EU fintech: Microsoft 365 incident response
Challenge
Two user accounts were compromised through device-code phishing, and the attacker had access to their mailboxes.
What we did
Investigated the sign-in and mailbox activity, contained both accounts, recovered mailbox data with Compliance Search, removed the malicious inbox rules and deployed a tenant-wide Conditional Access policy that blocks device-code sign-in.
Outcome
Both accounts back under the company's control, the attack path closed for every user in the tenant, and a written incident report for management.
AI health-tech: endpoint security program
Challenge
A fast-growing engineering company needed endpoint security and device management that keep up with a mixed Mac and Windows fleet on Google Workspace.
What we did
Rolled out EDR across Mac and Windows, set up a weekly review of security detections, hardened Google Workspace sign-in and brought the Mac fleet under Jamf management.
Outcome
Managed devices report to one console, detections are reviewed every week, and access to company data is protected by stronger sign-in.
Industrial company: secure SAP access and tested backups
Challenge
Remote users needed access to SAP without exposing the server to the internet, and the company needed backups it could rely on.
What we did
Published SAP through Cloudflare Zero Trust with browser-based remote access, and set up offsite server backups with a restore test every month.
Outcome
Remote SAP access without exposing the server, and backups that are proven by a real restore every month.
Multi-country EU company: Apple device management
Challenge
Bringing Macs in several countries under central management, while staff were using personal Apple IDs on company email domains.
What we did
Rolled out Apple Business Manager with Intune, including domain capture, FileVault with key escrow, Platform SSO, LAPS and migration to Managed Apple IDs.
Outcome
New Macs enroll automatically, disks are encrypted with recoverable keys, and company Apple accounts are owned by the company.
Service desk automation with AI
Challenge: Support requests arrived over WhatsApp, and onboarding and offboarding were done by hand.
What we did
Built automation processes that turn WhatsApp messages into helpdesk tickets with AI-written subjects and summaries, and automated employee onboarding and offboarding.
Outcome
Every request becomes a tracked ticket, and joiners and leavers go through the same steps every time.