$ sd --services

Services

Seven kinds of work, each scoped in writing before it starts. The technical detail sits in the blocks marked for the technical reader.

--infrastructure

Infrastructure

Servers, storage, Microsoft 365 and backups, set up so they keep working when nobody is watching.

I size and build servers, move email and files into Microsoft 365 or Google Workspace, and set up backups with a separate copy and a scheduled restore test. Admin accounts, licences and diagrams are registered in your name.

You getA system diagram, an admin-account register and the date of the last successful restore.

For the technical reader

Hyper-V and KVM hosts, Windows Server and Linux, Active Directory with Entra ID, off-site backup copies, restore tests logged and dated.

--networks

Networks

Firewalls, Wi-Fi and links between buildings, for the office, the shop and the yard.

I configure firewalls from a written baseline, keep guest Wi-Fi apart from business devices, give staff VPN access with multi-factor sign-in, and link sites together. Every firewall rule has its reason written beside it.

You getA network diagram, a firewall rule list with a reason for each rule, and Wi-Fi coverage notes for the shop floor.

For the technical reader

pfSense and WatchGuard firewalls, VLANs, WireGuard and IPsec site-to-site tunnels, DNS filtering.

--security

Security and EDR consulting

Email that cannot be spoofed, sign-ins that need more than a password, and endpoint detection that somebody reads.

I move SPF, DKIM and DMARC to enforcement, turn on multi-factor sign-in for every account, and help you choose endpoint detection and response (EDR) that fits your insurer and your budget. For each product, I write down what it detects, what it stops and what it only reports.

You getAn email-authentication report, a list of every account with its sign-in method, and a written EDR recommendation with at least one alternative.

For the technical reader

DMARC aggregate reports, conditional access, Cisco Duo, Sophos Central, Microsoft Defender, Sigma rules.

--rmm

RMM consulting

Remote monitoring and management, chosen, configured and tuned so that an alert means something.

I help you choose an RMM tool or get more from the one you have: patch policies, alert thresholds, remote access that needs approval, and an inventory you can trust. If an outside provider runs your RMM, I can review its setup for you.

You getA patch policy, an alert list with an owner for each alert, and a remote-access policy.

For the technical reader

Patch ageing against OSV data, alert throttling, scripted remediation, MeshCentral remote desktop.

--websites

Websites, for existing clients

Hosting, business email and yearly care for the websites I already look after.

For the sites I built, I keep the domain, DNS, certificates, business email and nightly backups current, and make the changes you ask for. For a new website, I recommend a provider that fits and explain why in writing.

You getThe domain and the files in your name, email that authenticates, and a yearly care note.

For the technical reader

nginx, certificates renewed by machine, SPF, DKIM and DMARC, nightly off-site backups.

--private-ai

AI on your own hardware

Language models that run on hardware you own, so prompts and files stay in the building.

I size a model server, install open-weight models, connect them to the documents you choose (read-only by default), and log every request. Where a hosted model fits better, I say so and write its data terms into the plan.

You getA sizing note, an access policy and one pilot workflow, scoped in writing first.

For the technical reader

Ollama, open-weight models from 7B to 35B parameters, retrieval over a read-only share, approval gates on anything that writes.

--systems

Business-systems advice

Quotes, scheduling, job costing, invoices and the books: which software fits, and what it costs to run.

When software is the answer, I lay out three options: keep and connect what you have, buy a product that fits, or build what does not exist yet. Each comes with its cost to run, not just its price to start.

You getA fit memo with the problem, the three options and a three-year cost to run for each, the risks and my recommendation. Your choice is recorded on it.

I do not sell software of my own. If a vendor would pay me a referral fee, I disclose it in writing before you decide.

For the technical reader

Export tests before any move, API and webhook mapping, accounting links, migration dry runs.

Written for the trades

IT for trades

Every service above is written for trades and contracting businesses: crew phones that can be wiped when lost, job photos that reach the office, shop Wi-Fi that reaches the bay, and quotes that become invoices without retyping.

Written for HVAC, plumbing, electrical, flooring, roofing, renovation and mechanical contractors.

Start with a free IT check-up

About an hour, on site or remote. I look and change nothing. You get a written plan in plain language, with the three things I would do first.

Book a free IT check-up