Cyber security consultancy and reseller
We secure the systems your organisation runs on.
Tekgates sells and integrates security technology from Microsoft, CrowdStrike, Symantec, Sophos, Tenable and Rapid7, then tunes it to your environment. The UK team that quotes your licences is the one that deploys them and supports you afterwards.
Under attack right now? Get incident response
Security products we resell
We are a reseller and solutions partner for six security vendors. You get one quote for licences and deployment, and one team to call when something needs changing.
- Licence quotes and renewals
- Trials and proofs of concept
- Deployment quoted with the licence
- Support after go-live
Get a Microsoft quote
Cyber security services
Hire us for a single project or the whole programme. The engineers who deploy your tools also write your detections, and they are the people you call during an incident.
Advise and respond
Advice before an incident and hands-on help during one.
Cyber defence consulting
An independent view of where you are exposed and what to fix first. Reports are written for your board as well as your engineers.
- Security assessments and gap analysis
- Architecture reviews and roadmaps
- ISO 27001 and Cyber Essentials readiness
Incident response
When you find an intrusion, we help you contain it, find out how the attacker got in and bring systems back safely.
- Containment and forensic investigation
- Retainers with agreed response times
Threat hunting
We search your telemetry for attackers your alerts missed, starting from how a real group would operate. Each finding becomes a new detection.
- Compromise assessments
- Hunts based on current attacker techniques
Build and run
Getting the tools you buy configured and monitored.
Security integration
We deploy and configure products from our vendors, connect them to your SIEM and identity platform, and remove the tools they replace.
- Design and deployment
- Migration from legacy tools
- Log source and SIEM onboarding
- Proofs of concept before you buy
Detection engineering
Detection rules written for your environment and mapped to MITRE ATT&CK. We keep tuning them until analysts trust the alerts.
- Microsoft Sentinel and Defender XDR (KQL)
- CrowdStrike Falcon Next-Gen SIEM
- Testing against simulated attacks
- Fewer false positives
Managed security operations
We triage alerts from your security tools and escalate only what needs your attention.
- Alert triage and investigation
- Monthly reports and tuning
Protect
Hardening and testing for cloud services, accounts, devices and the flaws attackers exploit.
Cloud security
Secure configuration and monitoring for Microsoft 365, Azure and AWS, including the identities and data held there.
- Posture assessment and hardening
- Defender for Cloud and Falcon Cloud Security
- Conditional Access policies
- Data protection with Purview
Identity protection
We protect admin and service accounts with Entra ID and Falcon Identity Protection, and find risky accounts with Tenable Identity Exposure, so one stolen password doesn't hand an attacker your network.
- Admin account hardening
- MFA and passwordless rollout
- Least privilege on endpoints
Endpoint, email and network security
Protection for laptops, servers, mailboxes and the network edge, managed from one console where possible.
- CrowdStrike, Microsoft Defender, Symantec and Sophos
- Email filtering and anti-phishing
- Firewalls and secure remote access
Vulnerability and exposure management
We scan servers, endpoints, cloud accounts and web apps, then rank fixes by how likely each flaw is to be exploited in your environment.
- Tenable and Rapid7 deployment
- Scanning and patch prioritisation
- Attack surface and web app testing
Dealing with an incident now?
Call us. Leave affected machines powered on and disconnect them from the network if you can. Avoid wiping or rebuilding anything until we have collected evidence.
Incident response line
Existing retainer clients should use the number in their response plan.
How an engagement runs
Most projects follow these four stages. Incident response skips straight to stage three.
-
Assess
We review your tools, configurations, logs and team, and agree with you which risks matter most.
-
Design
You get a written plan with a fixed scope and price that says what changes, in what order and why.
-
Integrate
Our engineers deploy and connect the technology and test each detection before handover. They write the documentation as they work.
-
Operate and improve
Your team takes over, or we run it with you and review coverage as attackers and your estate change.
Who we work with
Organisations that hold sensitive data or run services people depend on. Some have a full security team and need specialists. Others need us to be their security team.
- Financial servicesBanks, insurers, payments and fintech
- HealthcareClinics, care providers, health tech
- Public sector and educationLocal authorities, schools, universities
- Energy and utilitiesOperators and their supply chains
- Retail and e-commerceOnline stores and multi-site retailers
- Professional servicesLaw firms, accountants, consultancies
Your gateway to technology
Tekgates is a UK cyber security consultancy and reseller. We know our vendors' products well enough to get the most out of them, and we are independent enough to tell you when you don't need another one.
Every engagement ends with documentation your staff can use. The detections, configurations and runbooks we build are yours to keep.
Talk to a security consultant
Ask for a licence quote, a renewal or a project proposal. A consultant will reply within one working day.
- Phone
- Hours
- Monday to Friday, 9am to 5:30pm
- Location
- United Kingdom