Skip to content

Who we are

The UK Azure practice for organisations that answer to someone

We work on one platform, Microsoft Azure, for central government departments and regulated businesses that have to evidence their controls to an auditor or a regulator.

Working on one platform means we know it in detail: how Azure Policy, Defender for Cloud and Entra ID behave in a large estate, and how their output maps to the frameworks our clients report against, such as the NCSC Cloud Security Principles and ISO 27001.

Most of our work starts after someone else’s project finishes. A landing zone gets built, the delivery team rolls off, and the estate passes to people who didn’t design it. Six months later the policy exemptions have no expiry dates, Defender findings are counted each month and stay open, and producing audit evidence takes a fortnight of screenshots.

What these estates need is an owner: a control set everyone has agreed, a named person against each finding, and a regular report showing what has moved. That’s the work we do.

How we work

  • Designs sized to your team. Every design is built for the team that will run it after handover, and the runbooks come with it.
  • Findings with owners and dates. Each finding on our reports carries a named owner and a target date, so Secure Score moves from one month to the next.
  • Cover written into the contract. Where an engagement needs out-of-hours cover, the contract sets it out along with the named people who provide it.

Our clients

Who we work with

  • Department for Education
  • Education & Skills Funding Agencynow part of DfE
  • Department for Work & Pensions
  • The Insolvency Service
  • Livestock Information Ltd
  • Allianz Bank
  • + 1 under NDA

References available on request. More about our client work

Getting started

Most engagements start with a 30-minute call with the architect who would lead the work. We'll talk through your estate and what has prompted the review, and you'll come away knowing which kind of engagement fits.