Cyber Security in Shropshire

A CREST accredited security consultancy based in the county: working with Shropshire organisations that need real assurance without an enterprise budget.

AlbrightonTelfordShrewsburyBridgnorthLudlowOswestryMarket DraytonWhitchurchNewportWellington

Based here, not visiting

Solusec is based in Albrighton. Shropshire is where we live, which shapes what we offer here: engagements sized for organisations that are genuinely small, explanations pitched at people who are not security specialists, and honesty about what you do and do not need.

The county is not short of good businesses. It is short of local providers holding company-level accreditation. Most organisations here choose between a national firm adding travel to every onsite day, or an IT support company offering security as a sideline without the accreditation procurement teams and insurers look for.

The realistic picture

Most organisations in the county are not being targeted by sophisticated adversaries. They are exposed to the same commodity attacks as everyone else: phishing leading to business email compromise, ransomware arriving through an unpatched remote access service, invoice fraud following a mailbox compromise. Not exotic, and largely preventable.

What has changed is assurance pressure. Customers, funders, insurers and public sector buyers now ask for evidence, and "we take security seriously" no longer answers the question. That drives most of the enquiries we get.

Manufacturing and engineering

Telford's industrial estates (Stafford Park, Halesfield, Hortonwood), house a dense concentration of engineering businesses, many supplying larger customers who have recently started asking security questions they never asked before.

Schools and multi-academy trusts

Education is a persistent target, holds significant personal data about children, and operates on budgets that make enterprise security provision impossible. We work with schools and trusts across the county, priced accordingly and explained in terms a business manager can take to governors.

Charities and the third sector

Frequently handling sensitive beneficiary data with minimal IT support, and increasingly asked security questions by funders as a grant condition. We keep this work proportionate and will tell you where free NCSC guidance is genuinely sufficient rather than charging you to restate it.

Agriculture and rural business

Farm management platforms, environmental and livestock monitoring, automated processing, and the payment and subsidy systems around them. Digital dependency has grown considerably faster than security attention, and this sector is materially under-served.

Where to start

For most Shropshire organisations, in order: get Cyber Essentials, because it addresses the attacks that actually happen and answers most assurance questions. Test your external perimeter, because that is what an opportunistic attacker sees. Then, if you have a web application handling anything sensitive, test it properly.

Penetration testing in Shropshire

Shropshire's business base is unusually spread out: Telford's industrial estates and the MoD logistics presence at one end, market towns full of professional firms and agricultural businesses at the other, and very little in between. That geography matters here, because a lot of Shropshire organisations sit on rural connections with consumer-grade equipment and no local IT support to call on. Solusec is based at Albrighton in the county, so this is the one region where we can be on site the same day without it costing you anything in travel.

Testing requirements here usually arrive through one of three routes: a tender asking for a recent independent test report, an insurer asking at renewal, or a customer's security questionnaire. The detail that matters most is who holds the accreditation. If the requirement names CREST, check your provider holds it at company level rather than relying on an individual certification, because the wording in proposals is sometimes deliberately blurred.

What we see most often in Shropshire

  • Rural sites on consumer broadband with a router that has not been touched since installation
  • Businesses with no internal IT function and an outsourced provider seen twice a year
  • Defence and logistics supply chain organisations around Telford facing flow-down requirements

None of these is unusual and none of them is a reason to put the work off. They are simply the things worth checking before you commit to a date. If you want more detail, see what a penetration test costs.

Talk to us about testing

Tell us what you need looked at and we will tell you what the work actually involves, what it costs and when we can do it. CREST accredited, and the testing is done by the person you speak to.

Your details are handled by a real person, never fed into AI.

Common questions

Do you only work in Shropshire?

No: we work across the UK and internationally, and most testing is delivered remotely. We work remotely first, which suits most businesses, and being based here means Shropshire clients can still get onsite work quickly where it genuinely helps.

We are very small. Will you work with us?

Yes. A significant proportion of our clients are small businesses, schools and charities. We scope to what you actually need, which is sometimes considerably less than expected, and we will say so when that is the case.

Is there local support available?

The West Midlands Cyber Resilience Centre offers free and low-cost support to regional organisations, and the NCSC publishes genuinely good free guidance for small organisations, schools and charities. We will point you at those where they meet your need rather than charging for the same thing.

What is the single most useful thing we could do?

Multi-factor authentication on email and any remote access, universally, with no exceptions for senior staff. It is free or near-free on most platforms and prevents the largest single category of incidents we see. Then tested, offline backups.

Penetration testing for Shropshire organisations

Testing requirements in Shropshire usually arrive through defence and logistics flow-down around Telford, and public sector or grant conditions elsewhere. Given Telford's industrial estates and MoD logistics presence at one end, and market towns full of professional, agricultural and engineering firms at the other, with very little in between, the scope is most often a web application, an external infrastructure range, or both together where a customer has asked for evidence covering everything they can see.

The day count is driven mostly by how many user roles an application has and how much genuinely distinct functionality sits behind them, not by page count. We scope on a call rather than through a form, and the quote is fixed for the scope agreed. Shropshire is our home county: we are based at Albrighton, so on-site work here costs you nothing in travel.

Where a Shropshire requirement names CREST, check the provider holds accreditation at company level rather than relying on an individual certification: ours is verifiable on the CREST marketplace. See what a penetration test costs for ranges by test type.

Related

Local, accredited, and straight with you

Scoping conversations are free and there is no sales team to get past. Tell us what you're dealing with and we'll tell you honestly what you need.