Skip to content

Technical Notes

Write-ups from deployments we have actually run, organised by section. Specific problems, the reasoning behind the approach, and what it cost to get wrong. Client names are withheld under confidentiality.

Page 1 of 6

IT Support7 min read

An IT roadmap for a growing business

The order matters more than the list. Most IT programmes fail not because the wrong things were chosen but because they were attempted in an order where each depended on something that had not been done yet.

Active DirectoryMFABackupMonitoringSegmentation
Read the write-up
Cybersecurity7 min read

IT for banking and financial services

What makes financial IT different is not stronger security. It is that every action must be attributable afterwards, every change must be evidenced, and the availability requirement is contractual rather than aspirational.

Audit loggingPCI DSSSegregation of dutiesMFAImmutable storage
Read the write-up
Cybersecurity7 min read

IT for healthcare providers

Healthcare IT has a constraint most sectors do not: the access control has to be strict enough to protect records and loose enough that nobody is locked out of information they need in an emergency. Everything difficult follows from that tension.

Access controlAudit loggingSegmentationEncryptionBackup
Read the write-up
IT Support7 min read

IT for education providers

Education IT is shaped by three things no ordinary business faces: everyone arrives at once, the user population turns over almost entirely each year, and a large part of it is actively curious about the network.

Wi-FiIdentitySegmentationFilteringDirectory
Read the write-up
AI & Automation8 min read

Choosing your first AI project

The first AI project decides whether there is a second one. Most businesses pick the most visible use case, which is also the one most likely to fail publicly — and the selection criteria that avoid that are not the ones usually applied.

LLMRAGn8nEvaluationOWASP LLM Top 10
Read the write-up
AI & Automation7 min read

AI for internal business operations

The useful applications inside a business are unglamorous and reviewable: drafting, summarising, classifying, and finding what somebody already wrote down. They work because a person sees the output before it matters.

LLMRAGVector searchn8nAccess control
Read the write-up
AI & Automation8 min read

Document automation that works

Extracting data from invoices, forms and statements is one of the few AI applications with an objectively correct answer, which is what makes it succeed where vaguer projects fail. The difficulty is not extraction — it is what happens to the cases the system is unsure about.

OCRLLMn8nLaravelMySQL
Read the write-up
Cloud & Infrastructure8 min read

AWS vs Azure for a growing business

Both are excellent and the comparison as usually written is unusable — hundreds of services against hundreds of services. For a business with a handful of workloads, three factors decide it, and none of them appears in a feature matrix.

AWSAzureEntra IDTerraformDocker
Read the write-up
Networking7 min read

pfSense in a business network

pfSense gives a growing business a firewall, a VPN concentrator and traffic visibility on hardware that costs a fraction of the commercial appliances. What it does not give you is a vendor to call, and that difference should decide whether it belongs in your network.

pfSenseFreeBSDCARPWireGuardOpenVPN
Read the write-up

Have a Problem That Looks Like One of These?

We typically respond within 4–8 business hours.