Notes from the people who runthe platform.
Practical writing on managed IT, security baselines, compliance, and AI operations — from the engineers who do the work, not a content agency. No gated downloads.
All posts
Hardening Microsoft 365 with CISA's SCuBA baselines and ScubaGear
CISA publishes free secure configuration baselines for Microsoft 365 and a no-cost tool to check your tenant against them. How to run it, triage it, and keep it green.
Law firm cybersecurity: how small and mid-size firms protect client data
For a law firm, client data is the business. Matter-level access, email fraud on closings, ransomware-ready backups, and how to answer client security questionnaires.
Business email compromise and wire fraud: how finance firms stop the $3 billion scam
BEC losses reported to the FBI reached about $3.05 billion in 2025. How payment-change fraud works, the controls that stop it, and what to do in the first hour.
CMMC Phase 2 starts November 10, 2026: a readiness guide for small defense suppliers
Phase 2 of CMMC begins November 10, 2026 and brings third-party Level 2 assessments into contract awards. What changes, how to scope, and a 30/60/90-day plan.
Managed IT vs. break-fix: what's actually right for your business
Break-fix looks cheaper until you price the hour your team spends waiting. Here's the math, the tipping point, and the three questions to ask any provider.
5 signs your business has outgrown its IT setup
The signals usually show up in your calendar before they show up in a budget line. Five patterns we see in nearly every first call.
Cybersecurity basics every small business needs in 2026
Most breaches aren't clever; they're a missed baseline. The seven controls that stop the majority of attacks, in priority order.
The MSP security baseline checklist (what we enforce on day one)
The exact baseline we apply to every managed endpoint and tenant before the SLA clock starts. Copy it.
SentinelOne vs. traditional antivirus: why EDR is now the floor
Antivirus asks 'have I seen this file before?' EDR asks 'is this behavior normal?' That difference is why one stops ransomware and the other reports it.
HIPAA compliance for healthcare IT: a practical 60-day path
A 50-person practice went from a failed audit to zero deficiencies in 60 days. Here's the sequence, week by week.
Building an incident response plan your team will actually follow
Most IR plans are 40 pages nobody opens at 2 AM. The six components that matter, and how to keep the plan one page long.
How AI triage cut ticket resolution time 40% at a 200-seat healthcare org
Same team, same tools, 40% faster resolution — by changing what happens in the first 90 seconds of a ticket's life.
Zero Trust architecture for SMBs, without the enterprise price tag
Zero Trust is a set of decisions, not a product. The five moves that get a 50-person company most of the way there using tools it already pays for.
Deeper reading
White papers and the Academy.
Want this applied to your environment?
Every post above is something we've already done for a client. Thirty minutes with an engineer and it's a plan.