Solutions / Municipalities & Government
Public services can't take a week off.
A ransomware event in a town of nine thousand doesn't make national news. It just means no permits, no payments, no dispatch records and a council meeting where someone has to explain it. We work with the people who'd be in that room — before it happens.
- CCCS approved
- National Defence endorsed
- Canadian owned
Sound familiar
You already know where the gaps are.
- Water and wastewater controls sit on a network someone connected years ago.
- Two people run all of IT, and security is the fourth item on both job descriptions.
- A neighbouring municipality got hit and council now wants to know if you're next.
- Your cyber insurance renewal came back with questions you can't answer honestly.
- The last assessment was a 180-page PDF that nobody has opened since.
- Procurement rules mean you need a defensible process, not a handshake.
How it works
Start with the free two weeks.
-
01
Clarity scan — no cost, two weeks
We map what's reachable from the internet, what's exposed in breach data, and what an attacker would try first. No installation, no disruption, no obligation at the end of it.
-
02
The three things that matter
You get one page: what's actually exploitable, ranked, in the language council speaks. Not a severity spreadsheet — a shortlist with owners and effort attached.
-
03
Test what actually matters
CCCS-approved penetration testing scoped to the systems that stop the town if they stop — controls, financials, dispatch, records — not to whatever is easiest to scan.
-
04
Keep watch, or hand it back
Managed detection and a fractional CISO if you want the load carried, or a remediation plan your own team can run. Both are real answers; we'll tell you which one you need.
What you get
Documents that survive a council meeting.
-
A council-ready one-pager
Plain English, no jargon, forwardable. What the risk is and what it costs to fix.
-
The operator's detail
Reproduction steps and remediation depth for whoever actually does the work.
-
Procurement-ready paperwork
Scope, methodology and pricing structured to clear an RFP or a sole-source justification.
-
Insurance and audit evidence
The attestation your renewal is asking for, backed by testing that was actually done.
Why us
Priced for a town, not for a bank.
Most firms quote a municipality using an enterprise rate card and then act surprised when the budget doesn't exist. We scope to the systems that carry public consequence and leave the rest, which is how a real engagement fits inside a real municipal budget.
Canadian owned and CCCS approved, so residency questions are answered before they're asked. And the work is done by the people whose names are on the report — no offshore subcontractor discovering your water system for the first time.
Two weeks, no cost, no obligation.
Send us the domain. We'll show you what an attacker sees from the outside and tell you plainly whether you have a problem worth spending money on.