Essential Defense
Thornwood
- Quarterly external vulnerability scanning
- Annual penetration test (external perimeter)
- Baseline security policy review
- Email threat protection setup
- Business-hours incident hotline
Security Services
Corporate Defense Packages, Sharpened to Order
From essential perimeter coverage to full enterprise command: ethical hacking, compliance auditing, endpoint protection, and managed defense — assembled into a program that fits your estate and your risk appetite.
Defense Tiers
Three Layers of the Thorn Barrier
Every tier is a complete defense program — scoped during your security audit inquiry and tuned continuously as your estate evolves.
Advanced Defense
Bramble
- Monthly internal + external scanning
- Bi-annual penetration testing (network & web apps)
- Endpoint detection & response rollout
- Zero-trust identity hardening
- 24/7 SOC monitoring & alert triage
- Compliance gap assessment (ISO 27001 / Cyber Essentials)
Enterprise Defense
Ironbark
- Continuous automated attack-surface scanning
- Red-team engagements & social engineering sims
- Full incident response retainer with playbooks
- Cloud security posture management (AWS / Azure / GCP)
- Dedicated vCISO & quarterly board reporting
- Full compliance auditing & certification support
Deep Expertise
Every Discipline, Battle-Tested
Packages are built from six core disciplines. Mix them as needed — or let our architects assemble the right combination for you.
Ethical Hacking
Certified offensive specialists simulate real intrusion campaigns — network, web, cloud, and human — to prove where your defenses hold and where they snap.
- Network & web application penetration testing
- Red-team adversary emulation
- Social engineering & phishing simulations
Compliance Auditing
Structured audits and evidence-driven remediation that turn regulatory obligations into genuine security uplift — not checkbox theater.
- ISO 27001 & Cyber Essentials readiness
- GDPR data-protection posture review
- PCI DSS & sector-specific gap analysis
Endpoint Protection
Hardened, centrally managed endpoint defense for every laptop, server, and remote device — with behavioral detection that stops novel attacks, not just known signatures.
- EDR/XDR deployment & tuning
- Device hardening & patch assurance
- Remote-workforce access control
Corporate Cyber Defense Packages
Layered programs that combine scanning, testing, monitoring, and response into one accountable service — scaled from essential coverage to enterprise command.
- Managed SOC-as-a-service
- Attack-surface management
- Security architecture & roadmap design
Vulnerability Intelligence
Automated scanning fused with human triage: every finding is validated, ranked by real exploitability, and delivered with a fix you can act on immediately.
- False-positive-filtered reporting
- Exploitability-ranked risk scoring
- Remediation verification rescans
Security Awareness Training
Your people are part of the barrier. We run sharp, scenario-based training that turns staff from the weakest link into an active detection layer.
- Role-based phishing campaigns
- Executive-targeted scam drills
- Incident reporting culture building
How We Engage
From Inquiry to Ironclad in Four Moves
01
Audit Inquiry
Submit your security audit inquiry. We map your estate, threat profile, and regulatory exposure.
02
Exposure Mapping
Rapid reconnaissance and scanning reveal your live attack surface — ranked by real exploitability.
03
Barrier Design
We architect a defense program: testing cadence, monitoring coverage, response playbooks, and hardening priorities.
04
Continuous Defense
Deployment, 24/7 operations, and relentless re-validation. The barrier grows sharper over time.