Security audit
Web apps and APIs, servers, cloud accounts and everything you expose to the internet. Cyber Essentials readiness.
Findings report, ranked fixesSecurity engineering
We protect web platforms from real attackers, and keep them protected.
Multilayer protection, penetration testing, encryption and secure hosting for web services, including the platforms we build for you. Every job ends with evidence: a report, a re-test letter, a monthly status.
Written permission and a fixed scope before any test. No passwords in any report.
Every request passes six layers
1
Edge firewallOnly the ports a service needs
2
Traffic filtering and reverse proxyTLS ends here; rate limits and routing rules
3
Intrusion preventionShared blocklists, automatic bans
4
Private admin networkMesh VPN and client certificates; no admin panel on the internet
5
Hardened serversKey-only access, security patches within 14 days
6
Encrypted off-site backupsAppend-only, restores tested on a schedule
Security services
Find the gaps, close them, prove it
Penetration testing
Web applications and APIs to the OWASP testing guide, per user role. Networks, and apps built with AI tools. Free retest.
Report and re-test letterMultilayer protection
The six layers above, designed and set up for your systems: firewall, filtering, intrusion prevention, private admin network, hardening, backups.
Layer diagram, hardening recordEncryption and certificates
TLS rated A+, automatic renewals, your own certificate authority for staff and devices, encrypted data, managed secrets.
Certificate and key inventoryEnterprise Wi-Fi
WPA2/WPA3-Enterprise with 802.1X and RADIUS. Certificates for laptops, phones, and IoT and embedded devices.
Design, configuration, test logMonitor and respond
Leak and exposure monitoring, security updates, regular audits, and incident response: contain, clean, rebuild.
Monthly status reportWhen we build or host a platform for you
Designed for teams that expect to be attacked, not just scanned
Security is in the plan and the contract from day one, not added after launch. Each item below is a line in the project plan with its own check.
- Servers and backups in the EUIn the region you choose, with copies in a second location.
- Private mesh VPN for administrationNothing administrative is reachable from the internet.
- Traffic filtering at the edgeRate limits, intrusion prevention, shared blocklists.
- Two-factor sign-in and an audit logEvery admin action recorded: who, what, when.
- Security test before launchFindings fixed and re-tested before real users arrive.
- Updates and regular audits by contractSecurity fixes and dependency updates, with audits on an agreed schedule.
- Source code escrowYou are never locked in, whatever happens to us.
- Your account, our keysHosting in your name if you prefer; we hold only the access we need.
How we work
Each step ends with a document
- 1AssessA health check or a test. You get a findings report.
- 2AgreeFix plan, fixed price, your signed permission.
- 3FixChanges made, logged and re-tested. You get a re-test letter.
- 4RunMonitoring, patching, audits. A status report every month.
Security Health Check
Servers, accounts, email domain and internet exposure, checked against a written method.
Web App Penetration Test
One web application or API, tested per user role, with a free retest.
TLS and Encryption Check
Every certificate, protocol and key you rely on, with renewals automated.
Secure and Maintain
Patching, renewals, restore tests, exposure monitoring and a monthly report.
Ask for a quote
Tell us what you run; we reply with a fixed price.
Build & Run
We also build, move and run the systems
So the fixes we recommend actually get made, and new systems arrive already hardened.
BuildWeb applications, portals, SaaS and white-label platforms.
MigrateWindows to Linux, old databases to PostgreSQL, hosts and mail, with a rollback plan.
Set up and integrateServers, cloud, mail and helpdesk; single sign-on, payment and banking APIs.
Support and maintainAgreed response times, patches within 14 days, tested restores.
Our own systems
We run production systems behind the same six layers
Traced, contained and blocked at the network edge, with an evidence report for the client.
A hosting provider stopped two servers without notice. Firewall and tunnels were checked before services reopened.
Application and database moved onto two hardened Linux servers.
- Ground rules:
- Written permission before any test
- No passwords in reports
- Legitimate data sources only
- Credentials handed over by one-time links
Tell us what you run and what worries you
A 30-minute call, no charge. You get a short written note of what we would check first, and what it would cost.
Or write to info@idnl.solutions