Skip to content
Words and Wires

Cybersecurity for small and mid-sized businesses

Hardening, monitoring and documentation for organisations without a security team.

CyberFundamentals 2025

Businesses must now show they follow a recognised security framework. We prepare the policies, documentation and risk analyses to align with the CyberFundamentals Framework 2025 (CyFun®), basic level. You can then seek certification from an accredited body.

The result: resilient, auditable systems, ready for certification.

What we do

Governance and risk

  • inventory, removal of unneeded services
  • password and multi-factor policies, disk encryption
  • logging, log rotation, time sync

Hardening and monitoring

  • network segmentation, access lists, VPN
  • reverse proxy, web firewall, security headers
  • intrusion detection and IP blocking

Compliance

  • alignment with the CyFun basic level
  • measures sized for SMEs
  • documentation ready for audit
A segmented network Internet traffic and remote VPN access pass through a firewall with intrusion detection, which keeps the office network and the servers apart. Internet VPN Firewall intrusion detection Office network Servers

Tools we work with

Suricata, pf, OpenVPN, WireGuard, journald, rsyslog, Loki, Promtail, Grafana, Postfix, Dovecot, Fail2ban, and encrypted backups with Borg or Restic. We also work with your existing tools.