I’m Luca, an independent Microsoft security practitioner.
I run Microsoft 365, Entra ID, Defender and Sentinel security day to day on a live estate, and I bring that hands-on experience to organisations that need senior judgement but not a full-time security lead.
Why I set this up
Organisations of 20–250 staff often get security advice from the same provider that runs their systems, or from consultants priced for much larger firms. Many also pay for Microsoft security features they’ve never switched on.
I offer an independent second opinion at a fixed price, from the person who does the work, with a report your board can read and a roadmap your IT team can follow.
How I work
Independent
I sell no licences or products. If a partner ever pays me a referral fee, I’ll tell you in the proposal.
Hands-on
The person you speak to is the person who does the review. Nothing is passed to a junior team.
Built on public standards
CIS benchmarks, NCSC guidance and Cyber Essentials, so every finding is easy to check and defend.
Honest about limits
I don’t promise you won’t be breached, and I don’t offer round-the-clock response. You’ll know what I found and what risk remains.
Experience and qualifications
- [Current certifications]
- [Years working in Microsoft security]
- [Types of organisation you’ve supported]
When you need more than advice
I’ll introduce you to trusted specialists for:
- Penetration testing by CREST- or CHECK-accredited firms
- Microsoft engineering to build fixes or deploy Sentinel
- Incident response and forensics during a live incident
- ISO 27001 implementation and certification audits
Let’s talk about your set-up
A 30-minute call, no charge and no obligation.