Prepare · Security hardening
Close the gaps attackers use most.
Security hardening reviews how your email, identity and cloud services are set up, then fixes the settings that most often let attackers in or let them stay. Practical changes, prioritised and explained in plain English.
Focus
Email, identity and cloud configuration
Based on
What we see in real incidents
Aligned to
Essential Eight and industry frameworks
Output
Prioritised changes and support to make them
Why it matters
Most incidents start with a setting.
In the incidents we respond to, the way in is rarely exotic. It’s usually an account without strong sign-in protection, logging that was never switched on, or access that was never removed. Hardening deals with those gaps first, because they’re the ones attackers rely on.
What’s included
Practical, not theoretical.
We prioritise what reduces real risk, so the first changes are the ones that matter most.
Account protection
How people sign in, and whether accounts are protected well enough to stop the most common takeovers.
Email security
Settings that make it harder to impersonate your business or quietly misuse a mailbox.
Access and permissions
Who can do what, and whether old or excessive access has been cleaned up.
Logging and retention
Making sure that if something does happen, the evidence exists and is kept long enough to investigate.
Recovery readiness
Whether backups and recovery would actually work when you need them.
Framework mapping
How your settings line up with the Essential Eight and the questions insurers ask.
How it works
From review to verified.
Review
We look at how your services are currently set up.
Prioritise
Findings are ranked by risk and effort, so you know where to start.
Fix
We make the changes with your team or IT provider.
Verify
We check each change is in place and working.
Re-check
A periodic review to make sure settings haven’t drifted.
What you walk away with
Clear outputs, not a slide deck.
- A configuration findings report
- A prioritised remediation plan
- Evidence for insurer questionnaires
- A before-and-after summary for leadership
Right for you if
When it makes the most sense.
- You’re renewing cyber insurance and need to show controls
- Your environment has grown without a security review
- You’ve had a near miss and want to close the gap
- You want to reduce the chance of needing incident response
Also in Prepare
Get ready before it counts.
Questions
Common questions.
What does security hardening involve?
We review how your email, identity and cloud services are set up, then fix the settings that most often let attackers in or let them stay, prioritised and explained in plain English.
Is it aligned to the Essential Eight?
Yes. The work is aligned to the Essential Eight and industry frameworks, and prioritised by what we see in real incidents.
Who makes the changes?
We make the changes with your team or IT provider, so nothing changes without the people who run your systems knowing.
How is this different from a compliance audit?
An audit tells you where you stand against a list. Hardening focuses on fixing the gaps attackers actually use, starting with the ones that matter most.
Will it stop business email compromise?
No setting stops every attack, but strong sign-in protection and good logging make email compromise much harder and much easier to investigate.
Security hardening
Make the next incident harder.
Tell us which services you use and what concerns you. We’ll suggest where to start.