EngagementsFrom assessment to operations.
Three practice areas: websites, security, AI and automation. Scope and budget fixed in writing before day one.
Websites
Fast, secure and sober websites. Built to last, maintained, and visible on Google as well as in AI assistants.
Websites · Build4 to 10 weeks
A fast, secure site that is easy to keep alive.
- Structure, design and copy aligned with your brand
- Modern, documented code that you own
- Performance, accessibility and SEO measured before delivery
- Security and GDPR built in from the design stage
Request a callWebsites · Operationsmonthly subscription
A site that stays current, available and secure, month after month.
- Security and dependency updates
- Hosting, backups and uptime monitoring
- Content and feature changes
- Monthly report: performance, security, traffic
Request a callWebsites · Visibilitymonthly subscription
Found on Google, and cited by AI assistants.
- Technical, semantic and competitive audit
- Pages, structured data and performance optimised
- GEO: presence in answers from ChatGPT, Perplexity and Google AI Overviews
- Expert content and monthly tracking of rankings and citations
Request a callWebsites · Custom build6 to 16 weeks
Client portals, extranets, line-of-business tools: what brochure sites cannot do.
- Scoping of journeys and data with your teams
- User accounts, roles and access rights
- Connection to your existing tools: CRM, ERP, payment
- Security, testing and documentation delivered with the code
Request a callWebsites · Compliance3 to 6 weeks
A site usable by everyone, and compliant with the law.
- Audit against RGAA and the European Accessibility Act
- Fixes to code, content and journeys
- Accessibility statement and multi-year plan
- Testing with screen readers and keyboard navigation
Request a callWebsites · Starting point2 weeks
What is holding your site back today, and how to fix it.
- Performance, search visibility, accessibility, security
- Analysis of journeys and friction points
- Prioritised, costed redesign plan
- Clear readout, usable even without us
Request a callSecurity · Starting point14 working days
Where you stand, and what is missing.
- Scope qualification: essential or important entity
- Measured gap against the ten Article 21 measures
- Asset and dependency mapping
- Sequenced remediation plan, presented to management
Request a callFlagship formatSecurity · Implementation8 to 12 weeks
Measures deployed, documented, provable.
- Risk analysis and information security policies
- Continuity, backups, crisis management
- Supplier security and 24-hour incident notification
- Evidence file ready for inspection
Request a callSecurity · Tooling4 to 8 weeks
A tool installed is not a tool in service.
- SIEM, EDR, IAM: deployment and configuration
- Wiring into the existing information system
- Detection rules and runbooks
- Handover to your internal teams
Request a callSecurity · Verification1 to 3 weeks
Find the flaws before those who are looking for them.
- Web applications, APIs, external and internal network
- Realistic attack scenarios, scope validated in writing
- Detailed report: evidence, severity, fixes
- Retest after remediation
Request a callSecurity · Certification3 to 9 months
From gap analysis to the certification audit.
- Gap analysis and scope of the management system
- Risk analysis, statement of applicability, policies
- Internal audit and management review
- Support through to the certification audit
Request a callSecurity · Peopleannual subscription
The first attack vector is still people. They can be trained.
- Phishing simulation campaigns tailored to your activity
- Short modules for each population: management, teams, newcomers
- Management training required by Article 20 of NIS2
- Progress dashboard, quarter after quarter
Request a callSecurity · Crisisannual subscription
When an incident happens, you know who to call.
- Response plan and crisis exercises prepared in advance
- Priority intervention: containment, investigation, restoration
- Notifications to authorities within NIS2 and GDPR deadlines
- Lessons learned and hardening plan
Request a callAI · Production4 to 6 weeks
A prototype does not survive production. We ship what does.
- Agents and RAG over your internal knowledge bases
- Production rollout with observability and cost control
- Guardrails, logging, human review
- Handover to your teams or managed operations
Request a callAI · Operationsmonthly subscription
Your agents in production, monitored and under control.
- Design and deployment of agents on your tools and data
- Continuous monitoring: response quality, costs, incidents
- Regular evaluations and model updates
- Access rights, guardrails and action log
Request a callAI · Automation4 to 8 weeks
Repetitive work handed back to the machines.
- Mapping of manual tasks and what they cost
- Workflows wired into the tools you already run
- Automated evidence collection and filing
- Monitoring, alerting and error recovery
Request a callAI · Governance3 to 6 weeks
Know which AI tools run in your organisation, and under which rules.
- Inventory of AI uses and tools, including undeclared ones
- Risk classification under the EU AI Act
- Usage policy, roles and validation workflow
- Documentation ready for an inspection or a client audit
Request a callAI · Adoption1 to 3 days
Teams that use AI well, and safely.
- Workshops tailored to roles: management, operations, technical teams
- Concrete use cases drawn from your activity
- Usage rules: sensitive data, confidentiality, verification
- Roadmap of uses to deploy first
Request a callAI · Customer relations4 to 8 weeks
An assistant that answers accurately, and knows when to hand over.
- Answers grounded in your content and up-to-date data
- Integration into your site, messaging or existing support
- Handover to a human when the question requires it
- Measurement of answer quality and requests handled
Request a callAI · Security2 to 4 weeks
Your agents and chatbots tested the way an attacker would test them.
- Prompt injection and jailbreak testing
- Search for data leaks and excessive access
- Review of rights, connected tools and logs
- Remediation plan and guardrails to deploy
Request a call