Home/Services/Managed IT & Cloud
Pillar 01 · Managed IT & Cloud

Managed IT,
cloud, and security.
Quietly run.

Your Microsoft 365, Google Workspace, AWS or GCP tenant — administered by senior operators. Helpdesk, device management, backup, cybersecurity. The background hum of your business, properly looked after.

DAILY DRIVERS:
Microsoft 365Google WorkspaceAWSGCPAzureSentinelMDMCloudflare
§ 01 — What's in the retainer

Six things we do, every month,
without being asked.

The retainer isn't "buy hours and use them as you wish". It's a defined service that includes specific, scheduled work — plus everything else that breaks in between.
/01 — DAY-TO-DAY

Helpdesk & support — answered by a real person.

Password resets, mailbox quirks, Teams calls that won't connect, the M&A user who needs SharePoint access by 9 a.m. on Monday. WhatsApp, email, phone or shared inbox — your choice. No tickets, no queues, no escalation paths.

/02 — SECURITY

Cybersecurity & SIEM.

Defender, Sentinel, Cloudflare, conditional access policies, alert triage, phishing response. Cyber Essentials Plus aligned.

/03 — DEVICES

Laptop / mobile fleet.

Intune, Google MDM or Jamf. Zero-touch onboarding, lost-device wipe, app delivery.

/04 — BACKUP

Backup & restore.

Acronis or Backupify for M365 / Google. Test restores quarterly — proof, not promises.

/05 — LICENSING

Licence rightsizing.

Quarterly review of who actually needs what. Most clients trim meaningful waste in year one.

/06 — PEOPLE

Onboarding, offboarding, and a quiet quarterly review with the team.

Joiners, movers and leavers handled end-to-end — accounts, devices, licences, off-the-books accesses, the lot.

§ 02 — Before & after

What changes in week one.

A composite of what we typically find on day one with a new client, and what's true a month later. Names changed for the obvious reasons.
Before · day one
  • Everyone on blanket E3 / E5 — most users never touch a premium feature
  • MFA enforced on email but not on SharePoint or Teams admin
  • One shared admin account, password in a Sticky Note
  • Backups "set up" three years ago — never test-restored
  • Three overlapping antivirus products, none of them current
  • Three vendors involved in the M365 tenant, each blaming the next
After · 30 days in
  • Optimised licence structure — off blanket E3/E5 onto the right mix of E1, Business Premium, E3 and E7 → up to $500k/year off Microsoft spend
  • Conditional access policies enforced across the tenant
  • Per-admin accounts with passwordless & PIM elevation
  • Backup retention tested with a verified restore drill
  • One EDR (Defender for Business), tuned, alerts in Sentinel
  • One number to call. One inbox to write to.
§ 03 — Monthly cadence

A predictable rhythm,
set on day one.

No surprises. You always know what's coming, who's doing it, and what to expect from us next week.
Every Monday
Written status note
The team · five-minute read
Weekly
Helpdesk & support tickets cleared
Senior engineer · same-day
Monthly
Security posture & alert review
Three-page written report
Quarterly
Licensing audit + strategy call
On-camera with the team
§ 05 — While we're at it

Three other things
we do well.

Most managed-IT clients eventually ask us to take on something from the other pillars. Same team, same number — no second contract.
PILLAR 02

Web & App Development

Internal tools, customer portals, migrations.

Read more
PILLAR 03

AI & Automations

Practical AI on your stack.

Read more
PILLAR 04

Technology Consulting

Audits, second opinions, migrations.

Read more
Ready when you are

Let's audit your stack.
Free. No obligation.

The team will spend 30 minutes inside your tenant (with your read-only credentials, on a video call), and write you a one-page summary — what's healthy, what's quietly wasteful, what would worry us if it were our own business.

The team will reply within 4 business hours · Mon – Fri, 9 – 6 UK