A dedicated security team for your business cloud.
Always on. Learns how your business normally works. Raises the alarm when something isn't right. A full Security Operations Centre, distilled to the size of your business and watching around the clock.
Join the waitlist How it works// What an alert sounds like. Plain English. No log dumps. Only when it matters.
The threats that matter no longer arrive at the front door.
Sophisticated attackers don't bother breaking your office WiFi. They buy a stolen session and walk into an inbox with no password and no MFA challenge. They plant a silent forwarding rule and read your correspondence for months before quietly altering one invoice. They land in the cloud tenancy an IT company set up years ago and nobody has looked at since.
Enterprise-grade exposure. Consumer-grade defences. No one watching. Until now.
A full security operations centre, sized to your business.
Your business is watched by a dedicated team of AI security analysts, ring-fenced to you alone. Triage analysts see every signal. Investigating analysts corroborate anything of interest across weeks of history, not seconds. And a context analyst learns your patterns of life: who runs the company, who handles the invoices, where your people sign in from and when. That memory belongs to your business and nobody else.
No rules engine. Everything observed, everything retained, judgement before noise.Traditional security tools fire on preset rules and bury you in false alarms. Ours read the story.
What we watch.
Identity and email
Sign-ins from places your people are not. Mailbox rules quietly forwarding mail out. Second factors added by someone who should never have added them. Privilege changes nobody asked for.
Cloud and workspace
Configuration drift across Microsoft 365 and Google Workspace, storage left open to the internet, and new applications granted access to your data.
Dark web and criminal channels
Criminal forums and marketplaces, watched for your domain, your people's credentials and your stolen sessions. A session for sale is an immediate threat, and we treat it as one.
Silent tripwires
Decoy documents placed through your file stores that exist only to be stolen. A tripwire has no innocent explanation, which is why one firing is the highest-fidelity alarm there is.
We watch your cloud, not your keyboards. No software on your machines, no agents, no slowdowns.
Four movements. You are only asked for something at the fourth.
Signal
Security telemetry from your Microsoft 365 or Google Workspace streams in continuously. Nothing depends on someone remembering to check a dashboard.
Triage
Detections are correlated and read by an analyst. The routine noise is closed out at our end, which is how you only ever hear about the things that matter.
Alert
We reach you in plain English with what happened, what it touches, and what we recommend doing about it. Urgent means a phone call, not an email you find on Monday.
Contain
On your say-so we kill the session, revoke the token or reverse the change, in minutes, and we stay on the line until it is resolved.
Your authorisation gates everything past this line. The watch is read-only until you say otherwise.
A watch is only as good as what it knows to look for.
- Daily deep research. This morning's threats on this afternoon's watch-list, researched fresh every day, not bought as a stale feed.
- Criminal marketplace intelligence. Stolen sessions and infostealer logs surfaced in hours, not months.
- National cyber intelligence. Threat indicators through our participation in the NCSC's Malware Free Networks partner programme.
- A memory measured in weeks. The slow, patient intrusion still forms a visible pattern to a team that never forgets what it saw last Tuesday.
Always on the line. Never in the way.
- Ring-fenced per client, isolated at the database layer. Your data and your patterns are never pooled.
- Read-only access. Nothing acts in your environment without your authorisation.
- A one-page monthly briefing in plain English. Everything else waits unless it is urgent.
- Operated under the NZ Privacy Act 2020.
Thirty minutes to begin. A fortnight to know you.
Day one
Consent and connection. Read-only, no software installed, and the watch begins the same day.
Week one
A relaxed conversation about how your business runs: who does what, where people work, what normal looks like.
Weeks one and two
Quiet learning. The team baselines your rhythms before it raises its voice.
Onward
Full watch, monthly briefings, and a team on the line whenever it matters.
Join the waitlist.
Places are limited so every client gets a genuinely dedicated watch. Tell us what your business runs on and we will be in touch about the security offering.