Protego

Protego

We build, secure and certify the systems you are held accountable for.

An assurance and engineering firm for regulated industries. ISO 27001 and AI governance, technical testing, and the software behind both.

Score your security for freeSee how we work

37 questions. About 10 minutes. Get your score, your gaps and what to fix first, by email. Prefer to talk? Book an assessment call

What do you need help with?

Select all that apply

Select a service above to start a scoping conversation.

Services

Four practices. One standard of delivery.

Most firms either advise or build. Regulated work needs both, because a control that is not implemented is not a control.

SVC.01

Security & Assurance

The management system, the evidence, and the people to run it. ISO 27001, Cyber Essentials, penetration testing, vCISO.

SVC.02

Resilience & Data Protection

What happens when a supplier fails or a regulator asks about personal data. DORA, third party assurance, UK GDPR, DPO as a service.

SVC.03

AI Engineering

AI systems you can put in front of a regulator. ISO 42001, EU AI Act readiness, and the engineering to make the answers true.

SVC.04

Platform & Data

Secure software, integration and data platforms, built to be evidenced rather than just shipped.

How we work

A sequence, not a retainer with no end state.

  1. 01

    Assess

    We map your systems, data flows and obligations, then test them. You get a clear picture of where you stand against the standard.

  2. 02

    Design

    Controls, architecture and the target state, specified so an engineer can build it and an auditor can check it.

  3. 03

    Build

    We work alongside your engineers to close gaps. Controls implemented and documented, not listed in a report.

  4. 04

    Certify

    We prepare the evidence pack, run the internal audit, and support you through Stage 1 and Stage 2 with the certification body.

  5. 05

    Operate

    Access reviews, vulnerability management and reporting on a fixed cadence, so surveillance audits hold no surprises.

Who we serve

Sectors where “it works” is not enough.

Standards & frameworks

The frameworks we work to.

ISO/IEC 27001ISO/IEC 42001ISO/IEC 27701SOC 2NIST CSFCyber Essentials and Cyber Essentials PlusPCI DSSDORAUK GDPREU AI Act
See how we work to each

Evidence

Work, described the way an evaluator reads it.

Case study 01

ISO 27001 and GDPR compliance for Sortitt.

An ISMS built from scratch and a working GDPR programme, delivered to satisfy customer security reviews.

Case study 02

Fractional CISO for Idenfo.

Senior security leadership across ISO and the ISMS, GDPR, the EU AI Act, penetration testing, secure code review and ITSM.

Read the detail

Next step

Start with a conversation, not a proposal.

Thirty minutes. We will tell you what we would do, what it would take, and whether we are the right firm for it.

Book an assessment callDownload our capability statement