Services

IT services for startups and growing businesses

Firewalls and secure networks, custom software, websites and ERP, plus the IT around them: set up from Day 1, kept running, made cheaper and kept secure. We use enterprise tools where they fit and open source where it is better, and you work directly with the engineer who does the work.

What you get with every project

  • A written scope and estimate before any work starts
  • Direct access to the engineer who does the work
  • Documentation and runbooks you keep, with admin access handed over securely at the end
  • No lock-in: nothing is held back behind us
1 · Protect your network

Firewall & Network Security

Firewalls and secure access for offices, branches and remote staff. We choose the firewall with you, set it up, and write down how it is configured, so you are never dependent on us to understand it.

Firewall selection and setup

Choosing a firewall that fits your size and budget, then installing and configuring it, with the rules written down.

  • A vendor-neutral choice, for example pfSense or Fortinet
  • Rules and settings documented
  • Cut-over planned to avoid business-hours downtime

Firewall & VPN

pfSense or Fortinet firewalls, WireGuard VPN for remote staff and branches, and separate networks for guests and devices so a problem in one place stays there.

  • Firewall rules and guest Wi-Fi separation
  • Encrypted WireGuard access for remote staff
  • Optional intrusion detection (Suricata)

Firewall review

A look at the firewall you already have: its rules, the services it exposes and its settings, with a plain-language list of what to fix first.

  • Review of rules, open ports and access
  • Findings written in plain language
  • Changes agreed with you before anything is touched
2 · Build your network

Networking Solutions

Wired and wireless networks for offices and branches, and the links between them: planned first, set up in stages, tested and documented.

Office and branch networks

Design and setup of the wired and Wi-Fi network for an office or branch: switching, Wi-Fi, addressing and internet links, with guests and devices kept on their own networks.

  • A written network plan before any change
  • Wired and Wi-Fi set up for your layout
  • Guest and device networks kept separate

Network monitoring

See what is happening on your network: uptime, capacity and traffic, with Zabbix and ntopng.

  • Uptime and capacity alerts
  • Traffic visibility: who and what uses the bandwidth
  • Alerts reviewed during support hours

Network monitoring follows the support terms: alerts are reviewed during support hours.

3 · Custom software

Application Development

Custom applications built around how your business works, such as internal tools, dashboards and customer portals.

What we cover

  • Working out what the application must do, and writing it down
  • Design and build, in stages and tested as we go
  • Deployment and handover, with documentation
  • Support after launch, agreed in writing

The exact scope, technology and timeline are agreed in writing for each project.

How it starts

Every project starts the same way: a free 30-minute call, then a written scope and estimate before any work begins. You deal directly with the engineer who does the work.

4 · Websites, stores & ERP

Websites, E-commerce & ERP

Business websites, online stores and ERP systems, set up around your processes and handed over so your team can run them.

Business websites

A website that explains what you do and brings in enquiries, built so your team can update it.

  • Structure and content planned with you
  • Enquiry forms that reach your inbox
  • Handover so your team can update it

E-commerce

An online store for selling your products: catalogue, checkout and order handling, set up for how you sell.

  • Product catalogue and checkout
  • Payment and delivery options set up with you
  • Orders handled in one place

ERP

An ERP system configured around your processes, so sales, stock and accounts work from the same data.

  • Your processes mapped before setup
  • Configuration documented
  • Handover so your team can run it

Scope, platform and price are agreed in writing before work starts.

5 · For new teams

Startup Launch Pack: Day-1 IT setup

For founders and small teams who want email, devices, network and backups set up properly from the start, without buying more than they need. Pricing is for a team of up to 10; larger teams are quoted after a call.

What is included

  • Domain and business email (Google Workspace or Microsoft 365)
  • Device security: encryption, updates and screen lock on your laptops
  • A password manager and two-step sign-in for the team
  • Wi-Fi and firewall set up for your office or home setup
  • Backups, with a restore test
  • Access on and offboarding: a checklist and the accounts set up for it

What is not included

  • Hardware: you provide the laptops, routers and other equipment
  • Ongoing support after the project (see the IT Retainer)
  • Legal advice, including your legal duties under the DPDP Act
  • Custom software, websites and ERP: separate projects, see Application Development and Websites, E-commerce & ERP

Terms at a glance

Hardware
You provide the hardware (laptops, routers and so on).
Software subscriptions
Billed directly by the vendors (for example Google, Microsoft or a password manager) and not part of our fee.

Scope and price are agreed in writing before work starts.

6 · Ongoing help

IT Retainer: your part-time IT head

For teams that do not want to hire a full-time IT person yet. The same engineer looks after your IT every month and helps you decide what to buy, change or stop paying for.

What a retainer typically covers

  • Help with everyday IT requests during support hours
  • Staff joining and leaving: accounts, devices and access
  • Updates and patches, and a check that backups still restore
  • Review of security alerts and risks
  • Advice on tools, licences and budgets as you grow
  • A short monthly summary of what was done and what is coming up

The exact scope is agreed in writing for each client.

How support and monitoring work

  • Business-hours support, with first response within 24 business hours.
  • We do not run a 24x7 security operations centre. Alerts are reviewed during support hours.

Exact hours, response times and what happens to urgent alerts are written into your agreement before work starts.

By team size

All tiers share the support terms above. Each tier shows only what is different.

2–10 people

A first team that needs someone to call.

11–25 people

More laptops, more tools, more joiners and leavers.

26–50 people

A growing company that needs planning as well as support.

Final price is confirmed after a free call, based on your team size and tools.

7 · For existing setups

Cost Optimization & Migration

For businesses already paying for servers, licences or cloud. We review what you run, show where you may be overpaying, and move you in phases with a rollback plan. Savings depend on your setup, so we estimate them with you before any work starts.

VMware to Proxmox migration

Move off VMware ESXi without a full rebuild: a Proxmox VE cluster with live-migration high availability, migrated in phases with a tested rollback plan. Licensing can be significantly lower for suitable setups.

  • Clustered Proxmox VE with Ceph or ZFS storage
  • Proxmox Backup Server for backups
  • Phased migration, planned to avoid business-hours downtime

Splunk to Wazuh

Replace per-gigabyte log licensing with Wazuh for threat detection, file-integrity monitoring and endpoint logs. How it is run day to day is described under Security & Monitoring.

  • Log and endpoint coverage mapped before the move
  • Alert rules rebuilt and tuned with you
  • Old and new running side by side until you are comfortable

Licence and cloud-bill review

Compare what you pay for Microsoft 365, Google Workspace, Azure or AWS with what you actually use, and see where a self-hosted option such as Nextcloud makes sense.

  • Right-sizing of licences and cloud resources
  • Nextcloud as a private alternative where it fits
  • Identity integration (LDAP or Active Directory)

Typical migration timeline: around four weeks for a setup of 3–10 servers. Larger or more complex environments take longer, and we confirm the timeline after the discovery phase.

8 · Stay protected

Security Setup & Monitoring

Practical protection for small teams: know when something is wrong, keep an attacker from moving around your network, and be able to restore from a backup.

Managed Wazuh SIEM

Central monitoring of the endpoints and logs it covers, with file-integrity monitoring and vulnerability detection. We agree with you which alerts matter and who acts on them.

  • Threat detection and active-response rules
  • Host intrusion detection and vulnerability scanning
  • Alert rules agreed with you and reviewed during support hours

Backup & recovery

Backup copies designed to survive ransomware, on Proxmox Backup Server or Veeam, with restore tests and recovery targets (RPO and RTO) set for each system.

  • Immutable or offline backup copies
  • Regular restore tests
  • Recovery targets agreed per system

Monitoring follows the support terms above. We do not run a 24x7 security operations centre.

Enterprise tools, when they are the right call

We recommend Microsoft 365, Google Workspace, Fortinet, Veeam, AWS or Azure when they fit your team and budget, and open source (Proxmox, Wazuh, pfSense, Nextcloud, WireGuard, Zabbix) when it is better for you. The decision table on our home page shows how we choose.

We work with licences you already own.

How We Work

How a Project Actually Runs

A clear four-phase approach. The timings shown are typical for a 3–10 server setup; smaller setups are quicker and larger ones take longer. Software, website and ERP projects follow the same steps but are scoped and timed individually.

01

Discovery & Mapping

Weeks 1–2
  • Audit of what you run today: devices, accounts, servers and licences
  • Baseline of performance and current costs
  • Security and backup gaps worth fixing first
  • An estimate of what could be saved or simplified
Deliverables: Audit summary, gap list and a written scope with an estimate.
02

Design & Proof of Concept

Weeks 2–3
  • Target design for email, devices, network, servers and backups
  • Tool choices explained, enterprise and open source side by side
  • A test of risky steps in an isolated lab before production
Deliverables: Design document and a tested proof of concept.
03

Planned Setup or Migration

Weeks 3–4
  • Staging, then phased cutover from non-critical to critical systems
  • Monitoring agents and alert rules switched on and tuned
  • A rollback plan for every phase
  • Handover session for your team
Deliverables: Production setup, runbooks, and admin access handed over securely.
04

Support & Monitoring

Ongoing
  • Support during the agreed support hours
  • Monitoring and alert review under the agreed support terms
  • Backup restore checks
Deliverables: A summary of work done, as agreed in your support terms.
Scope before rollout We agree design, risk and cost in writing before we change anything.
Documentation and handover Every project is designed to leave your team more capable, not more dependent.
Security-minded approach Least privilege, tested backups and visibility are part of every setup conversation.
First response within 24 business hours A useful first reply with scope direction, not just a callback promise.
FAQ

Questions We Hear Before Every Project

Short answers on the Launch Pack, retainers, migration and support.

What is in the Startup Launch Pack?

Domain and business email, device security, a password manager with two-step sign-in, Wi-Fi and firewall, backups with a restore test, and access on and offboarding. You provide the hardware, and software subscriptions are billed directly by the vendors.

Do I need an IT retainer after the setup?

Not always. A very small team can run on a good setup and call us when needed. A retainer makes sense when you want the same engineer to handle everyday requests, joiners and leavers, updates and backup checks every month.

Can Proxmox VE replace VMware vSphere / ESXi?

For many small and mid-sized setups, yes. Proxmox VE provides clustering, KVM virtualization, containers, software-defined storage (Ceph or ZFS), live migration and Proxmox Backup Server support, and can mean significantly lower licensing cost. We check your workloads first, because some environments depend on VMware-specific features.

How does Wazuh compare to Splunk for small teams?

Wazuh is an open-source security platform that combines endpoint detection, log analysis, vulnerability detection and file-integrity monitoring without per-gigabyte ingestion pricing. Splunk offers deeper analytics for very large log volumes, if you have the budget and the staff to run it.

How long does a migration take, and will there be downtime?

For a setup of 3–10 servers a migration typically takes around four weeks. We plan it in phases with a proof of concept and off-peak cutovers, aiming to avoid business-hours downtime. We cannot promise there will be no downtime, and larger environments take longer.

What support do you provide after go-live?

Support is agreed in writing for each project, with first response within 24 business hours. We provide business-hours support and do not run a 24x7 security operations centre. JwithKP is a new, founder-led practice, so you work directly with the engineer who built your environment.

Can you review the firewall or network we already have?

Yes. We look at the rules, the services it exposes and its settings, and give you a plain-language list of what to fix first. Nothing is changed until you have agreed the changes with us. Whether you need a new firewall is a separate decision, and we will say plainly if your current one is fine.

What should I tell you before a firewall or network project?

Roughly how many people and sites you have, how you connect to the internet, what the network and firewall look like today, and what is not working. We ask for the rest on the free call.

Do you build custom software, websites and ERP?

Yes. Application development, business websites, online stores and ERP are separate projects from IT setup. Each begins with a free call and a written scope and estimate, is built in stages and tested with you, and is handed over with documentation. The platform and technology are chosen with you and agreed in writing before work starts.

Get a Custom Quote

Not sure where to start? Tell us about your team first

Most teams do not need every service at once. Tell us what you are starting or what hurts most, whether that is setup, running costs, migration risk or security, and we will scope a focused, phased plan with a timeline and a rough budget range.

Thank you. Your quote request was submitted successfully.

We only use these details to reply with scope direction, budget guidance and the next recommended step. See our Privacy Policy.

Learn Before You Decide

Compare options and plan your setup with more clarity before starting a project.

Want a recommendation before you commit?

Tell us about your team, goals and budget. We will narrow down the right option, estimate a budget range, and outline a realistic plan, on a free 30-minute call.

Call Us Book a free call