Welcome to Metis Security, where we specialise in providing top-notch cybersecurity consultancy services tailored to the unique needs of small and medium businesses. We are your trusted partner in securing your Microsoft cloud platforms. With a focus on Azure and M365, we deliver technical assessments, risk management, and governance consultancy engagements that empower your business to thrive in the digital landscape.
Our experienced team of cybersecurity professionals combines in-depth technical expertise with a comprehensive understanding of business needs. We identify vulnerabilities, develop robust security strategies, and guide you in mitigating risks to ensure your valuable data and digital assets are protected.
Take the first step towards a secure future. Partner with us and unlock the full potential of the cloud while safeguarding your business. Get started today!


We help you safeguard your Microsoft cloud environments with a holistic approach that covers technical assessments, secure configurations, threat management, and compliance, ensuring robust protection.
We understand the unique needs of SMBs, delivering customised cybersecurity solutions that are practical, cost-effective, and scalable, providing the right level of security without unnecessary complexity or expense.
Gain access to timely threat intelligence, proactive guidance on security best practices, and ongoing support from us to stay ahead of evolving cyber threats and protect your business from potential breaches.
Let us help you navigate complex compliance requirements such as GDPR, ensuring your Microsoft cloud environments align with relevant regulations to reduce the risk of penalties and legal issues.
We align cybersecurity solutions with your strategic goals, becoming a trusted partner focused on your success and growth, providing ongoing support, regular assessments, and proactive guidance for a resilient security posture.
Save on the expense of hiring and training internal security staff. Leverage our expertise on a flexible basis, paying for only the services you need, for efficient and affordable protection of your Microsoft cloud environments.
We help you safeguard your Microsoft cloud environments with a holistic approach that covers technical assessments, secure configurations, threat management, and compliance, ensuring robust protection.
We understand the unique needs of SMBs, delivering customised cybersecurity solutions that are practical, cost-effective, and scalable, providing the right level of security without unnecessary complexity or expense.
Gain access to timely threat intelligence, proactive guidance on security best practices, and ongoing support from us to stay ahead of evolving cyber threats and protect your business from potential breaches.
Let us help you navigate complex compliance requirements such as GDPR, ensuring your Microsoft cloud environments align with relevant regulations to reduce the risk of penalties and legal issues.
We align cybersecurity solutions with your strategic goals, becoming a trusted partner focused on your success and growth, providing ongoing support, regular assessments, and proactive guidance for a resilient security posture.
Save on the expense of hiring and training internal security staff. Leverage our expertise on a flexible basis, paying for only the services you need, for efficient and affordable protection of your Microsoft cloud environments.


By choosing us, you will be working directly with a seasoned professional with 23 years of industry experience, who has held senior consultancy positions throughout this time. This single point of contact means you won’t have to jump through hoops being transferred between teams such as sales or scoping support and delivery.
We offer a comprehensive approach, unique in the cybersecurity consultancy industry where we will assist you from the discovery process, through the assessment and report delivery and all the way through to implementing the required improvement actions.
Unlike most of our competitors, we provide you with a service that is fixed price, fixed outcome. There will be no additional charges until we have achieved the desired end result as approved by you.
Metis Security offers cost-effective security solutions tailored to SMBs using Microsoft cloud without the support of extensive internal security teams. By partnering with us, you can avoid the expense of building in-house expertise, accessing flexible services that meet your specific needs and budget requirements.
We don’t believe in technical jargon and certainly don’t charge by the word when it comes to our deliverables, our ethos is to use plain English and be as succinct as possible – so you can get on with your day job.
Our team understands both the technical and business challenges you face. We are not the typical consultancy. We bring the human factor into our communication and do our best to make the engagement not only an efficient, but also a pleasant experience.
By choosing us, you will be working directly with a seasoned professional with 23 years of industry experience, who has held senior consultancy positions throughout this time. This single point of contact means you won’t have to jump through hoops being transferred between teams such as sales or scoping support and delivery.
We offer a comprehensive approach, unique in the cybersecurity consultancy industry where we will assist you from the discovery process, through the assessment and report delivery and all the way through to implementing the required improvement actions.
Unlike most of our competitors, we provide you with a service that is fixed price, fixed outcome. There will be no additional charges until we have achieved the desired end result as approved by you.
Metis Security offers cost-effective security solutions tailored to SMBs using Microsoft cloud without the support of extensive internal security teams. By partnering with us, you can avoid the expense of building in-house expertise, accessing flexible services that meet your specific needs and budget requirements.
We don’t believe in technical jargon and certainly don’t charge by the word when it comes to our deliverables, our ethos is to use plain English and be as succinct as possible – so you can get on with your day job.
Our team understands both the technical and business challenges you face. We are not the typical consultancy. We bring the human factor into our communication and do our best to make the engagement not only an efficient, but also a pleasant experience.
Maximise cloud security with Azure Security Assessments. Identify vulnerabilities, strengthen access controls, and implement best practices. Our expert team delivers comprehensive reports and practical recommendations, empowering informed security decisions. Harness Azure's potential while safeguarding your business against cyber threats.
Learn More
Fortify your M365 environment against cyber threats. Our assessments examine configurations, access controls, and data protection. We identify vulnerabilities, recommend robust security measures, and ensure data security, compliance, and resilience. Stay ahead of risks, enhance collaboration, and maximise M365's potential with our tailored assessments.
Learn More
Unveil hidden risks and ensure a strong defence for your business with our cutting-edge Infrastructure Security Assessments. Our tailored approach, backed by extensive experience, identifies vulnerabilities, highlights strengths, and equips you with the insights needed to protect your critical assets.
Learn More
Prepare your organisation for real-world cyber threats with our Breach Attack Simulation service. By simulating targeted attacks in Microsoft cloud environments, we assess your security controls, validate incident response procedures, and empower you to proactively mitigate risks. Defend your assets with strategic simulations.
Learn More
Break free from the cycle of assessments without action and achieve tangible security improvements with our Cloud Remediation solutions. Simply identifying vulnerabilities isn't enough, you need to execute the necessary remediation work. By combining our assessment expertise with remediation capabilities, we ensure your cloud environment is robust, resilient, and compliant.
Learn More
Protect your business from cyber threats with the Trusted Advisor advantage. Secure your Microsoft cloud environment, align cyber security with your business objectives, and stay one step ahead of threats. Access expert consultancy that understands your unique needs, and ensure long-term resilience.
Learn More
I had the distinct pleasure of working with David closely on several initiatives at NCC Group in 2021-22 where he gracefully bridged the gap between deeply technical cybersecurity leaders and business-focused sales/operations leaders to develop a global professional services framework that I still regard as truly elegant. He has an exceptional blend of technical and business insight, an infallibly polite demeanour, and an unflinching focus on optimal outcomes. It was certainly enjoyable to work with such capable and steady hands.
David is one of the rare few, he is highly technical yet has the ability to relay technical risk fluently in language that C level can comprehend. He has a fantastic understanding of risk and this is demonstrated in the way he provides sensible risk ratings as part of his deliverables.
He is a very professional individual, understands tactical and strategic drivers, someone it was a pleasure to work alongside as a client.
I had the pleasure of first working with David when I joined NGS Software in 2005, we worked together on many penetration testing engagements. During this time David took me under his wing and helped mentor me by building the foundation of my security knowledge. David has a wealth of experience in the cyber security industry which few can match, he has deep technical understanding networking, cloud computing and infrastructure security which he compliments with excellent communication skills.
Dave is one of a rare breed of highly technical security professionals that can articulate business risk to senior management without getting lost in the technical minutia. A safe pair of hands that I look forward to working with in the future.
David is the consummate professional, he is passionate about pen testing. Over the past two years David has not only been our CHECK team leader delivering numerous complex health checks but has also provided advice and consultancy on a regular basis to me, my team and the project.
I would have no hesitation in recommending David as a CHECK Team leader
David is an experienced security consultant and has been in the field for many years. He is adept at managing both technical detail and the big picture. I have been fortunate to work with David at two separate companies and would welcome the opportunity to work with him again.
I worked with David on a very high profile project for BT, David’s role as CHECK team leader and project leader was a high pressure position. David’s CHECK knowledge is a credit to him and his determination to drive the Pen Testing to a successful conclusion was outstanding. I was always impressed with David’s total dedication and professionalism even under intense pressure.
I have worked with David over the course of many years and he is simply one of the best at what he does. He has a deep technical knowledge that he can convey to all levels in high presure project environments.
This coupled with high integrity and a good sense of humour make David an asset to any company and someone that I would certainly recommend.
David has the ability to turn complex plans and documentation into easy-to-follow instructions within relatively short timescales. He remains professional and approachable throughout each engagement and I feel safe in the knowledge that David knows exactly what he is doing.
His communications are always clear, timely and thorough which makes working with him a pleasure. I too have no reservations whatsoever in recommending David should he ever decide to make tracks elsewhere. He is an asset to be proud of and a force to be reckoned with!
David was retained to provide expert advice to myself and the Head of Security on all Penetration Testing matters. This included scoping, organisation, interpretation of results and recommendations for the appropriate countermeasure or remediation.
David’s level of skill is very high and he is able to take the sometimes complex results and reinterpret them into a more user-friendly format for non-technical management.
I would have no hesitation in hiring David for any CHECK or Penetration Testing work that needed doing and is a considerable asset to his current employer.
In an industry prone to hype it is rare to find a consultant who combines a technical grasp of security issues with an ability to articulate their business impact. I highly valued David’s versatile contributions, ranging from elaborate information gathering tools to expansive client reports. David is a security assessment specialist who can be trusted to produce first-rate consulting deliverables.
We believe in constant training and the maintenance of both our technical and consultative skills and this can be best presented to our clients through formal qualifications, a selection of which are presented below.


