"Moving to E5 has been really good from a security point of view... Now we can get a holistic view of what’s going on, which helps us to make changes and recommendations for future plans."
IT Service Manager
Ian Harkess
Trusted by industry leaders
Kickstart Your FastTrack Journey
Fill out the short form below to express your interest in our FastTrack programme, and we’ll be in touch soon.
Please note: A minimum of 150 enterprise licenses is required for FastTrack eligibility.
“We needed to find solutions to a variety of issues whilst being a complex business, operating in a 24/7 environment. Stripe OLT listened and understood immediately the challenges we faced.”
IT Operations Manager
Simon Darley
Trusted by industry leaders
Let's Talk
Call us on one of the numbers below, we cover the whole of the UK, so call the nearest office.
“We needed to find solutions to a variety of issues whilst being a complex business, operating in a 24/7 environment. Stripe OLT listened and understood immediately the challenges we faced.”
You will walk away from this session knowing why it is important to employ the right individual rather than the CV, and how adopting this approach can drastically improve how a business responds to and manages security threats, company-wide.
Human error is the number one cause of a security breach...
Our Head of Cyber Security, Ryan Pullen, joins Enterprise Security Weekly to discuss why a deep-rooted cyber security culture is crucial, and how it goes as far back as the hiring process…
10 years ago, a typical hiring process consisted of working your way through a checklist, hiring individuals based solely on a CV. Today, the ‘Simon Sinek’ culture is gaining more prevalence, with employers realizing that hiring the right person, rather than the CV, can have immeasurable benefits for business.
Ryan will talk about why this is particularly true within the cyber security sphere, and why business leaders should follow this particular ‘Simon Sinek’ strategy to build a successful security operation, and secure business, starting directly with the humans that run it.
About Ryan Pullen
Ryan Pullen has gained extensive experience over his 10 years in cyber security, delivering scalable, bespoke Cyber Security services to a wide range of clients.
Holding a varied set of certifications in multiple disciplines, Ryan has a proven track record of understanding clients’ needs; being able to design, build and deliver highly technical bespoke solutions. This includes in areas such as, incident response, offensive security, open-source intelligence and cyber consultancy. He’s a certified cyber security trainer, and has experience across a broad range of technical disciplines, in markets including: Corporate, ICS, Leisure, Finance, Law, Aviation, HNW and high-profile, private clients.
At Stripe OLT, Ryan is Head of Cyber Security, leading our high-performing cyber security teams to help deliver cutting-edge Microsoft security solutions.
Modern Business Email Compromise (BEC) attacks often rely on compromised mailboxes rather than obvious account takeovers. In this article, we'll explore the tactics observed in recent investigations, the signs defenders should look for and practical steps organisations can take to reduce risk.
Remote access technologies have become a staple of modern business operations, enabling secure connectivity for distributed workforces and third-party suppliers. But as cyber defenders have learnt time and time again, threat actors are often quick to adopt the same legitimate tools organisations rely on every day.
Mesh VPN platforms such as Tailscale, Headscale, ZeroTier, Nebula and Netmaker provide secure, encrypted connectivity between devices. While valuable for legitimate remote access, those same capabilities can also be abused by attackers seeking persistent access to compromised systems.
The 2026 Cyber Threat Report explores how attackers are exploiting people, identities and trust to bypass traditional defences, helping UK SME leaders understand the risks they need to prioritise in 2026.
Canary Tokens offer a practical way to strengthen detection and visibility. In this article, we'll explore how they work, where they add value, and how organisations can use them as part of a wider security strategy.
Our SOC team recently uncovered hidden surveillance functionality within a trusted browser extension, including capabilities designed to collect browsing activity, generate unique identifiers and communicate with external infrastructure.
This article breaks down CVE-2026-32201, a zero-day spoofing vulnerability in Microsoft SharePoint Server. You’ll learn how the flaw works, why “spoofing” is more dangerous than it sounds, and what your team needs to do right now if on-premises SharePoint is part of your environment.
This report provides a detailed analysis of OAuth token abuse, focusing on how threat actors bypass defensive security measures to gain unauthorised access.
This Expert Intel summarises the key cyber security themes from CYBERUK 2026, exploring how AI is accelerating attacker capability, why identity remains the primary control gap, and what UK based organisations should prioritise to strengthen detection, response, and supply chain resilience.
Microsoft is reshaping its licensing strategy with the introduction of Microsoft 365 E7, new pricing changes, continued Teams separation, and additional security and AI functionality being bundled into existing licences. For organisations investing in AI, automation, security, and compliance, these changes could significantly affect licensing costs, procurement decisions, and long-term Microsoft 365 strategy.
This report provides an in‑depth analysis of the Tycoon2FA phishing‑as‑a‑service platform, including how it bypasses MFA and harvests credentials through session authentication cookies. In addition, the report outlines recommended mitigation strategies to help prevent and detect this phishing technique.
In this intel we set out to understand the changing landscape of trust, in a digital world where AI-generated code is permeating the software supply chain at scale and AI-enabled phishing is making adversarial infrastructure harder than ever to distinguish from the real thing.
This website uses cookies. By using this site you agree to our use of cookies. We use cookies to enhance your experience. To understand the specific cookies we use and how we handle your data, see our Cookie Policy, Privacy Policy and Terms & Conditions. Manage your preferences at any time by clicking the 'View Preferences' button.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.