing.
Can we pause or stop?
Fixed packages run to the end. Sprints can stop at the end of any sprint. Retainers and subscriptions state their notice period in the quote.
More services
Engineering consultancy
Agentic AI and automation
Brand and design
Marketing and content