Cyber
Security

Products,
Working

As they
Should.

Are you getting the most from the security you already pay for?

We find the weak spots and fix what matters most to your business.

Security Ninja's orange ninja cat mascot
Fix

Make the Microsoft security you own work properly

Licences you already pay for, configured properly, tested and documented.

Microsoft security optimisation

We configure the Microsoft security you already pay for, properly. That means Entra ID for passkeys, Conditional Access and time-limited admin access. Defender for Office 365 for email and file sharing. Defender for Endpoint and Intune for laptops and servers. Defender for Cloud for your cloud workloads, and Global Secure Access to bring Zero Trust to how people connect. All joined up in Defender XDR, tested and documented, with evidence for the board.

No new licences unless you genuinely need them.

Find out more

Microsoft Sentinel improvement

Microsoft Sentinel detection tuning, analyst training, incident workflows and automation. Fewer alerts, better ones, and a specialist who knows what to do with them.

Find out more
  1. 1
    Health checkWe look at what’s switched on in your setup and how it’s configured.
  2. 2
    Fix what matters mostStarting with sign-in security, piloted before anything is enforced.
  3. 3
    Show the evidenceWhat was on, what we changed and why.
Govern

Use AI with confidence, not crossed fingers

Your staff are already using AI. See where you stand in three minutes, then put sensible rules in place.

AI security governance

We find out where AI is already being used, help you decide what you’re comfortable with, write it down in plain English that staff can follow, and keep the evidence.

Take the 3-minute quick check Find out more
Advise

Expert judgement, when you need it

Experienced security specialists who’ve seen what works and what doesn’t. Senior-led, with associates where the work needs more hands.

Questions we help answer
“Is this new tool worth it?” “What should our target architecture be?” “Which tools overlap, and what can we retire?” “What do we do first, second and third?”

Security advisory

Someone senior to ask before the big decisions, as much or as little as you need. Straight answers on the security choices in front of you.

Including security strategy and architecture. Strategy & architecture

Find out more

Early accessMicrosoft Tenant Audit

A read-only look at your Microsoft 365 setup, with a board summary and the evidence behind it. We’re finishing it now.

Register interest Early access
Security Ninja Dojo NEWFree Microsoft 365 hardening guides

Not sure which? Book a 30-minute call and we’ll tell you. Including if the honest answer is that you don’t need us yet.

Book a 30-minute call

Welcome to Security Ninja.

Hi, I’m James Agombar. Founder of Security Ninja, Microsoft MVP for Security, and nearly thirty years in IT. You’ll deal with me from the first call to the final report. I’ve built and run the programmes I now advise on, and I’ll tell you when you don’t need something.

Where a job needs deeper expertise than mine, I bring in an associate I’ve worked with before. Senior people only, no bench, and I stay on the hook for the result.

Microsoft Most Valuable Professional
Two published booksDefender for Servers ·
Securing Teams
Nearly 30 years in ITMicrosoft, cloud and AI
security
“I would not hesitate to recommend James to anyone seeking the services of a security consultant of the highest caliber. His combination of subject matter expertise, problem-solving acumen, and client-centric approach make him a valuable asset to any organization.”Client testimonial · Read more references

How Security Ninja has helped clients

Every engagement is different. Here’s a sample of what that looks like in practice.

Digital Transformation AdvisoryOpSec Team BuildCloud Security AssessmentsEnterprise Security StrategyPlatform Security AuditsIT Risk ManagementSecurity ArchitectureVulnerability ManagementShift-Left & DevOpsCloud-Native Security ReviewSecurity Policies & ProcessesISO 27001 GuidanceIdentity & Access ReviewsPhishing Resistant MFACNAPP EnhancementsDefender for EndpointDefender for Cloud RemediationPost-Acquisition ToolingAI Deployment StrategyCopilot GovernanceCyber Strategy & Roadmap

Most
conversations
start the same
way.

Something isn’t right, but nobody’s quite sure where to look.

Thirty minutes is usually enough to get a clear picture of where the real exposure is.

  • You tell me what you’ve got and what’s worrying you
  • We’ll say what we’d check first, and what we wouldn’t bother with
  • No proposal unless you ask for one
Book a 30-minute callPick a time that suits you