Service 01

IT Consulting

Most IT problems are budget problems nobody has written down yet. We start by producing the document that makes the decision arguable: what you own, what it costs to keep running, what fails next, and what each option actually buys you.

• Infrastructure audit — a full inventory of servers, network equipment, endpoints, licences and support contracts, with end-of-life and end-of-support dates flagged against each item.
• Asset and licence register — serial numbers, purchase and warranty dates, assigned users and renewal calendar, handed over in a format you can maintain yourself.
• Resilience review — where the single points of failure are, what happens when each one fails, and what it would cost to remove them.
• Capacity and refresh planning — storage growth curves, compute headroom and a three-year replacement schedule phased so the spend is predictable rather than lumpy.
• Cloud versus on-premise modelling — a workload-by-workload comparison with real running costs including egress, licensing and connectivity, not a slide that says "cloud first".
• Migration roadmaps — sequencing, dependencies, change windows, acceptance criteria and a rollback position for every move.
• Vendor and contract review — what you pay, what you actually receive, where two suppliers are billing for the same thing, and which renewals to renegotiate.
• Budget paper — a prioritised remediation list with indicative costs, separated into must-do, should-do and can-wait, written to be read by a finance director.

The deliverable is a written report, not a conversation. It is yours to keep and act on whether or not you engage us for the work it recommends.

Service 02

IT Hardware & Networking

Procurement and physical build, specified against measured load rather than a price list. Installed to a standard, labelled at both ends, and handed over with documentation another engineer could work from on their first day.

• Vendor-neutral procurement — workstations, servers, switches, UPS and peripherals quoted from multiple suppliers, with warranty terms, response times and total cost of ownership compared side by side.
• Structured cabling — Cat6 and Cat6A copper with fibre backbone between floors or buildings, run to containment, terminated on labelled patch panels, and certified drop by drop with results supplied.
• Rack build and power — cabinet layout planned per rack unit, cable management that survives the next change, UPS sizing against real load, and a runtime figure you can plan a shutdown around.
• Managed switching — VLAN segmentation, inter-VLAN routing, link aggregation and spanning-tree configuration, with PoE budgeted properly for cameras, access points and IP phones.
• Wi-Fi design — predictive modelling followed by an onsite survey, access point placement and channel plan, seamless roaming, and guest traffic kept off the corporate network.
• Firewalls and edge — perimeter policy written to least privilege, site-to-site and remote-access VPN, content and application control, and dual-WAN failover tested before sign-off.
• Server room environment — cooling and airflow review, power distribution, earthing and physical access, because hardware failures are often building failures.
• Lifecycle and warranty — registration, warranty tracking and claim handling for everything we supply, so a failed part is our phone call rather than yours.

Every build closes with an as-built pack: rack elevations, port and patch schedules, IP addressing, VLAN map, device credentials into a vault you control, and the cabling test results.

Service 03

Server Management

This is the part of the estate where a problem nobody noticed becomes an expensive one. Built to a baseline, patched on a schedule, watched continuously, and backed up in a way somebody has actually restored from.

• Build and hardening — Windows Server and Linux deployed to a documented baseline: least-privilege service accounts, unused roles and services removed, local administrator control, secure remote access and time synchronisation.
• Virtualisation — Hyper-V and VMware host sizing, consolidation of ageing physical servers, resource allocation reviewed against real utilisation, and a snapshot policy that does not quietly fill the datastore.
• Storage and RAID — array design matched to the workload, hot-spare policy, controller firmware currency, and disk health monitored so a degraded array is a scheduled job rather than an outage.
• Patch management — patches tested on a pilot ring, applied inside agreed maintenance windows, with a checkpoint taken and a rollback position established before anything is touched.
• Backup and disaster recovery — 3-2-1 design with an offsite copy, an RPO and RTO agreed in writing rather than assumed, immutable or air-gapped retention where ransomware is the concern, and restore tests on a calendar with documented evidence.
• Monitoring and alerting — CPU, memory, disk, RAID health, service state, certificate expiry and backup job status polled continuously, with alerts routed to an engineer instead of an unread mailbox.
• Directory and identity — Active Directory design and clean-up, group policy, privileged access review, and multi-factor authentication on anything reachable from outside.
• Microsoft 365 and mail — tenant configuration, mailbox and licence administration, mail flow and anti-spoofing records (SPF, DKIM, DMARC), and retention that matches how long you actually need to keep things.

You receive a monthly patch compliance summary and quarterly restore evidence — the two documents most estates cannot produce when someone finally asks for them.

Service 04

Technical Support

A helpdesk your staff will actually use. Remote first because it is faster, onsite the moment a problem needs hands on hardware, and every ticket measured against a response window agreed before the contract starts.

• Remote helpdesk — intake by phone, email or WhatsApp into a ticketing system, with secure attended and unattended remote sessions for desktops, laptops and servers.
• Onsite engineering — dispatched for hardware faults, cabling, installations, relocations and anything remote support cannot close, with the visit logged against the same ticket.
• Endpoint lifecycle — standard build images, domain or tenant enrolment, software deployment, encryption, and secure wipe and disposal at end of life with a certificate where you need one.
• Joiners, movers and leavers — accounts, licences, mailboxes, group membership and device handover processed on a checklist, and access revoked the day someone leaves rather than the quarter after.
• Printers, peripherals and AV — the unglamorous equipment that stops a floor working: multifunction devices, scanners, label printers, meeting-room displays and conferencing kit.
• Escalation and root cause — a named engineer owns the ticket through to closure, and a fault that recurs gets a written cause and a permanent fix, not a third workaround.
• Asset and knowledge records — who has what, how each site is configured, and the fixes that worked, kept current so support does not depend on one person remembering.
• Service reporting — ticket volumes, response and resolution against target, and the recurring issues worth spending money to eliminate.

Service 05

AMC — Annual Maintenance Contracts

Maintenance on a calendar instead of a crisis, at a cost you can put in a budget twelve months ahead. Three tiers, scoped to the size of the estate and to how long you can afford to be down.

• Scheduled preventive visits — physical inspection and cleaning, thermal and fan checks, UPS battery health, firmware and driver currency, log review, and a rack and cable tidy before small problems become faults.
• Included remedial labour — no callout charge and no hourly billing for anything inside contracted scope, so calling us early is never the expensive choice.
• Priority routing — contracted tickets are triaged ahead of ad-hoc work, against the response window written into your tier.
• Spares and warranty — warranty registration and claims handled on your behalf, loan equipment where we can, and critical spares held locally for Enterprise estates.
• Monitoring and patching — servers, and network equipment on the upper tiers, watched continuously and patched in agreed windows rather than whenever someone remembers.
• Quarterly health report and review — incidents and trends, patch compliance, backup and restore results, capacity headroom, and a ranked list of what to address next quarter.
• Annual roadmap refresh — the refresh schedule and budget plan updated each year against what actually changed, so the contract keeps pace with the business.

Scope is itemised in the contract by site, device and service. What is and is not covered is never a conversation you have to have during an outage.