Microsoft security & performance · 25 years of experience
Identity, mail, endpoints and the network underneath. On-premises and in the cloud. We make it secure and fast, and we are there when something goes wrong anyway.
01 — Why people call us
Before it goes wrong.
Most incidents are preventable with what you already pay Microsoft for. We find the gaps, close them, and make sure your team understands why. An assessment is usually the starting point.
Request an assessmentWhen it goes wrong.
A compromised account, ransomware, mail being read by someone else. We help contain, investigate and recover, and then make sure the door stays shut.
Get in touch02 — Services
Tiering, hardening, AD CS, Group Policy and the hybrid link with Entra ID. The on-premises side everyone forgets, and attackers do not.
Tenant hardening, Defender, Purview, and the settings nobody has looked at since the migration.
Conditional Access that actually blocks things, phishing-resistant MFA, privileged access with PIM, and a clean-up of twenty years of accumulated rights.
Stop lateral movement. Segmentation, firewall policy and access design, from data centre to branch office.
Containment, investigation, recovery, and an account of what happened that your board can read too.
Where you stand, ranked by risk, with fixes your own team can carry out. No eighty-page report that nobody reads.
Slow logons, applications that hang, an Azure Virtual Desktop environment that cannot keep up. We measure instead of guessing, find the real cause and fix it. Secure and fast are not mutually exclusive.
A senior security lead on call or on site. Strategy, architecture, and a steady hand between two hires.
03 — Hybrid is the reality
Active Directory
Domain controllers, Kerberos, Group Policy, certificates. Twenty years old and still the heart of most networks.
Synchronisation and trust
Entra Connect, hybrid joins, password hash sync, legacy authentication. This is where the weakness almost always sits.
Entra ID & Microsoft 365
Conditional Access, Defender, Intune, Purview. Powerful, provided someone configures and maintains it.
We know both sides, and the link between them. Not from a course, but from years of work at Microsoft and at organisations that run on it every day.
04 — About THQ
THQ started in networking and then spent years at Microsoft itself, partly in Redmond, focused on the on-premises platform: Active Directory, Windows Server and identity. Then on into the cloud, including services such as Azure Virtual Desktop, internationally and in enterprise environments. That is why we see the whole picture and know the products from the inside. Senior people only: the person you talk to is the person who does the work.
Networking
Routing, firewalls, segmentation. The layer everything rests on.
On-premises platform
Active Directory, Windows Server, identity. From the inside, at Microsoft itself.
Cloud
Entra ID, Microsoft 365, Defender. Internationally, in enterprise environments.
THQ
All of that knowledge, directly available to your organisation.
05 — How we work
Assess
Identity, endpoints, Microsoft 365 and network as one system, on-premises and cloud. We rank what really matters.
Harden
We close the gaps, usually with what you already license, and document every change.
Stay ahead
Periodic reviews, a direct line when something looks off, and help the moment it is needed.
06 — Contact
Tell us what is going on, or what you want to prevent. We reply within one business day.
Go to the contact form