Keep the business running when something goes wrong
Most security incidents start with something ordinary: a reused password, an unpatched server, a convincing email, a backup nobody has ever restored. We find those gaps in the environment you already have, close them in order of risk, and make sure that if the worst does happen you can recover — from a copy that has been tested.
Close the gaps attackers actually use
Good security is rarely one expensive product. It is a set of sensible controls, configured properly and kept that way.
Security assessment & IT audit
- Review of your existing network, servers, cloud and devices
- Inventory of hardware, software, accounts and admin rights
- Firewall rules, remote access and exposed services checked
- Backup and recovery check, including a trial restore
- Findings ranked by risk, in a written report you keep
Firewalls, segmentation & remote access
- Firewall deployment, rule clean-up and periodic review
- Network segmentation, so one compromised device cannot reach everything
- Site-to-site and remote access VPN with multi-factor authentication
- Exposed remote desktop and forgotten port forwards removed
Endpoint protection & device management
- Managed endpoint protection on laptops, desktops and servers
- Central management of company and personal devices
- Disk encryption and screen-lock policies
- Local administrator rights removed where they are not needed
- Remote lock and wipe for lost or stolen devices
Email security & anti-phishing
- Spam, malware and phishing filtering
- SPF, DKIM and DMARC set up correctly for your domains
- Protection against impersonation and payment-fraud emails
- External and look-alike senders clearly flagged
Identity & access
- Multi-factor authentication for every user, administrators first
- Single sign-on, so staff have fewer passwords to manage
- Least-privilege access: what the job needs and no more
- A joiner, mover and leaver process that really closes accounts
- Password policy and password manager roll-out
Patch & vulnerability management
- Operating system and application patching on a schedule
- Firmware updates for firewalls, switches and access points
- Regular vulnerability scanning, internal and external
- End-of-life systems identified, then replaced or isolated
Microsoft 365 & Google Workspace hardening
- Tenant security review against the vendor's own recommendations
- Multi-factor and conditional access policies
- Legacy sign-in protocols switched off
- External sharing and guest access brought under control
- Mail forwarding rules and third-party app permissions reviewed
Monitoring & alerting
- Monitoring of servers, firewalls, links and backup jobs
- Alerts for failed backups, unusual sign-ins and new admin accounts
- Alerts reviewed by an engineer, not left in an inbox
- Escalation through our 24/7 hotlines
People, policies & documentation
- Staff security-awareness training in plain language
- Acceptable use, password, remote working and backup policies
- Network diagrams, asset registers and admin records kept current
- Help preparing for audits and requirements you are subject to
Backups that have been restored, not just run
A backup is only proven by a restore. We design backup and recovery around how long you can afford to be down and how much data you can afford to lose — and then we test it.
Backup of servers, mailboxes & databases
- Servers, virtual machines and file shares
- Microsoft 365 and Google Workspace mailboxes, drives and shared sites
- Databases behind your ERP, POS, HR and accounting systems
- Off-site and immutable copies that ransomware cannot alter
- Scheduled test restores, with the result recorded
Disaster recovery & business continuity
- Recovery time and recovery point objectives agreed with management
- Step-by-step recovery runbooks
- A plan for how staff keep working while systems are down
- Recovery exercises, and the plan updated after every major change
Ransomware readiness & incident response
- Backups separated from the accounts and network they protect
- A written incident plan: who decides, and who calls whom
- Containment, investigation and clean recovery when an incident occurs
- Logs and evidence preserved for insurers and authorities
Guests, cameras and tills off the business network
In a hotel, one building carries guest Wi-Fi, staff computers, the PMS, POS terminals, CCTV, door locks and IPTV. If they all share one flat network, a guest laptop or a cheap camera is a single step away from the front-office and finance systems.
We separate them. Guest Wi-Fi reaches the internet and nothing else. CCTV recorders and access-control controllers sit on their own segment, away from the business network. The same applies to offices with visitor Wi-Fi, clinics, shops and warehouses. The switching and wireless design behind it is handled by our network and data centre team.
| Network zone | How we treat it |
|---|---|
| Guest Wi-Fi | Internet only; isolated from staff systems and from other guests |
| Staff and back office | Business systems only, with access by role |
| POS and payment terminals | Own segment, limited to the services they need |
| CCTV and recorders | Separate segment, no direct exposure to the internet |
| Access control and door locks | Separate segment, managed from named workstations |
| IPTV, printers and smart devices | Kept apart from servers and finance data |
Assess, fix, then keep watching
We start with the environment you have, not a shopping list. You see the findings and the priorities in writing before any work is quoted.
Most of the work is done remotely. Where hands are needed on site in Saudi Arabia, it is carried out with our local partners. We have been operating since 2018 and serve clients in Saudi Arabia, the GCC and Europe, and remotely elsewhere.
Assess
We review the network, servers, cloud tenancy, devices, accounts and backups.
Prioritised plan
Every finding is ranked by risk and effort: what to fix first, and what can wait.
Fix
We close the gaps in the agreed order, scheduled around your working hours and documented as we go.
Monitor
Monitoring and alerting are switched on, and test restores are put on a schedule.
Review
We meet regularly to go through what was seen, what has changed and what to tighten next.
Security that is kept up
A secure configuration drifts unless somebody looks after it.
Managed security in your support contract
Ongoing security can be part of a managed IT support contract with us: patching, monitoring, test restores, access reviews and a regular report, backed by our 24/7 hotlines and remote support.
Our own software and ZATCA systems
We apply the same discipline to what we deliver ourselves. When we deploy our ERP, HR and POS software, or connect a system to ZATCA, we configure it securely: access by role, encrypted connections, restricted storage of certificates and API credentials, and databases included in the backup schedule.
Frequently asked
Yes. Most of an assessment is review work on configurations, accounts, firewall rules and backup jobs, done remotely with read-only access wherever possible. Anything that could affect a live system, such as a vulnerability scan or a trial restore, is agreed in advance and scheduled outside busy hours.
Because a backup job that reports success is not the same as a system you can bring back. Restores fail for ordinary reasons: a database that was never included, a missing encryption key, or a recovery that takes far longer than anyone assumed. We restore real data on a schedule and record the result, so you know what you can recover and how long it takes.
We are an IT services company, not a certification body, and we do not issue certificates. We do the practical work behind them: putting controls in place, writing the policies and keeping the evidence, so that you are better prepared for the requirements you are subject to and for whoever audits them.
Usually not. We start with what you already own. We recommend replacing something only when its manufacturer no longer supports it or it cannot be made safe, and we explain why in writing before you spend anything.
Disconnect the affected machines from the network, wired and wireless, but do not wipe or reinstall them, because the evidence on them matters. Then call one of our 24/7 hotlines. We will help you contain the incident, establish what was affected and recover from a clean copy.
Find out where you really stand
Ask us for an assessment. We will tell you plainly what is exposed, what is fine as it is and what we would fix first. Nobody can promise you will never be attacked; we can make an attack harder and a recovery faster.