Cyber Security

Security your business can actually use

Before anything elaborate, a business needs the handful of controls that stop the attacks that actually happen: done properly, kept up to date, and evidenced for your insurers and customers.

Risk

The attacks that actually hit businesses

Ransomware, account takeover, and the big one for anyone who sends invoices: email fraud, where a criminal spoofs your domain and redirects a customer's payment. We close those doors first. Here is the pairing, in plain English.

Invoice and email fraud A criminal spoofs your domain and sends a customer an updated set of bank details. The email looks like it came from you, because as far as the receiving mail server is concerned, it did.

What we put in place SPF, DKIM and DMARC configured properly, so your domain cannot be spoofed. For anyone who sends invoices, this is the highest-value fix there is.

Account takeover A stolen or phished password, often one reused somewhere else, and your email quietly becomes someone else's.

What we put in place Multi-factor authentication and least-privilege access across your cloud, email and admin accounts.

Ransomware and data loss One click encrypts the shared drive, and the backup turns out to have been failing quietly for months. No backups, no recovery.

What we put in place Tested, off-site backups, so a ransomware hit or a simple mistake is a bad hour rather than a lost business.

Controls

Our cyber security services

Six controls, sized to the business you actually run. Put in place properly, kept current, and written down so you can show an insurer or a customer what you have.

01 Security reviews and audits An evidence-based look at your real exposure, with a prioritised, jargon-free remediation plan.

02 Cyber Essentials readiness We get you certification-ready for Cyber Essentials and Cyber Essentials Plus: the badge that wins contracts and satisfies insurers.

03 Email-fraud protection SPF, DKIM and DMARC configured properly so criminals cannot spoof your domain: the single highest-value fix for any business that invoices.

04 MFA and access control Multi-factor authentication and least-privilege access across your cloud, email and admin accounts.

05 Backups and recovery Tested, off-site backups so a ransomware hit or a mistake is a bad hour, not a lost business.

06 Staff awareness Short, practical training so your team can spot a phish and a fake invoice before it costs you.

Cyber Essentials at Dacros: not yet held, and labelled as such until it is awarded. We help you get certification-ready; we do not yet hold it ourselves. What we can evidence

The review

Start with an external security review

A typical engagement starts here. We test what is publicly exposed: your website, email set-up, DNS and more, and give you a short, plain-English, prioritised report of the risks and the quick wins.

Yours to keep, whether you work with us or not. If the answer turns out to be that your setup is basically fine, we will tell you that.

Book my free review

Free · no obligation · the report is yours to keep

01
What we testWhat is publicly exposed: your website, your email set-up, your DNS and more. We look from the outside, the way an attacker would.
02
What you getA short, plain-English, prioritised report of the risks and the quick wins, written so you can act on it without a translator.
03
What it costsNothing, and there is no obligation. The report is yours to keep, whether you go on to work with us or not.

Specialist work

Two problems that need naming

Apps put live with AI tools that nobody has reviewed, and websites on PHP that nobody is patching. Each has a page of its own.

Security for AI-built apps and websites

Built it with an AI tool and put it live? We find what is exposed, fix what matters first, and keep it patched and watched.

PHP and WordPress security

Most of the web runs on PHP, and attackers know it. We find what your sites and servers run, patch it, harden it, and clean up if something has already got in.

Learn more about cyber security

Plain-English guides on the security decisions a business actually has to make. No email gate, no download form, no sales call attached.

Cyber Security guides Email Security guides All resources

Find out where you stand

Start with a free external security review: a straight, prioritised picture of your risk and the quick wins.

Book a free security review Email us