Built to run.
Ready to prove.

Dependable infrastructure, thoughtful software and practical compliance, designed around how your organisation actually works.

Thirty minutes, screen-share, no slides. You leave with a written summary of what we found, whether or not you hire us.

operations monitored
Fleet patch level18 / 19
web-01 · debian 12
Kernel patched, no reboot required
KernelCare·applied 06:12
current
db-01 · ubuntu 24.04
Off-site backup verified
integrity check passed·03:40
verified
app-02 · debian 12
File integrity alert reviewed
Wazuh·closed by DK
reviewed
mesh · tailscale
Admin access off the public internet
7 devices·key-only SSH
private
19 hosts monitoredUpdated 06:14
Illustrative view of a managed fleet.

Iris finds the patient data nobody knew was there.

Our own software, built for healthcare. Iris scans disks, SMB shares and Microsoft 365 for PII and PHI, ranks what it finds by severity and tells you who owns each file, running entirely on your own infrastructure.

Iris ships with the appliance it runs on, so every deployment is sized before it is demonstrated.

iris / flagged files scanning
All sources SMB SharePoint OneDrive Exchange
Scan progress · clinical-share1,284 / 1,902
smb › \\clinical-share\referrals
2019_referral_batch.xlsx
JM412 records
MRNDoBaddressname
critical
sharepoint › cardiology / handover
discharge_summaries.pdf
DK38 records
health IDclinical code
high
onedrive › o.stanton
ward_whiteboard_0311.jpg OCR
OS6 records
nameMRN
medium
exchange › reception@
Re: patient transfer.msg
RC2 records
emailDoB
low
Showing 4 of 47 flaggedSorted by severity
Illustrative view of the Iris findings dashboard.

We start with the environment you already have.

No forced rebuild and no generic prescription. The first job is understanding what exists, what it depends on and what recovery would actually involve, then separating urgent risk from valuable improvement.

How we work

Systems & dependencies

Services, providers, data flows, deployments and the components each workload relies on.

Risk & recovery

Exposure, single points of failure, backup coverage and what a restore would really take.

People & access

Who uses, owns and administers each system, including constraints and escalation paths.

Business priorities

Deadlines, compliance obligations, budgets and the outcomes that matter most.

Tell us what needs to stay online.

Send the messy version. Current setup, what is fragile, what is coming up. We reply with practical next steps, not a sales script.

No minimum term on the standard managed offer, and 30 days’ notice.