Cloud security, DevSecOps and compliance
Twenty-one years of securing what other people built.
AWS, Azure and Microsoft 365. Terraform and CI/CD pipelines. SOC 2, ISO 27001, HIPAA and CMMC readiness. And the call at 6am when a tenant has been compromised.
- $1M+earned on Upwork
- 220projects delivered
- 14,000+consulting hours
- 100%job success, Expert-Vetted
Everything that folds out of the handle
Fifty-odd services across four disciplines. Most engagements start in one and end up touching two.
Compliance and audit
Framework-by-framework mapping of controls, evidence and gaps — through to certification.
- International Organization for Standardization (ISO-27001)
- Federal Information Security Management Act (FISMA)
- Health Insurance Portability and Accountability Act (HIPAA)
- General Data Protection Regulation (GDPR)
- Sarbanes-Oxley Act (SOX)
- Payment Card Industry Data Security Standard (PCI-DSS)
- Gramm-Leach-Bliley Act (GLBA)
- CIS Benchmark
- SOC2 Compliance for O365
- Website OWASP scan and compliance report
- CMMC and NIST 800-171 readiness
Cloud, DevOps and automation
AWS and Azure estates that stay governable as they grow, with the pipeline and the infrastructure code secured together.
Microsoft 365 and endpoint security
Hardening the tenant, the identities and the devices your people actually work on.
- Comprehensive Microsoft Ecosystem Security and Configuration Solutions
- Security Assessment Of Microsoft Office 365 Environments
- About
- Microsoft Security score improvement
- Configure Microsoft Defender For Cloud Apps
- Microsoft Defender Configuration For Identity
- Configure Microsoft Privileged Identity Management (PIM)
- Configure Microsoft Windows 365
- Microsoft phishing, spam and malware attack investigations
- Incident response and digital forensics
- AI security and Copilot readiness
- O365 email protections with Proofpoint
- O365 email protections with Mimecast
- Active directory health check
- Active directory security assessment
- GPO assessment and clean-up
- Tenable Vulnerability Management
Cloud and migration
Moving workloads and mailboxes without breaking what already works.
- Microsoft On-prem to cloud migration
- Azure lift and shift migration
- VMware to Azure migration
- Azure Virtual Desktop Configuration
- Azure cost analysis
- Azure AD B2C Custom Policy Implementation And Optimizations
- Exchange Hybrid Email Migration
- Google-to-Microsoft email migration
- Email migration with BitTitan
- Email migration with Quest software
- Defederate Domain From Godaddy 365
Ongoing advisory
A named specialist on call, instead of a scramble when something goes wrong.
What clients say afterwards
Nandy has literally saved us thousands of dollars and countless man hours. He is by far the most knowledgeable and experienced contractor I have ever worked with. I have thrown massive DNS issues at him, exchange server problems, Intune deployments, Azure AD connector problems, failing DHCP servers, and more. He has fixed literally every single one of those things.
I was in a crisis and unable to work, Microsoft totally unresponsive and Nandy to the rescue. He was reassuring, great critical thinking skills, outstanding problem solving and very patient in understanding the combination of issues presented. He responded within 15 minutes of my request.
Nandy did a phenomenal job in resolving our issue. In 4 hours, he fixed what our engineering team worked on for a week. This was an unusual issue, but he remained focused and worked through it.
Nandy is extremely knowledgeable and has been a critical addition to our team. He knew exactly how to resolve all of our security woes and has helped us with security for the long term.
Not sure which of these you need?
That’s usually the first thing worth talking about. A consultation costs nothing.