Skip to main content
Who we are

You know what needs to change.
We make sure it happens.

Not for a report. Not for a tool. For the transformation that brings your organisation in control. And keeps it there.

Our role

The partner that stays until it’s right.

Not as an executing party, not as a tool vendor, and not as a project team that disappears after delivery. We look at the whole. Technology, organisation, processes, culture and governance simultaneously.

Sometimes the approach is incremental. Sometimes fundamentally transformative. Always focused on sustainability: not just building the security structure, but ensuring it stands. Even after we leave.

Our position

We sell capabilities and outcomes. No tools.

No reseller relationships. No licence fees. No referral fees from vendors. If our recommendation makes us look less attractive, it is the right recommendation.

The test we apply internally: we will not go looking for a problem that fits the solution we sell.

How we look at security

Five principles that
guide our work

01
The decision question first

Security does not start with technology or tooling. First, it must be clear what the organisation needs to choose, justify and prove. Architecture, measures and execution come after that.

02
Risk as language

Technical findings only become valuable when they become governable. We translate threat, impact and control into language CISO, CIO and board can use to decide.

03
The landscape as reality

A measure only works if the landscape can carry it. Architecture, processes, teams, mandate and constraints determine what is feasible. No standard approach. Choices that land.

04
One view of what is happening

Security stalls when technology, operations and leadership each see a different problem. The work starts with one shared view: what is happening, what it means and who needs to decide.

05
Securing what keeps working

Building a structure is not enough. It has to keep running when pressure, people and priorities change. That is why we build resilience the organisation can carry itself.

Curious which discipline makes the difference first for your organisation?

The management team

You always speak with
the person who does the work

No juniors, no handover, no changing faces. Every engagement is led by a senior who also executes personally.

HR

Hans Raaijmakers

Governance, enterprise security architecture and board-level accountability
CISSPCISMCISACRISCCCSPTOGAF

Engaged at moments when security is no longer a technical issue but a governance challenge. Brings coherence between policy, risk and execution, making complex situations manageable for management and board. Structures organisations so they can steer, decide and account for themselves. With clear frameworks, insight and demonstrable control as foundation.

RR

Rasham Rastegarpour

Technology strategy, vendor independence and market insight
CISSP

Operates at the intersection of technology and market dynamics. Knows how solutions are positioned, where commercial interests play a role and what organisations actually need. Engaged when technology choices impact risk, direction and investments. And independent insight is needed to make the right trade-offs. Brings clarity in a market that is often made more complex than necessary, and helps organisations steer on what truly matters.

LA

Lorenzo Alberga

Technical realisation, integration and AI-driven solutions

Connects strategy and architecture with concrete technical realisation. Ensures choices don’t just work on paper but also in practice. Moves seamlessly between infrastructure, applications and data, delivering solutions that fit the organisation and its way of working. Engaged when implementation is decisive for success. And when reliability, scale and integration converge.

In brief

Senior. Independent. Until it works.

No junior teams. No handover mid-project. No vendor interests. You always speak with the person who also does the work. We leave when you can carry it yourself.

Where we work

Organisations that previously worked with larger firms notice the difference immediately.

We work in environments where failure has direct impact on continuity, reputation and governance. From financial services and critical infrastructure to industry, professional services and healthcare.

Our involvement starts where it matters: when risks are no longer operational but become a governance issue, or when structural change is necessary to regain control.

Financial servicesEnergy & critical infrastructurePublic sectorIndustry & manufacturingProfessional servicesHealthcare

Ready for a conversation?