RF & Signal Intelligence
Analysis of the wireless environment a site operates in: which bands are occupied,
what the link budget looks like at the perimeter, and where that creates
interference or an exposure worth designing against.
- Spectrum allocation and interference analysis
- 802.11, BLE and sub-GHz IoT protocol review
- Rogue-transmitter and UAS detection specification
Identity & Privacy Protection
Attack-surface reduction for the people behind the organisation. We map what is
publicly attributable to you, then specify the controls that close the paths that
exposure opens.
- OSINT footprint mapping and broker delisting
- MFA, credential and recovery-path architecture
- Endpoint baseline and encrypted messaging configuration
Penetration Testing
Remote adversarial testing of your external perimeter, internal network and
applications. Each finding is traced to the exact request or configuration that
produced it, so nothing rests on inference.
- External perimeter and internal network testing
- Web, API and 802.11 protocol assessment
- Privilege escalation and lateral movement paths
NVR & IP Camera Architecture
Coverage and recording design driven by the numbers that decide whether footage is
admissible: pixel density on target, illumination, codec bitrate and the retention
period you are actually obliged to hold.
- Pixel-density, field-of-view and IR range calculations
- H.265 bitrate, RAID topology and retention sizing
- PoE budget, VLAN and ONVIF interoperability
AI-Assisted Detection
Analytics specified against the conditions your cameras actually operate in.
Classification classes, zone logic and thresholds set so alert volume stays low
enough that operators keep responding to it.
- Licence plate recognition (LPR) and vehicle classification
- Face detection with configurable confidence thresholds
- Object classification, tripwire and zone rules
Network & Server Design
Segmented architecture for the infrastructure security depends on, designed so a
compromised endpoint cannot reach the recorder, the door controllers or the file
store on the same wire.
- VLAN segmentation, 802.1X and NAC design
- Firewall policy, VPN and remote access architecture
- Server sizing, backup topology and monitoring