Not-for-profits
Reliable IT for mission-driven teams.
IT and security,
delivered with rigour.
We manage IT and cyber security for not-for-profits and growing businesses across Australia, so your team can focus on the work that matters.
N-able
SentinelOne
Acronis
ManageEngine
What we do / 01
What we look after.
Six services, all run in-house by the same senior engineers. Nothing gets resold, and nothing gets handed to a call centre.
Managed service
Microsoft 365 & Cloud
Tenant design, migration and day-to-day management of M365, Azure and the cloud services your work depends on.
- Tenant design and identity (Entra ID)
- Email, SharePoint and Teams migration
- Azure, backup and licensing management
Managed service
Cyber Security
Layered defence built to the Essential Eight: hardening, monitoring and response that holds up under real scrutiny.
- Essential Eight maturity assessment
- MFA, application control and patching
- Monitoring, alerting and incident response
Managed service
IT Strategy & Roadmap
A clear, costed plan that ties technology to outcomes, so every decision is deliberate rather than reactive.
- Costed multi-year IT roadmap
- Budget and lifecycle planning
- vCIO advisory and governance
Managed service
VOIP & UCaaS
Cloud telephony and unified comms that keep your team reachable on any device, wherever the work happens.
- Teams Phone and SIP trunks
- Number porting and call flows
- Mobile and remote calling
Managed service
Web Development & Hosting
Fast, secure, well-built websites: designed, developed and hosted on infrastructure we actually maintain.
- Design and build
- Managed, secure hosting
- Ongoing maintenance and updates
Managed service
AI Strategy & Adoption
Practical, governed adoption of AI where it saves real time, with the guardrails to keep your data safe.
- Copilot rollout and training
- Data access and governance guardrails
- Use-case scoping and pilots
How we work / 02
A deliberate path from chaos to calm.
The same method whether we're untangling a legacy environment or building one from scratch.
-
01 Assess
Understand
We map your environment, risks and goals, and rate where you stand today against the Essential Eight.
-
02 Plan
Roadmap
A clear, costed plan with priorities, timelines and the outcomes each step is meant to deliver.
-
03 Implement
Build
Senior engineers do the work, carefully, documented, and with minimal disruption to your team.
-
04 Manage
Sustain
Ongoing management, monitoring and review, so the gains hold and the roadmap keeps moving.
Our discipline / 03
The Essential Eight, by the book.
The ASD's eight mitigation strategies are the baseline for cyber resilience. We treat them as exactly that. A baseline to measure, mature, and improve.
Strategy 01
Application control
Only approved applications are allowed to execute, preventing unapproved or malicious programs from running on your environment.
- Approved-app inventory and policy
- Block unauthorised executables and installers
- Exception workflow for new requirements
Strategy 02
Patch applications
Security patches for applications are applied promptly, closing the vulnerabilities attackers rely on most.
- Automated patching pipeline across endpoints
- Risk-rated update windows
- Reporting on patch coverage and exceptions
Strategy 03
Configure Office macros
Microsoft Office macros are disabled or tightly restricted, since they are a common delivery method for malicious code.
- Block macros from the internet by default
- Trusted-publisher signed macros only
- Block macro write to disk where possible
Strategy 04
User application hardening
Browsers and applications are hardened, disabling risky features and untrusted plug-ins to shrink the attack surface.
- Browser policy baselines
- Block Java, Flash and unsigned plug-ins
- Block ads and untrusted script in scope
Strategy 05
Restrict administrative privileges
Admin access is limited, validated and regularly reviewed, so a single compromised account can't take down everything.
- Separate admin accounts from user accounts
- Just-in-time elevation where supported
- Quarterly access review
Strategy 06
Patch operating systems
Operating systems are kept current with security updates, and unsupported versions are retired before they become a liability.
- Scheduled OS update rings
- Out-of-support OS replacement plan
- Failure detection and remediation
Strategy 07
Multi-factor authentication
A second factor is required to sign in, neutralising the vast majority of credential attacks even when passwords leak.
- Phishing-resistant MFA for staff and admins
- Conditional access for risky sign-ins
- Recovery process that doesn't bypass MFA
Strategy 08
Regular backups
Important data is backed up, retained, and tested for restore, so you can recover quickly from an incident.
- 3-2-1 backup pattern with off-site copy
- Tested restores on a documented cadence
- Immutable retention to defeat ransomware
// How we apply it
We assess your current maturity against each strategy, agree a target, and close the gap with a costed roadmap, reviewed on a cadence that suits your organisation.
Who we serve / 04
Who we work with.
Growing businesses
Senior IT that scales with you.
Let's talk / 05
A conversation, not a sales pitch.
Tell us where things stand. We'll give you an honest read on your IT and security, plus a clear first step, whether or not you work with us.