Service
Cybersecurity services that protect your business and your customers
We find the weak points in your software, systems, and habits, then fix them in order of real risk. You get practical protection, clear evidence for customers and auditors, and security built into everything we build.
- 1,200+ clients helped
- Building since 2010
- 15 services, one team
- 50+ technologies
At a glance
What we build
We protect your systems, accounts, and information from being stolen, damaged, or misused, and get you ready to respond if something goes wrong.
Problems we solve
Most breaches come from a small gap: a weak password, an old update, an account with too much access. Many organizations do not know where their gaps are.
Who we serve
Owners and leaders who hold customer or payment information, teams building software, and anyone who has been asked about security by a customer or insurer.
How to choose
Start by finding out what you hold and what could go wrong. Then fix the gaps that matter most first, before buying any tools.
- 1,200+Happy clients
- 1,500+Projects delivered
- 100+Engineers and designers
- 20+Countries served
- 22Certifications
Every project gets its own squad from our 100+ engineers and designers: a project lead, a product designer, and engineers matched to your stack, with the same people from kickoff to launch.
What it is
What cybersecurity means for a business
We keep your systems and information safe from theft, damage, and misuse through the habits, tools, and design choices that make up cybersecurity. No one can promise zero risk, so we make attacks hard, limit the harm if one succeeds, and make sure you can recover quickly.
People often picture hackers breaking through firewalls. In practice, most problems start with ordinary gaps: a reused password, an unpatched program, a file shared with the wrong person, or a former employee who still has access.
That is good news, because ordinary gaps can be fixed. A clear picture of what you hold, plus a handful of dependable habits, removes most of the risk, and it does not need a large budget to start.
Priorities
From every possible threat to a short list
We do not try to fix everything at once. We narrow every possible threat down to the few that are likely and damaging for you, and fix those first.
From every possible threat to a short list to fix
Stages that narrow: Everything that could go wrong: Every possible threat to every system.; What applies to you: Threats that fit what you hold and how you work.; What is likely and damaging: Ranked by chance and by harm.; What to fix first: A short, ordered list you can act on.; Watch and respond: Alerts and a plan for when something happens..
- Everything that could go wrongEvery possible threat to every system.
- What applies to youThreats that fit what you hold and how you work.
- What is likely and damagingRanked by chance and by harm.
- What to fix firstA short, ordered list you can act on.
- Watch and respondAlerts and a plan for when something happens.
What we do
The security work we do
Security reviews and audits
A structured look at your systems, settings, and habits, with a ranked list of what to fix.
Security testing
Safe attempts to break into your software before someone else does.
Secure software development
Security built into software from the first design, not added at the end.
Access and sign-in
Making sure the right people have the right access, and nobody else.
Cloud and application security
Protecting what runs in the cloud and the programs that handle your information.
Backup and recovery planning
A tested plan to get back to work quickly after a failure or attack.
Choosing help
What kind of help do you need?
Security help comes in three shapes. Choose by where you are today.
Where are you now?
Choose this when
You run systems today and want to know how exposed they are.
- What you get
- A clear report of weaknesses, ranked by risk, with practical fixes.
- Keep in mind
- A review is a snapshot. Security needs repeating as things change.
Choose this when
You are creating new software or a new system and want it safe from the start.
- What you get
- Security designed into the plan and tested before launch.
- Keep in mind
- It needs involvement early, when changes are cheapest.
Choose this when
You want ongoing protection and a plan for when something happens.
- What you get
- Monitoring, alerts, regular checks, and a rehearsed response.
- Keep in mind
- It needs a named owner on your side to act on alerts.
How a review runs
How a security review runs
Agree what to protect
We list your most important systems and information, and who relies on them.
What it produces
- List of what matters
- Scope of the review
Think like an attacker
We ask how each could be reached and what an attacker would want.
What it produces
- Threat notes
- Likely attack paths
Check and test
We review settings and software, and test safely for weaknesses.
What it produces
- Findings
- Evidence
Rank and explain
We rank findings by risk, in plain language, with the cost and effort of each fix.
What it produces
- Ranked report
- Fix plan
Fix and recheck
We help you fix the most important items and confirm they are closed.
What it produces
- Fixes verified
- Short follow-up report
Worth knowing
What we promise
Security lowers risk; it never removes it completely. What we promise is an honest assessment, fixes ranked by real risk, and clear explanations your team and your customers understand.
Every finding comes with evidence, and every fix is tested.
Good habits
Four habits that remove most risk
Strong sign-in
- Unique passwords kept in a password manager.
- A second step on important accounts.
Keep things updated
- Apply updates to software and devices on a schedule.
- Retire programs nobody uses.
Least access
- People get only the access their job needs.
- Access is removed when people leave.
Backups that work
- Regular copies kept apart from the originals.
- A recovery that has been tried, not assumed.
Technology
The security tools and standards we use
For your developers and IT lead: our choices on application security, identity and access, encryption and trust, and detection and response, and the reasoning behind each.
We follow the OWASP guidance on common web security mistakes: weak access control, injection, insecure design, and misconfiguration. We combine code review, dependency scanning, and testing.
We design sign-in around standards such as OAuth and MFA (multi-factor authentication, the second step at sign-in), manage permissions through IAM (identity and access management), and protect secrets with secrets management.
Information is protected with encryption in transit using TLS, and at rest. We design with zero trust ideas: nothing is trusted just because it is inside the network.
- Central logs and alerts tuned to real signals.
- An incident plan: who decides, who acts, who tells customers.
- Practice runs, so the plan works under pressure.
People and habits
Security is partly about habits
Most security incidents begin with an ordinary mistake: a reused password, a message that looked real, an old account that was never closed. Technology reduces the chance and the damage, but habits matter too.
We pair technical work with simple guidance your team can follow, such as how to report something suspicious, who approves access, and what to do first if an account is lost.
Pricing and timelines
What security work costs
Every project is quoted in writing after a short call. These ranges show where most projects land, so you can plan before you talk to us.
Security review
A clear report on the risks in your website, app, or cloud setup.
Typical range
$2,000 to $6,000
1 week from approved scope
Penetration test and fixes
We test like an attacker, then fix what we find.
Typical range
$5,000 to $12,000
2 to 3 weeks from approved scope
Hardening and monitoring
Access control, backups, logging, and alerts set up across your systems.
Typical range
$8,000 to $20,000
2 to 4 weeks from approved scope
Compliance readiness
Controls and evidence prepared for audits such as SOC 2 or ISO 27001.
Typical range
$20,000 to $48,000+
6 to 10 weeks from approved scope
The timeline starts once the scope is approved and we have what we need from you.
What moves the price
- Number of systems in scope
- Depth of testing
- Compliance requirements
- Fixes included or not
Not sure which fits? Tell us what you need and we will send a fixed quote and timeline for your project.
Get a quoteSelected work
Cybersecurity projects we have delivered
What clients say
In our clients' words
We can finally see who has access and who approved it. The old spreadsheet was always behind.
Andre WilsonIT Operations ManagerMeridian Business ServicesProfessional Services After a staff member left, we weren't confident we'd closed every account. Daniel at DECHY helped us spot gaps we hadn't considered, and now we feel much more confident about offboarding.
Hannah FosterIT and Security ManagerNorthstar Business GroupProfessional Services
Common questions
Questions about security
Where do we start if we have never done a security review?
Start with the system that would hurt most if it failed, such as your customer information or payment flow. A focused review of that one system teaches you the most and gives you a short list to act on.
Are we too small to be a target?
Many attacks are automatic and do not choose by size. They look for easy gaps. Small organizations are often targeted because they have fewer protections.
Do you hold security certifications?
We do not make certification claims on this site. We describe the work we do and the standards we follow. If your customer or insurer asks for a specific certificate, we will tell you plainly what we can and cannot provide.
Can you secure software someone else built?
Yes. We review existing software, find weaknesses, and help fix them, or recommend a safer approach when fixing would cost more than rebuilding.
What should we do if we think we have been attacked?
Contact us as soon as you can through the contact page. Do not delete anything, and note what you saw and when. Quick, careful action limits the harm.
How does this relate to privacy rules?
Good security helps you meet privacy rules, but the rules have their own requirements. We identify the rules that apply during discovery and recommend that you take legal advice for your situation.
Have a different question?
Tell us what you are weighing up and we will answer it plainly.
Ask a questionAlready a client? Email support@dechytech.com
What it looks like
See the security systems we build
Tell us what you need to protect
Describe your most important system or information and what worries you. We will suggest a practical first step and tell you honestly what it will and will not achieve.