We protect UK organisations and help them thrive in the cloud by giving them secure platforms to innovate and grow.

thumbnail_SixDegrees.jpg

SixDegrees.jpg

Six Degrees

Everything from migration to cloud, to supporting different platforms including AWS, Azure, Google Cloud (GCP), and layered with managed services on top.

Cloud Managed Service Provider

Providing you with everything you need to host your core business websites, data, and applications without having to worry about the underlying core operating systems, the server hardware they run on, or the data centres they are served from.  Including both infrastructure as a service,  IaaS, and platforms as a service PaaS, delivering all elements of secure, efficient data storage and access services.

There are three fundamental types of data storage using three different storage protocols: NFS (Network File System) and SMB (Server Message Block) and Object.

Block storage is data divided into equal sized blocks and designed for databases requiring fast access and retrieval.

Network File Storage is for storing files in a structured hierarchy.

Object storage is for unstructured or NoSQL data, and is for scalable, distributed architecture, with multiple servers in parallel. 
A storage system that is designed to be massively scalable. Object storage uses RESTful or HTTP protocols to communicate. 

Data storage and cloud hosting

Services and technologies to support the fast and reliable delivery of cloud applications.

Services including management, performance enablement, and security for all elements of cloud infrastructure, across platforms: including Azure, Google, AWS, Oracle, Alibaba, and across network service providers

Cloud Networking

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

Penetration testing is the ethical testing of a company's cyber security defences.

Penetration testing can be for a company's entire IT cloud and IT infrastructure, a single application, or for an IoT (Internet of Things) device.
 


A penetration test or "pen test" will emulate the full set of actions that are performed by cyber criminals.  These actions are identified in leading cybersecurity frameworks - and most clearly in the MITRE ATTACK framework.

The objective of a pen test is to report on vulnerabilities that could be exploited, and then report them back to the company, so that the vulnerabilities can be addressed before they are exploited by a cyber attacker.

Penetration testing can be restricted to testing the level of cyber resilience from a technology perspective, or can extend to simulated email phishing tests, where employee cyber awareness and resilience is tested.

Beyond Penetration testing, there is Red Teaming, where a team will test all elements of corporate security defences, including physical security, site access, cyber security, and social engineering elements.  Red Teaming is viewed either as additional to penetration testing, or as an advanced, next level form of penetration test.


Penetration testing

A platform, technology and service that monitors network and application activity, and immediately reports events that could be representative of a cyber security attack on your company, either from within or from outside your network.

SIEM - Security Information and Event Management

The service of providing continuous monitoring and control for your entire IT network: a SOC (or CSOC - Cyber Security Operations Centre) includes a team managing automated monitoring services that plug into most or all of your cyber security defence technology, and flags  vulnerabilities and attacks as they occur.  

Also includes the tech platforms and service providers that enable and support efficient resilient security operations. 

The SOC team works with the broader IT team to implement protective and remediator steps when and as required,

Security Operations Centre: SOC Services

Knowing the current and potential threats that  present the greatest risk to your orgainisation, and proactively ensuring that the right people, process and technology solutions are in place to mitigate against them.

Threat intelligence is information on specific cyber threats to your organisation.  

Threat intelligence moves the goal posts: rather than responding to an attack, threat intelligence enables an attack to be prevented.  This can be anything from breaking up and arresting a cyber criminal group, to identifying the attack vectors and profiles in advance of attack,  then ensuring sufficient protections and mitigations are in place.  

Threat intelligence is gained from large data sources shared between cyber security companies, on global network and dark web activity, and also from honey pots, which are simulations of an actual company network, that then attract the attacks of criminal groups targeting the specific company.

Threat intelligence enables the delivery of ATP / Advanced Threat Protection.

Threat Intelligence

SASE - pronounced "sassy" is a "zero trust" network service, where all network equipment is virtualised, removing the requirement to manage, monitor, control, and update physical network infrastructure. 