TekisHub
Contact us

Build

Cybersecurity

Helping you understand your security risks, meet the standards your customers expect and keep threats out.

Start a project See examples
A padlock on a keyboard
Assessment
2–4 weeks to a prioritized plan
Frameworks
NIST CSF, ISO 27001, SOC 2, CIS
Testing
Web, API, cloud and network
People
Security engineers on contract or hire

Overview

Assessments, Compliance and Security Operations.

Attackers use automation to probe every system they can reach. Staying ahead means knowing your weak points and fixing the ones that matter most first.

We assess your environment, help you align with recognized frameworks such as NIST, ISO 27001, CIS and PCI DSS, and provide the people to run security day to day.

You Might Need This If…

  • A customer or auditor is asking for evidence of your controls.
  • You have not had an independent security test in over a year.
  • Staff leavers keep their access longer than they should.
  • Cloud accounts and permissions grew quickly without a review.
  • You need security skills but cannot hire them fast enough.

What we deliver

Cybersecurity Services

Take one piece or the whole scope, delivered by one team.

  • Security Assessments

    A clear view of your risks across applications, cloud and infrastructure.

  • Compliance Readiness

    Gap analysis and remediation plans against NIST, ISO 27001, CIS and PCI DSS.

  • Identity and Access

    Single sign-on, multi-factor authentication and access reviews.

  • Application Security

    Secure code reviews and security testing built into your pipelines.

  • Cloud Security

    Configuration reviews and guardrails for AWS and Azure.

  • Security Staffing

    Analysts, engineers and architects placed into your security team.

What good looks like

The Outcomes We Work Towards

We agree how success will be measured before work starts, and report against it.

  • Know where you standAn honest view of your risks, ranked by impact and effort.
  • Fix what matters firstA practical remediation plan your teams can actually deliver.
  • Evidence for auditorsPolicies, controls and records ready for audits and customer questionnaires.

How we work

Four Phases, with Clear Deliverables

Each phase ends with something you can review and sign off, so you can stop, change course or continue with confidence.

  1. 12–4 weeks

    Assess

    Identify assets, threats and gaps against the right framework.

    You get

    • Control assessment
    • Technical testing
    • Risk register
  2. 21 week

    Prioritize

    Rank fixes by risk and effort into a practical roadmap.

    You get

    • Prioritized roadmap
    • Quick wins list
    • Budget estimate
  3. 3Varies

    Remediate

    Implement controls, policies and tooling.

    You get

    • Configuration fixes
    • Policies and procedures
    • Retest results
  4. 4Ongoing

    Monitor

    Ongoing reviews, testing and support.

    You get

    • Monitoring and alert triage
    • Quarterly reviews
    • Audit support

Technology

Tools and Platforms We Work With

We choose tools to fit your stack and your team, and we document what we build so you’re never locked in.

  • NIST CSF
  • ISO 27001
  • CIS Controls
  • PCI DSS
  • Microsoft Entra ID
  • Okta
  • SIEM tools

You see progress the whole way through, in the same kind of view shown here.

Examples

What This Work Looks Like

Two typical engagements: the problem, what we did, the team and the result.

Example scenario · B2B software company

Getting Ready for a First SOC 2 Audit

The situation

Enterprise prospects required a SOC 2 report the company did not yet have.

What we did

  • Assessed controls against the trust services criteria
  • Wrote policies and set up evidence collection
  • Fixed access, logging and change-management gaps
Team
Security lead, compliance analyst, cloud security engineer
Timeline
5 months to audit readiness
Result
The company entered its audit with controls and evidence in place.

Example scenario · Healthcare services provider

Tidying Up Identity and Access

The situation

Accounts for leavers and contractors stayed active, and access reviews were manual.

What we did

  • Connected HR records to the identity platform
  • Automated joiner, mover and leaver steps
  • Set up quarterly access reviews for key systems
Team
Identity architect, 2 IAM engineers
Timeline
4 months
Result
Leavers lose access on their last day, automatically.

These examples show the kind of work we do. They are illustrative and do not describe a named client.

Parliament Hill in Ottawa
Canada edition

Security for Canadian Organizations

  • Programs mapped to OSFI B-13 technology and cyber risk guidance.
  • Breach reporting processes that meet PIPEDA rules.
  • Guidance from the Canadian Centre for Cyber Security built into your controls.
  • A Toronto-based delivery lead on every project, with engineering in India for extended hours.

Team and pricing

Who You Work with, and How It’s Priced

Every engagement has a named delivery lead. Need individuals rather than a team? We place security analysts, security engineers, identity and access specialists and more on contract, contract-to-hire or direct hire terms.

A Typical Team

Sized to the work; this is a common starting point.

  • Security lead1
  • Security engineers1–3
  • Penetration testerFor testing
  • Compliance analystAs needed
  • Identity specialistAs needed

Project

A fixed scope and timeline, led by our delivery lead. Often fixed price for discovery and first release.

Dedicated Team

A stable team working on your backlog and tools, billed monthly. Scale up or down with notice.

Managed Service

We run and improve what has been built, against agreed service levels, for a monthly fee.

Hire security analysts instead

FAQs

Questions We Often Hear

Do you do penetration testing?

Yes, for web applications, APIs, cloud environments and networks, with a retest after fixes.

Can you help us pass an audit?

We prepare you for SOC 2, ISO 27001, HIPAA, PCI DSS and similar audits. The audit itself is carried out by an independent firm.

Do you offer managed security?

We provide monitoring and alert triage on your existing tools, or place security engineers in your SOC.

We are small. Is this overkill?

No. We size the work to your risk; for smaller firms that is often a short assessment and a handful of high-value fixes.

How do you handle sensitive findings?

Under NDA, shared only with named contacts, and stored in your systems rather than ours where possible.

Industries

Industries We Deliver For

More from Build

Related Services

All Build services

Next step

Talk to Us About Cybersecurity

Tell us what you need and when. We’ll come back with an approach, a team and a plan.

  1. We reply within one working day.
  2. A short call with someone who knows the subject, not a salesperson reading a script.
  3. A written proposal or shortlist, usually within a week.

Prefer email? Write to info@tekishub.com.

Data Privacy