Work we do not take on at Wobbletree Technical

01Penetration testing and offensive security work fall outside our remit; we review configurations and access controls rather than attack your estate.
02We do not write application code or alter the software your teams build; we secure the cloud environment in which that software runs.
03Projects that need round-the-clock managed monitoring are not something we staff, so we hand that ongoing duty to your own operations team.
04For compliance certification itself, such as signing off ISO 27001 or Cyber Essentials Plus, you must engage an accredited certification body.

Detailed view of network cables plugged into a server rack in a data center.

Cloud Landing Zone Review

Reviewed account structure and guardrails for a financial services firm.

Three men engage in a business meeting with a whiteboard in a modern office.

Incident Readiness Review

Ran tabletop exercises with the engineering team of a media company.

Modern hardware and structured cabling system with patch cords inserted into patch panel outlets

Network Segmentation

Redrew segment boundaries and testing routes for a healthcare provider.

A hand interacting with a laptop on a wooden desk, next to a decorative ball.

A laptop screen showing a code editor with visible programming code in a dimly lit environment.

Senior couple meeting with a professional at a bright interior space, showcasing a positive and engaging discussion.

Identity Hardening

Tightened federation and privilege settings for a large housing association.

1

You write to us with the details

You send a short description of your cloud estate, the concern that prompted you to seek help, and any deadline you are working towards. We reply within two working days to arrange a conversation.

2

We hold a scoping conversation

A call of about an hour establishes the accounts, regions and services in scope, the standards you must meet, and who on your side will be available. You receive a written scope note afterwards.

3

We carry out the review on site or remotely

We examine configuration, identity, network boundaries and logging against the agreed scope, speaking to your engineers where needed. Findings are recorded as we go so nothing is left to memory.

4

You receive the findings and a prioritised plan

We deliver a written report separating urgent exposures from longer-term improvements, and we walk your team through it. You may then implement the changes yourselves or ask us to help.

Empty futuristic corridor with blue lights in Tirana, Albania

Cloud security posture reviews

We inspect your cloud accounts against recognised baselines and set out every gap we find, ranked by the risk it carries. The review covers identity, storage, network and logging settings across your main providers.

Identity and access design

We map how users, services and machines obtain access to your systems, then propose a structure built on least privilege. Roles, federation and break-glass accounts are all considered together.

Incident readiness and response planning

We help you prepare for the day a cloud credential is lost or abused, covering detection, escalation and containment steps. Tabletop exercises with your team test whether the plan holds when it is needed.