About Dettogni
One operator.
Full accountability.
Dettogni exists because most businesses outsource the work but keep all the risk. I built it to close that gap: genuine technical depth and real operational accountability.
I am a Security Engineer with over fifteen years of experience across cloud security, identity, endpoint, and platform operations. I have spent that time inside organisations large enough to understand enterprise-grade risk, and close enough to the business to know how to communicate it in terms that matter to operators and owners, not just security teams.
My background spans Microsoft Azure, Entra ID, Microsoft Defender for Endpoint, and governance frameworks including NIST CSF and CIS Controls. I have built security programmes from scratch, taken ownership of vulnerability management governance, integrated security controls into CI/CD pipelines, and acted as security design authority on production systems.
For clients, that means Dettogni is not guessing, outsourcing or escalating blindly. The person responsible for the website also understands the infrastructure, identity, exposure, recovery and operational risk around it.
Dettogni is a deliberate application of that depth to a specific, underserved problem: business-critical websites operated by organisations that cannot afford the uncertainty of not knowing who is accountable when something goes wrong.
I work with a maximum of 35 clients. That number is not a marketing constraint. It is the operational ceiling at which I can maintain the standard I promise. Every client gets the same human, the same depth of understanding, and the same accountability.
The website work
Websites are the
product. Security is
the standard behind it.
Dettogni builds and operates websites for professional businesses. Static architecture with no database and no plugin surface, held in version control, deployed on edge infrastructure, and measured against real performance budgets. The result is a site that loads fast, has no CMS to compromise, and recovers in seconds.
The work does not stop at launch. Retained clients receive continuous monthly work against the site: new service pages, project and case study pages, content updates, and on-site search structure. Over the term, the site compounds into a search asset built on real services and real project work, not paid advertising.
The security background is not a separate service. It is the standard the website work is held to. The person writing your project pages is the same person who designed the infrastructure, controls the DNS, and answers when something breaks.
Technical depth.
Not just experience.
The advisory and operational work Dettogni delivers is grounded in genuine technical breadth across cloud, identity, endpoint, and governance. This is not generalist IT support. It is engineer-level security applied to the specific risk profile of externally facing websites and business-critical infrastructure.
Security Architecture
& Governance
- Security architecture and control-plane design
- Risk-based prioritisation and trade-off analysis
- Governance models that survive day-to-day operations
- Explicit risk acceptance and decision frameworks
- Security control maturity and drift assessment
- Multi-year security posture planning
Cloud & Identity
Security
- Identity authority boundaries and access control design
- Authentication enforcement and blast‑radius reduction
- Privileged access exposure and lifecycle governance
- Control effectiveness across cloud environments
- Identity‑driven attack paths and failure scenarios
- Alignment between identity design and operational reality
Threat & Vulnerability
Management
- Vulnerability discovery, prioritisation, and lifecycle governance
- Risk‑based remediation planning
- Dependency and supply‑chain exposure analysis
- Signal‑to‑noise reduction in security findings
- Executive‑level risk articulation and reporting
- External exposure and attack‑surface reasoning
Endpoint, Platform
& Automation
- Endpoint and platform hardening strategy
- Configuration consistency and baseline integrity
- Automation used to enforce intent, not convenience
- Detection coverage vs actual response capability
- Operational security controls under failure conditions
- Platform behaviour during incidents and recovery
Why this exists
Built on a belief
the industry keeps
getting wrong.
After over fifteen years inside organisations managing real operational risk, I kept seeing the same pattern: businesses investing in tools, outsourcing tasks, and signing contracts, and still having no clear answer to the question of who was actually accountable when something went wrong.
Dettogni is my answer to that problem. A small, deliberately constrained operation built on human judgement, genuine technical depth, and clear accountability. Nothing more, nothing less.
Good operational work is mostly invisible.
Much of the best operational work happens before failure is visible. The measure is not constant activity. It is whether risk is reduced, failure is contained, and recovery is understood.
Responsibility matters more than tooling.
The security industry sells tools as a substitute for accountability. I use tools to support judgement, not replace it.
Incidents should be handled deliberately.
Calm, informed, methodical. Every incident I manage involves a human who already understands the system. That is not an accident. It is the design.
Clarity beats reassurance.
Clients deserve honest, clear information about what happened and what it means, not vague reassurance that avoids the operational reality.
Trust is earned through consistency, not promises.
I do not make promises about response times, uptime targets, or guarantees I cannot keep. I make commitments about accountability, and I keep them.
By design
Deliberately small.
Deliberately good.
The client ceiling is not a growth phase. It is the model. A solo operator running a judgement-led, accountability-heavy service has a real capacity constraint, and pretending otherwise leads to the exact failures Dettogni was built to prevent.
Every number here is a structural decision, not a marketing position.
Start the conversation
20 minutes.
No obligation.
Real answers.
A discovery call is how I determine whether Dettogni is the right fit, in both directions. I will ask about your website, your operational dependencies, and what risk looks like for your business.
You will leave with a clear understanding of whether we should work together, and if not, why not. That clarity is the point.
Milton Keynes, United Kingdom · Remote engagements available nationwide