Identity & security

Identity locked down, endpoints defended, evidence mapped. Who can sign in, what runs on each device, and the evidence for both.

Scope

What the work covers.

Identity

Entra ID, Active Directory, or Okta cleaned up, with MFA enforced.
Account lifecycle

Joiners and leavers handled through ADManager Plus.
Endpoint protection

CrowdStrike or SentinelOne deployed and tuned.
Detection

Arctic Wolf MDR or Wazuh connected to the right sources.
Data, mail & browser

Varonis, Mimecast, and Island for data, mail, and browser security.

Every project runs Discovery, Design, Build, Handover. How we work

Platforms

Hardware and licensing through MQ3 Labs, or bring your own.

Track record

Enterprise

A 5,000-person insurance company, built and run end to end.

Its data center, a Nutanix and Rubrik core, Meraki across 120-plus sites, and company-wide Citrix.

Client names stay private. All selected work

Before you write

01 Your identity provider, or providers.
02 The endpoint and security tools already in place.
03 A recent audit, insurance questionnaire, or incident, if one is driving this.
04 The date it needs to be done by.

Missing some of it? Send what you have; we will work out the rest together.

Questions

Is this an audit or a build?

A build. We configure and fix; the changes and findings are mapped to NIST CSF 2.0 and CIS Controls in the evidence package.

Will the evidence satisfy our insurer or auditor?

It is built for their review: logs, configuration exports, and findings mapped to NIST CSF 2.0 and CIS Controls. They make the call.

Get in touch

Tell us about your project and timeline. Expect a written reply within one business day, from the engineer who will do the work.

Prefer email?

Existing clients