Summer holidays and the out-of-office that helps attackers
“I'm away until the 19th, contact Sarah” is a gift to someone drafting a fake invoice.
Old laptops in the store cupboard
Nine devices, no certificates, and still your liability until collected.
Farm subsidy portals and rural connectivity
Grant logins, machine telematics, and a signal that drops when it rains.
Ransomware in a 20-person firm: an honest account
What it cost, what saved them, and the fortnight nobody talks about.
Two-thirds of the businesses we check have never tested a restore
Backups run. Nobody has ever asked them for anything back.
Beauty salons and the consultation form that counts as health data
Allergies, medication, pregnancy. Higher bar than most salons realise.
Text scams pretending to be your own bank's fraud team
The number matches. The message doesn't. Ring back on the card.
How we handle your data - the plain version
Read-only, configuration only, never your content. And how to revoke it in one click.
Cleaning firms, keys and client premises
Physical access is data access when the office has paperwork on the desks.
Wedding and event deposits: the supplier chain scam
Small businesses paying small businesses, all under time pressure.
Ten minutes a month: the maintenance list
Updates, one restore check, one look at who has access. That's genuinely most of it.
Physio and therapy clinics: notes, bookings and card payments
Health notes in a booking system designed for haircuts.
The first thing we look at in any business
Not the firewall. Who can sign into email, and whether a stolen password would be enough.
Children's photos on business social media
Consent, deletion requests, and why “we asked at the time” isn't a record.
Why we made the small-business tier free
The businesses most likely to be hit are the least able to pay for help.
A quarter of our findings are fixed in under ten minutes
The cheap ones matter because they're the ones that get done.
Shared mailboxes: convenience with a long tail
Reception, accounts, info@. Everyone knows it, nobody owns it, leavers keep it.
Dentists, imaging systems and patient records
Special category data on a system the supplier hasn't updated since 2023.
Spring clean: deleting what you no longer need
Old enquiries, ex-staff mailboxes and a shared drive from 2016.
Roofing and scaffolding: proof of work as evidence
Site photos on five phones, and a client asking for last March's job.