We work with human rights defenders — investigative teams, legal clinics, and advocacy organizations — who hold sources, clients, staff, or campaign data.
Security trainings and workbooks help teams assess risk and write plans. Helplines triage when something is already on fire. We run the digital protection in between — devices, accounts, and inbound mail — so the plan stays working after the workshop ends.
We enroll and watch the laptops, run the password vault, and filter inbound mail. You keep Google Workspace or Microsoft 365.
Devices
Enrollment, encryption, patching, and monitoring. We see which laptops are covered and act when one is missing, stale, or gone.
Accounts
Shared passwords and passkeys in a vault, plus monitoring and lockout when a login looks stolen.
Email
Inbound filtering for lookalikes and credential lures, without changing your mail provider.
Named help
Alert triage and a named person when a laptop is lost or an account is locked. Device access, if any, is written into the engagement before enrollment.
How an engagement runs
A short cycle. Written before we touch a device.
Every context is different. Scope is written for your team, not copied from a template.
01
Baseline Review
Thirty minutes on headcount, what you hold, and whether anything is on fire. We say what we would run and whether we are the right fit.
02
Written scope
Access, logging, and recovery rules go in writing before enrollment. Deliverables, responsibilities, and price are clear before work starts.
03
Enroll and watch
Laptops get enrolled. Passwords and passkeys go in the vault. Inbound mail is filtered. We monitor devices and accounts and cut access when something is wrong.
04
Help and adapt
A named person answers when something breaks. When your context or threats change, we review what is still working and adjust.
Limits
Honesty over a finished architecture claim.
Specific rules for log retention, device access, and recovery keys are written into each engagement. We will not advertise them as live site-wide guarantees until they are configured and checked. We do not replace a helpline, a training course, or a full IT helpdesk.