Cyber
Security

Products,
Working

As they
Should.

Are you getting the most from the security you already pay for?

We find the weak spots and fix what matters most to your business.

Security Ninja's orange ninja cat mascot
Fix

Make the Microsoft security you own work properly

Licences you already pay for, configured properly, tested and documented.

Microsoft security optimisation

Having Microsoft security licences is one thing. Knowing they’re configured correctly and protecting everything they should be is another.

We assess your Microsoft security environment to find gaps in configuration, coverage and compliance, then help you fix them. That could mean improving Defender for Endpoint policies and onboarding coverage, strengthening Intune security baselines, modernising Entra ID and Conditional Access, introducing passkeys, removing excessive privileges through least-privilege and time-limited administration, or improving protection across email, cloud workloads and remote access.

We apply Zero Trust principles across the environment, bring visibility together through Defender XDR, and validate the finished controls so you have both effective protection and evidence that demonstrates it.

No new licences unless you genuinely need them.

Find out more

Microsoft Sentinel improvement

Collecting logs in Microsoft Sentinel doesn’t mean you’re detecting the threats that matter.

We assess what you’re collecting, what you’re detecting and where the gaps are, then help you improve it. That includes data source and connector coverage, analytics and detection tuning, false-positive reduction, incident workflows, automation and analyst enablement.

We help join Sentinel with Defender XDR so investigations have the context they need, while ensuring your security team has practical processes for triaging, investigating and responding to incidents. Less noise, fewer blind spots and better security outcomes.

Find out more
  1. 1
    Health checkWe look at what’s switched on in your setup and how it’s configured.
  2. 2
    Fix what matters mostStarting with sign-in security, piloted before anything is enforced.
  3. 3
    Show the evidenceWhat was on, what we changed and why.
Govern

Use AI with confidence, not crossed fingers

Your staff are already using AI. See where you stand in three minutes, then put sensible rules in place.

AI security governance

Your staff are probably already using AI. The important question is whether you know how they’re using it and what company data is going with them.

We help you discover AI use, identify Shadow AI and assess the risks around data, access and the services people are using. We then help you decide what’s acceptable, put sensible security controls around it and create straightforward policies that staff can actually understand.

The result is AI that people can use productively without security, privacy and compliance becoming an afterthought.

Take the 3-minute quick checkFind out more
Advise

Expert judgement, when you need it

Experienced security specialists who’ve seen what works and what doesn’t. Senior-led, with associates where the work needs more hands.

Questions we help answer
“Is this new tool worth it?” “What should our target architecture be?” “Which tools overlap, and what can we retire?” “What do we do first, second and third?”

Security advisory

Someone senior to ask before the big decisions, as much or as little as you need. Straight answers on the security choices in front of you.

Including security strategy and architecture. Strategy & architecture

Find out more

Early accessMicrosoft Tenant Audit

A read-only look at your Microsoft 365 setup, with a board summary and the evidence behind it. We’re finishing it now.

Register interest Early access
Security Ninja Dojo NEWFree Microsoft 365 hardening guides

Not sure which? Book a 30-minute call and we’ll tell you. Including if the honest answer is that you don’t need us yet.

Book a 30-minute call

Welcome to Security Ninja.

Hi, I’m James Agombar. Founder of Security Ninja, Microsoft MVP for Security, and nearly thirty years in IT. You’ll deal with me from the first call to the final report. I’ve built and run the programmes I now advise on, and I’ll tell you when you don’t need something.

Where a job needs deeper expertise than mine, I bring in an associate I’ve worked with before. Senior people only, no bench, and I stay on the hook for the result.

Microsoft Most Valuable Professional
Two published booksDefender for Servers ·
Securing Teams
Nearly 30 years in ITMicrosoft, cloud and AI
security
“I would not hesitate to recommend James to anyone seeking the services of a security consultant of the highest caliber. His combination of subject matter expertise, problem-solving acumen, and client-centric approach make him a valuable asset to any organization.”Client testimonial · Read more references

How Security Ninja has helped clients

Every engagement is different. Here’s a sample of what that looks like in practice.

Digital Transformation AdvisoryOpSec Team BuildCloud Security AssessmentsEnterprise Security StrategyPlatform Security AuditsIT Risk ManagementSecurity ArchitectureVulnerability ManagementShift-Left & DevOpsCloud-Native Security ReviewSecurity Policies & ProcessesISO 27001 GuidanceIdentity & Access ReviewsPhishing Resistant MFACNAPP EnhancementsDefender for EndpointDefender for Cloud RemediationPost-Acquisition ToolingAI Deployment StrategyCopilot GovernanceCyber Strategy & Roadmap

Most
conversations
start the same
way.

Something isn’t right, but nobody’s quite sure where to look.

Thirty minutes is usually enough to get a clear picture of where the real exposure is.

  • You tell me what you’ve got and what’s worrying you
  • We’ll say what we’d check first, and what we wouldn’t bother with
  • No proposal unless you ask for one
Book a 30-minute callPick a time that suits you