Four services, one principle: identity first.
Whether you want to know where you stand, have something built, have your environment watched or prove that it's right: with us it starts with who has access and whether that still makes sense. All on the Microsoft platform, delivered by people who do the work themselves.
Why we don't do everything
Some security providers answer every question with yes. We don't. We work on the Microsoft platform and on identity, devices, access, detection and demonstrability. That's what we're good at and where we stay.
For the rest we know the right parties. Better an honest no than a mediocre project.
What we do
Measure, build, watch, prove. Pick where you step in.
Assessments
Digital Defense Review and Compliance Readiness Review
Before you invest, you want to know what's really lacking. The Digital Defense Review benchmarks your Microsoft environment technically: identity, Conditional Access, devices, mail, data and logging. The Compliance Readiness Review does the same against a standard: ISO 27001, NEN 7510 or BIO. Both deliver priorities, not a list of everything that's red.
- Weeks, not months
- Findings ranked by risk and effort
- Board presentation included
- Usable as a project plan right away
Implementation
Entra ID, Intune, Conditional Access, IAM and IGA
We build what the assessment points to, and we finish it. Phishing-resistant MFA and passwordless, Conditional Access that matches how people work, device management with Intune, and identity governance that lets permissions expire instead of accumulate. The design lives in a document that explains why, not just what.
- Design-driven: every choice with rationale and alternative
- Phased rollout without downtime
- The same specialists from design to delivery
- Handover to operations included
Managed Security
SOC++, vulnerabilities and incidents
A SOC that puts identity at the centre. Signals from Entra ID, Microsoft 365 and Defender come together in our AI-driven platform, which filters the noise before an analyst looks. What remains is real. Around it we manage vulnerabilities and incidents, so an alert becomes a completed action.
- Identity-first detection
- AI does the triage, a person decides
- Dedicated analysts who know your environment
- Vulnerabilities and incidents feed your compliance
Managed Compliance
Compliance as a Service: ISO 27001, NIS2, NEN 7510 en BIO
Becoming compliant is a project. Staying compliant is organisation, every month again. We run the PDCA cycle as a service: one backlog with an owner per action, evidence that doesn't go stale, quarterly reporting and a management review that's prepared. You stay the owner of risks and decisions. We track, prepare and prove.
- No more audit panic
- One backlog, one owner per action
- Evidence, decisions and reports in order
- CISO as a Service as an add-on
How to choose
Don't know where you stand?
Start with an assessment. Within weeks you know what's going on and what comes first.
Know what needs to happen?
Then we build it. Design, rollout and handover by the same people.
Running, but nobody's watching?
Managed Security watches your environment and handles what happens.
Need to prove it's right?
Managed Compliance keeps the PDCA cycle turning, every month, quarter and year.
Do you know where you stand?
A Digital Defense Review gives you an honest picture of your Microsoft environment within weeks, plus a list of priorities. No sales pitch, a report you can actually use.
Or call +31 (0)85 303 46 43