PALETTETECH
Portfolio

Work We Can Talk About

Client names stay confidential. The problems, the approach and the outcomes do not.

Healthcare

HIPAA Readiness For A Regional Provider

Mapped a fragmented control environment across twelve clinics, closed 43 findings in four months, and carried the client through a clean external assessment.

  • GRC
  • HIPAA
  • Remediation
Financial Services

Red Team Against A Payments Platform

An assumed-breach exercise reached domain administrator in nine days through a chain of misconfigured service accounts. All paths were closed and retested within the quarter.

  • Red Team
  • Active Directory
  • Retest
Manufacturing

Segmentation For A Multi-Site OT Network

Replaced a flat plant network with a segmented architecture separating operational technology from corporate IT, with monitoring at every boundary.

  • Network
  • OT/ICS
  • Architecture
SaaS

SOC 2 Type II In Under A Year

Built the policy set, evidence pipeline and control ownership model from scratch, then ran the observation window alongside the client’s engineering team.

  • SOC 2
  • Audit
  • Automation
Legal

Phishing Resilience Programme

Continuous simulation and coaching cut click-through from 31% to under 4% across eighteen months, with reporting rates rising in step.

  • Awareness
  • Simulation
  • Metrics
Public Sector

Cloud Migration Under NIST 800-171

Designed and delivered a compliant landing zone, migrated 60 workloads, and left continuous posture monitoring in place for the in-house team.

  • Cloud
  • NIST
  • Migration
Need Help?

Book a Consultation

Tell us what is keeping you up at night — an audit deadline, a cloud migration, a board asking hard questions. We will tell you honestly whether we can help, and what it takes.

Talk to the right desk