Skip to content

Services

Cyber security

We protect companies and organisations before and after security incidents – with immediate response in an emergency, systematic hardening of Microsoft 365 and Entra ID, and reliable vulnerability analysis for Active Directory.

Situation

  • Security settings have grown over the years without MFA, permissions and email authentication being systematically updated.
  • In an emergency – compromised account, suspicious logins, extortion attempt – there is no contact person who can respond immediately.
  • There is no reliable statement on how vulnerable Active Directory and Entra ID actually are to common attack techniques.

What we take on

  • Automated and manual vulnerability analysis of Active Directory and Entra ID against known attack vectors.
  • Prioritised hardening: MFA enforcement, blocking legacy authentication, correct SPF/DKIM/DMARC configuration, restricting external sharing.
  • Configuration of conflict-free Conditional Access policies, tested in report-only mode before full activation.
  • Immediate measures in an incident: resetting credentials, ending active sessions, isolating affected accounts.
  • Analysis of audit logs to reconstruct an incident that has already occurred.
  • Ongoing standby contract with guaranteed initial response and communication support towards customers and partners.

Approach

  1. 01

    Analysis

    We systematically examine Active Directory, Entra ID and the M365 configuration for known vulnerabilities and misconfigurations.

  2. 02

    Prioritisation

    We assess the findings by severity and determine which measures must take effect first.

  3. 03

    Hardening

    We implement the measures, test them in report-only mode and activate them in a controlled manner in production.

  4. 04

    Readiness

    We remain available as a contact person, respond immediately in an emergency and support ongoing protection.

Deliverables

  • Risk report with severity, affected accounts and a prioritised list of measures
  • Demonstrably hardened M365 and Entra ID configuration with final documentation
  • In an incident: a contained, documented and communicated course of action
  • Guaranteed initial response in an emergency
  • Optional ongoing support model

Engagement model

  • Fixed-price project

    Defined scope, agreed deliverables and a fixed price. Suitable when requirements and interfaces are documented.

  • Time and materials

    Billing by hours worked. Suitable when scope is refined during the work or priorities change.

  • Operations and maintenance retainer

    An agreed monthly hour budget for maintenance, updates and small extensions to existing applications.

Matching offering: Security check Active Directory (on-premises) · CHF 0.-

All services

Contact

You can reach us directly. Describe your situation and we will come back with an assessment.

Send an enquiry