DECHY logo

Ctrl K or / to search, arrows to move, Enter to open

Work Area

Cybersecurity Systems

We build security in layers: who may sign in, what each person can reach, how data is protected, and how problems are noticed. We test each layer, fix what matters most first, and say plainly what no system can promise.

  • 1,200+ clients helped
  • Building since 2010
  • 15 services, one team
  • 50+ technologies
A person working across two laptops

At a glance

What we build

We build the controls that decide who can reach your data and systems, protect them, and warn you when something looks wrong.

In practice

Controls that work together

We layer the controls that limit who can reach your systems, protect your data, and show when something is wrong. No single control is enough, so we design them to work together.

Most breaches use ordinary weaknesses: a stolen password, software that was not updated, or an account with more access than it needed. Fixing these dull things is more valuable than buying exotic tools.

Security is also never finished. New software, new staff, and new threats change the picture, so we plan for regular review.

Five layers of protection

Layers from top to bottom. Identity; Access; Application; Data; Detection.

  1. IdentityProve who is signing in.
  2. AccessAllow only what each person needs.
  3. ApplicationSoftware built to resist misuse.
  4. DataInformation scrambled and backed up.
  5. DetectionWatch for signs of trouble.
This diagram shows five protective layers, from proving identity at the top to detecting trouble at the bottom, each guarding against different failures.

Often built with

The layers

What each layer does

Layers of a security system and what each protects against
LayerWhat it doesProtects against
Identity Checks who is signing in, with a second proof such as a code on a phone. Stolen or guessed passwords.
Access Gives each person only the access their job needs. A single stolen account reaching everything.
Application Builds software to refuse harmful input. Attacks that exploit mistakes in the code.
Data Scrambles information and keeps tested backups. Data theft and loss.
Detection Collects logs and alerts on unusual events. Attacks that go unnoticed for weeks.

Testing

How we check that controls work

A control that has not been tested is a hope, not a protection.

How we check that controls work

A sequence of 5 steps. List what matters: Your valuable data and exposed entry points.; Review the design: Look for weak points before building.; Test the result: Try to break it, as an attacker would.; Fix and retest: Repair findings, then check they are gone.; Keep watching: Review regularly as things change..

  1. List what mattersYour valuable data and exposed entry points.
  2. Review the designLook for weak points before building.
  3. Test the resultTry to break it, as an attacker would.
  4. Fix and retestRepair findings, then check they are gone.
  5. Keep watchingReview regularly as things change.
This diagram shows five steps in checking security, from listing what matters to reviewing regularly as things change.

Choosing the right approach

What no one can promise

No provider can promise that a breach will never happen. Anyone who does is guessing or selling comfort.

What we can do is reduce the chance, limit the damage, help you notice quickly, and plan how to recover. We also explain our findings in plain language, including what remains risky.

A typical example

Shared accounts replaced by individual sign-in

A typical case is a company whose staff share one account for a customer system, and whose old software has not been updated for years. A single stolen password could expose every customer record.

A security review could give each person their own sign-in with a second proof, limit what each role can see, update the software, and add alerts for unusual activity. A stolen password would reach far less.

Common questions

Questions about security work

Do we need a full security review?

Not always. For many organizations a short review of sign-ins, access, updates, and backups finds the most important problems at modest cost.

Will you tell us about problems you find?

Yes. We explain each finding in plain language, rank it by risk, and say what we recommend, including what to leave alone.

Can you build security into our new software?

Yes. It is cheaper and more effective to design it in from the start than to add it afterwards.

Have a different question?

Tell us what you are weighing up and we will answer it plainly.

Ask a question

Already a client? Email support@dechytech.com

Tell us what you most need to protect

Describe your most valuable data and where it lives. We will outline the layers that matter and what to test first.