Cyber Security Services

Assess.
Defend.
Comply.

Our cyber security services find what an attacker could actually reach, fix it in an order that makes sense for the business, and put the controls and evidence in place for Cyber Essentials or ISO 27001.

Talk to a security specialist How we work ↓

✓

Findings written in plain English

Every fix re-tested

secure.pixeledge.io

Threat Level Low

Stage 3 of 4 · Remediation

ISO 27001 prep Cyber Essentials prep

Scoped

Test plan

Booked

Re-test

On track

Fixes

Incident Response Plan

Draft ready for review

Compliance Evidence

Status: On track

Stages in a Security Engagement

Security Services We Offer

Core Areas We Cover

Ways to Get Started

01 — What we do

What our cyber security services cover

Most clients start with a test to find out where they stand, then use the findings to plan compliance work and ongoing monitoring.

Penetration Testing & Vulnerability Assessment

We attack your web apps, APIs, network and cloud accounts the way a real adversary would, then show you which findings are exploitable and which are noise.

Web & API Network Cloud

Compliance & Security Architecture (ISO 27001, Cyber Essentials)

Practical help writing the policies, configuring the controls and gathering the evidence an assessor will ask for, plus an architecture review so those controls hold up.

ISO 27001 Cyber Essentials Architecture review

Security Operations & Incident Response

Monitoring with out-of-hours cover if you need it, alert triage by people who know your environment, and a response plan you have rehearsed before you need it.

SOC as a service Incident response Out-of-hours cover

02 — Services

Cyber security services in detail

Take the service you need now. Most organisations begin with a penetration test or a Cyber Essentials gap review and build from there.

Penetration Testing

Scoped, hands-on testing of web apps, mobile apps, networks and cloud, going well beyond what an automated scanner reports.

OWASP-based method

Vulnerability & Red Team Exercises

Regular vulnerability scanning, plus red team exercises that test whether your people and tools notice an attack, not only whether controls exist.

Full-scope testing

ISO 27001 & Cyber Essentials

Help preparing the policies, technical controls and evidence an assessor will ask for, and a routine for keeping them up when renewal comes round.

Evidence gathered

Security Architecture Review

An independent look at how your systems, network and identity setup fit together, and where an attacker could move from one to the next.

Defence-in-depth

SOC as a Service

Analysts watching your alerts, with out-of-hours cover by agreement, investigating the ones that matter and escalating to you with a clear next step.

Cover hours agreed

Phishing Simulation & Training

Regular simulated phishing emails and short training for staff who click, with click rates tracked so you can show the trend to your board.

Click rates tracked

Incident Response Planning

A written response plan and tabletop exercises, so when ransomware or a compromised mailbox turns up, everyone knows who to call and what to switch off.

Rehearsed plan

Third-Party & Supply Chain Risk

A structured review of the suppliers who hold your data or connect to your systems, so a weak link at a vendor doesn't become your breach.

Vendor risk scored

Typical engagements

The kind of security work we do

Typical scenarios showing how this work usually runs. These are not named clients.

Discuss a security assessment

Example engagement

Financial Services

Penetration Test & Remediation Sprint

A lender whose customer portal and APIs have not been tested since launch. We attack them the way an adversary would, then run a remediation sprint in order of risk.

Every fix re-tested

Example engagement

Healthcare

ISO 27001 Preparation Support

A healthcare provider preparing for ISO 27001 with no written policies and no risk register. We write the policies, build the register and help put the controls in place.

Evidence ready for the assessor

Example engagement

Public Sector

Managed SOC & Incident Response

A public sector body holding sensitive citizen data, with security alerts landing in a shared inbox. We set up SOC monitoring and an incident response plan.

A plan people have rehearsed

03 — How we deliver

How a security engagement runs

We test, fix and re-test in a set order, so you can see risk going down instead of receiving a report that sits in a drawer.

Assess

We start with a risk assessment: what you hold, who would want it, which controls exist today and which standards you need to meet.

Asset inventory Threat modelling Compliance gap analysis

Test

Penetration testing and, where it's justified, red team scenarios. Every finding comes with evidence and a realistic rating, not a wall of automated "critical" alerts.

Penetration testing Red teaming Vulnerability scanning

Remediate

We rank findings by risk and work alongside your IT team or supplier to fix the root cause, then re-test to confirm each fix holds.

Risk prioritisation Root-cause fixes Re-testing

Sustain

Ongoing monitoring, periodic re-testing and staff awareness training, so your security posture doesn't quietly slide back once the project ends.

Continuous monitoring Periodic reviews Awareness training

04 — Standards & tooling

Standards and tooling we work in

We work to the standard your customers or regulators expect, and use the tools that suit your environment rather than the ones we prefer to sell.

Compliance Standards

ISO 27001 Cyber Essentials GDPR

Testing Tools

Burp Suite Nmap Metasploit

SIEM & Monitoring

Splunk Microsoft Sentinel

Identity & Access

Okta Azure AD

Awareness Training

KnowBe4 Phishing simulation platforms

Incident Response

Tabletop frameworks Response playbooks

05 — Get started

Two ways to get started

Some organisations need a clear picture of their risk today. Others need someone watching every day. We offer both.

Full Security Assessment

A one-off assessment covering testing, compliance gaps and a remediation plan in priority order, for organisations that need to know where they stand.

Penetration test and vulnerability assessment
Gap analysis against ISO 27001 or Cyber Essentials
A remediation plan in priority order
A risk summary written for the board

Discuss a security assessment

Ongoing SOC / Managed Security

For organisations that have been tested and now need continuous cover. We provide monitoring, detection and incident response as an extension of your IT team, with out-of-hours cover available.

SOC monitoring and alert triage
Continuous vulnerability management
Incident response on retainer
Flexible monthly engagement

Ask about managed security

Assess.
Defend.
Comply.

What our cyber security services cover

Penetration Testing & Vulnerability Assessment