Six practices, run by one engineering team.
We design, secure and support the infrastructure your organisation runs on. Each practice below covers the work and the result.
IT infrastructure and networking
The networks, storage, servers and software your organisation runs on. We design them around how your sites actually work, from a single building to a network spanning several cities.
We build for growth. A new floor or branch should be a configuration change, not a rebuild. Security is designed in at every layer, so a compromised laptop in one office can't reach the servers in another.
What's included
- Network design, implementation and optimisation, including routing and switching configuration
- Wireless network design and implementation
- Storage architecture that is scalable and redundant, with backup and disaster recovery planning
- Physical and virtual servers, configured, optimised and maintained
- Custom software, integration of off-the-shelf products, and ERP solutions
- Structured cabling and low current systems, designed and built
What you have at the end: a documented, segmented network with as-built diagrams, IP address plans and configuration backups that you keep.
Cybersecurity and IT governance
Keeping the wrong people out, making sure the right people only reach what they need, and getting your data back when something goes wrong. Most clients need all six areas in some form.
Network security
- Firewalls, VPNs and secure remote access
- Network access control and wireless security
Endpoint security
- Endpoint detection and response (EDR) and extended detection (XDR)
- Email security
Identity and access management
- Authentication and authorisation for staff and administrators
- Role-based access control, with continuous monitoring of who can reach what
Data protection
- Encryption and data loss prevention (DLP)
- Backup and recovery, with business continuity planning and data centre and DR reviews
Security operations
- Security operations centre (SOC), SIEM and SOAR
- Incident response when something gets through
Governance and compliance
- ISO 27001 certification assistance and information security management system audits
- Cyber maturity assessment, PCI-DSS, GDPR, COBIT and SSAE 16/18 assessments, and IT risk strategy
What you have at the end: every device protected and reporting, access tied to named people and roles, a backup you have restored from, and the evidence to show your auditor.
Cloud and edge
Running some of your systems on infrastructure you rent rather than own, and some close to where the work happens. We place each workload where cost, latency and data residency make the most sense.
What's included
- An inventory of your applications, with a recommendation for where each one should run
- Consultation, implementation and management of IaaS, PaaS and SaaS services
- Migration planning and cut-over outside working hours, with a rollback plan
- Edge infrastructure for industrial sites, with scalable, redundant storage and backup
- Edge-to-cloud connectivity, including VLAN, subnet and layer 2 and 3 switching design
- Managed cloud services once you are running
| Model | You rent | Good for |
|---|---|---|
| IaaS | Servers, storage and networking | Moving existing servers without rewriting them |
| PaaS | A managed platform to run your own software on | Databases and in-house applications |
| SaaS | A finished application | Email, collaboration, HR and finance tools |
What you have at the end: each system running where it makes the most sense, a written migration and rollback plan, and a clear view of what you pay for each system.
Penetration testing and forensics
We attack your systems the way a real intruder would, with your written permission, and tell you what we got into and how to close it. When something has already happened, forensics establishes what was accessed, how and when.
How a test runs
- Scope. We agree targets, test windows and rules of engagement in writing.
- Test. Automated scanning, then manual testing to confirm what is actually exploitable.
- Report. Findings ranked by business risk, each with a specific fix.
- Retest. Once you've fixed them, we check again and update the report.
What's included
- Vulnerability assessment and penetration testing (VAPT)
- Application security testing and secure source code review
- Security configuration and security architecture reviews
- Security posture consultation
- Digital forensic investigation and remediation
- Security training and awareness for your staff
| Risk | Finding | Fix |
|---|---|---|
| High | Remote access VPN accepts password-only logins for admin accounts | Enforce multi-factor authentication on the VPN portal; disable legacy admin accounts |
| Medium | Guest Wi-Fi can reach the printer and CCTV segment | Add a firewall rule between guest and device VLANs |
What you have at the end: a short, prioritised fix list your team can work through, a retest that confirms the gaps are closed, and a report to hand your auditor or regulator.
Telephony and unified communications
Your phones, voicemail and video calls, running over your data network instead of separate phone lines. One system connects every branch, so an extension in Baghdad can transfer a call to Dubai as easily as to the next desk.
At Basrah International Airport we supplied and installed the PABX, the voice communication system and the radio system alongside the data centre and network.
Areas we work in
- Reviews of existing phone systems and lines
- IP telephony and VoIP design on the data network
- PABX supply and installation
- Voice communication and radio systems for operational sites
What you have at the end: one phone system across your sites, with internal calls between branches carried over your own network.
Managed IT and professional services
We take over the day-to-day running of your infrastructure: servers, storage, networks and end-user devices. Contract holders get support around the clock.
What an annual maintenance contract (AMC) covers
| Service | What it means in practice |
|---|---|
| 24x7 support | Servers, storage, mobility and end-user devices, including incident response and resolution |
| Monitoring | Threat, anti-phishing, anti-malware and DDoS monitoring, plus network management |
| Patch and asset management | Scheduled patching, and an up-to-date record of the hardware and software you own |
| Backup and storage | Managed backup and storage, kept sized for growth |
| Managed renewals | Licences, subscriptions and hardware support tracked and renewed |
| Managed security | Managed firewalls, WAF, DLP and SD-WAN, security as a service and cyber threat intelligence |
Professional services and automation
When you need people rather than a contract, we provide skilled engineers for a project, sized to what it needs. We also automate the repetitive tasks that are still done by hand, so they happen the same way every time.
What's included
- Technical resource outsourcing, with flexible allocation per project
- Project management for security operations centres
- Workflow automation for onboarding, access requests and approvals
- Consulting on emerging technology, licensing and vendor selection
What you have at the end: fewer surprises, renewals tracked in one place, and an internal IT team that spends its week on projects instead of password resets.
Technology partners
We design, supply and support platforms from these vendors.
Networking and wireless
Security
Servers and storage
Backup and data protection
Virtualisation, software and monitoring
Power and cooling
Radio and communications
Building systems
How engagements work
Every practice follows the same four stages. You can stop after any one of them: an assessment on its own is useful, and you own the design whether or not we deploy it.
Assess
We review what you have today, interview the people who run it, and write up where the risk and cost really sit.
Design
A written architecture with vendor options, a costed bill of materials and a rollout plan you approve before anything is ordered.
Deploy
Our engineers install, configure and test on site, with cut-overs scheduled around your working hours and a rollback plan for each.
Support
An annual maintenance contract keeps it patched, monitored and supported by a team that knows how it was built.
Not sure which practice you need? Start with an assessment.
A call with a senior engineer. Tell us what you're running and we'll tell you where we'd look first.