About

A cybersecurity practice that also runs the IT

Caltrop Defense Group exists because splitting security from operations does not work. The team that patches the servers and the team that worries about attackers should be the same team.

Principles04Standards03Practices02Delivery01

Why the two belong together

When security is a separate contract, it competes for budget with the things that keep the business running today. Patching slips because a project is due. Backups go unverified because nobody owns the check. The gap between what is configured and what is believed to be configured widens quietly, and it is usually only measured after an incident.

We run both, so the maintenance that prevents incidents and the controls that contain them are funded by the same agreement and owned by the same people.

How we operate

What you can expect from us

We write things down

Your environment, the decisions made about it and the reasons for them are documented. If you leave, the documentation goes with you.

We say what we would do

Recommendations come with impact, effort and cost. Where doing nothing is a reasonable option, we will say so.

We do not oversell risk

Fear is an easy way to sell security and a poor basis for decisions. We describe what is actually likely for an organisation like yours.

We work with your people

Where you have internal IT, they are colleagues, not competition. Where you do not, we explain things without condescension.

How an engagement usually begins

Most relationships start with an assessment rather than a contract. We look at what you are running, what is supported, what is backed up and what is actually protecting you today, then give you a written picture of it. You own that document whether or not you go any further with us.

From there the work is scoped against what the assessment found, in the order that reduces the most risk for the least disruption. Nothing gets bundled in because it was on a standard list.

Request a consultation

Tell us what you have and what is worrying you

A consultation is a conversation, not a sales presentation. We will ask what your environment looks like, what has been deferred and what would hurt most if it stopped working, then tell you what we would address first.

  • Phone
  • Email
  • Address
  • Hours

Reach us directly

Email or call and you reach a person, not a queue. We use what you send us to respond to your enquiry and nothing else. See our privacy policy.