Home / All services / Infrastructure
Networks & security
In most networks we audit, an infected PC at reception can reach the finance server. That is a design decision, not bad luck.
Network security doesn't start with an expensive appliance. It starts with the question of who should be able to reach what — and with that answer written into the configuration. Segmentation is the cheapest and most underrated control there is.
What we fix most often
- A flat network where every device can see every other device.
- Remote access with a single password and no second factor.
- Firewall rules accumulated over years that nobody cleans up.
- Guest Wi-Fi on the same network as internal systems.
- Shared administrator accounts with no trace of who used them.
MFA that doesn't get in the way
A second factor fails when it is annoying enough that staff route around it. We configure it with sensible exceptions for known devices and trusted networks, so security doesn't become the reason someone writes a password on paper.
Documentation as a control
An accurate network diagram is itself a security control: without one, nobody can tell whether a new rule opens something that should have stayed shut. Every change we make goes into the document the same day.
Not sure where to start?
The audit puts the whole picture on paper within two weeks, at a fixed price. The report stays yours whatever you decide afterwards.