Cyber
Security

Products,
Working

As they
Should.

Are you getting the most from the security you already pay for?

We find the weak spots and fix what matters most to your business.

Security Ninja's orange ninja cat mascot
Fix

Make the Microsoft security you own work properly

Licences you already pay for, configured properly, tested and documented.

Microsoft security optimisation

Having Microsoft security licences is one thing. Knowing they’re configured correctly and protecting everything they should be is another.

We find the gaps in how your Microsoft security is set up, then help you fix them: Defender for Endpoint policies, Intune baselines, Entra ID and Conditional Access, passkeys, admin privileges, email and remote access.

We apply Zero Trust principles and bring signals together through Defender XDR, so your tools work as one joined-up defence. Then we validate the controls, giving you stronger protection and clear evidence that it's working.

No new licences unless you genuinely need them.

Find out more

Microsoft Sentinel improvement

Collecting logs in Microsoft Sentinel doesn’t mean you’re detecting the threats that matter.

We assess what you’re collecting, what you’re detecting and where the gaps are, then help you improve it. That includes data source and connector coverage, analytics and detection tuning, false-positive reduction, incident workflows, automation and analyst enablement.

We help join Sentinel with Defender XDR so investigations have the context they need, while ensuring your security team has practical processes for triaging, investigating and responding to incidents. Less noise, fewer blind spots and better security outcomes.

Find out more
  1. 1
    Health checkWe look at what’s switched on in your setup and how it’s configured.
  2. 2
    Fix what matters mostStarting with sign-in security, piloted before anything is enforced.
  3. 3
    Show the evidenceWhat was on, what we changed and why.
Govern

Use AI with confidence, not crossed fingers

Your staff are already using AI. See where you stand in three minutes, then put sensible rules in place.

AI security governance

Your staff are probably already using AI. The important question is whether you know how they’re using it and what company data is going with them.

We help you discover AI use, identify Shadow AI and assess the risks around data, access and the services people are using. We then help you decide what’s acceptable, put sensible security controls around it and create straightforward policies that staff can actually understand.

The result is AI that people can use productively without security, privacy and compliance becoming an afterthought.

Take the 3-minute quick checkFind out more
Advise

Expert judgement, when you need it

Experienced security specialists who’ve seen what works and what doesn’t. Senior-led, with associates where the work needs more hands.

Questions we help answer
“Is this new tool worth it?” “What should our target architecture be?” “Which tools overlap, and what can we retire?” “What do we do first, second and third?”

Security architecture & transformation

Moving platforms, merging tenants or cutting tools? Security designed into the change, not added after. Advice, a review, the design, or hands-on with your team, and someone senior on retainer afterwards.

Need the roadmap first? Strategy & architecture

Find out more

Not sure which? Book a 30-minute call and we’ll tell you. Including if the honest answer is that you don’t need us yet.

Book a 30-minute call

Welcome to Security Ninja.

Hi, I’m James Agombar. Founder of Security Ninja, Microsoft MVP for Security, and nearly thirty years in IT. You’ll deal with me from the first call to the last change. I’ve built and run the programmes I now advise on, and I’ll tell you when you don’t need something.

Where a job needs deeper expertise than mine, I bring in an associate I’ve worked with before. Senior people only, no bench, and I stay on the hook for the result.

Microsoft Most Valuable Professional
Two published booksDefender for Servers ·
Securing Teams
Nearly 30 years in ITMicrosoft, cloud and AI
security
“I would not hesitate to recommend James to anyone seeking the services of a security consultant of the highest caliber. His combination of subject matter expertise, problem-solving acumen, and client-centric approach make him a valuable asset to any organization.”Client testimonial · Read more references

Why a specialist boutique? The depth of a big consultancy, without the overhead.

Senior-ledExperienced specialists do the work. You won’t be handed to a junior team.
Microsoft security onlyNot IT support, not reselling. Just making Microsoft security work properly.
IndependentWe don’t sell licences or tools, so our advice isn’t tied to a sale.
Direct contactTalk to the people doing the work, with no account managers in between.

How Security Ninja has helped clients

Every engagement is different. Here’s a sample of what that looks like in practice.

Digital Transformation AdvisoryOpSec Team BuildCloud Security AssessmentsEnterprise Security StrategyPlatform Security AuditsIT Risk ManagementSecurity ArchitectureVulnerability ManagementShift-Left & DevOpsCloud-Native Security ReviewSecurity Policies & ProcessesISO 27001 GuidanceIdentity & Access ReviewsPhishing Resistant MFACNAPP EnhancementsDefender for EndpointDefender for Cloud RemediationPost-Acquisition ToolingAI Deployment StrategyCopilot GovernanceCyber Strategy & Roadmap

Most
conversations
start the same
way.

Something isn’t right, but nobody’s quite sure where to look.

Thirty minutes is usually enough to get a clear picture of where the real exposure is.

  • You tell me what you’ve got and what’s worrying you
  • We’ll say what we’d check first, and what we wouldn’t bother with
  • No proposal unless you ask for one
Book a 30-minute callPick a time that suits you