Network security assessment
Architecture review, configuration audit against CIS and vendor hardening guides, exposure analysis, ranked findings.
Services
Security engineered into the network, not bolted on afterwards.
Assessments, segmentation, firewall architecture, zero-trust access and hardening for networks we build and networks we inherit — with findings you can act on and controls you can prove.
What's included
01
02
Segmentation design
VRFs, group-based policy and firewall insertion points defined by business function and enforced end to end.
03
Firewall and IPS architecture
Placement, sizing and policy model for Palo Alto, Fortinet, Cisco and Juniper platforms.
04
Zero-trust access
Identity-aware access for users and devices via ZTNA, NAC and SSE, replacing flat VPN.
05
Hardening and compliance
Device hardening, management-plane protection, logging and evidence mapped to SOC 2, HIPAA, PCI DSS or NIST.
06
Validation
Policies tested on the twin and with controlled penetration testing before and after changes.
How an engagement runs
01
Assess
Two to three weeks. Report with findings, risk ranking and roadmap.
02
Design
Segmentation, firewall and access architecture with policy as code.
03
Implement
Controls deployed in waves, each twin-validated and verified.
04
Prove
Evidence package and retest; optional continuous assurance under managed operations.
Questions we get asked
Do you do penetration testing?
Network-focused testing before and after changes, yes; full application and red-team engagements we scope with a specialist partner.
Can you help with an audit coming up?
Yes. The assessment maps findings to the framework you are audited against and prioritises what the auditor will ask about first.
Request a quote
Tell us about the project; a senior engineer responds the same business day.