The security team growing businesses don’t have in-house
We help growing SMEs protect their systems and demonstrate security readiness to customers through practical improvements and ongoing security and GRC support.
Why an elephant?
Strength, memory and loyal protection. The elephant has carried those meanings through Sri Lankan heritage for centuries, and they are exactly what a growing business needs from its security partner.
The tusk is our promise: a strong, visible line of defence, pointed toward a stronger tomorrow. Blue for intelligence, green for protection, and a spark of lime for staying alert.
Three founders. Clear accountability.
Every engagement has a named technical, operations and client owner, with trained backups for each.
Nimesh De Silva
Owns technical discovery, architecture, hardening and testing scope, and peer-reviews every risky change before it reaches your systems.
Vishwa Basnagoda
Runs the duty roster, alert queue and incident coordination, and is accountable for service quality and awareness programmes.
Sathishka Punyasiri
Leads scoping, proposals, risk and evidence management, and the account reviews where you decide what happens next.
How we earn trust before we ask for it
Plain language first
Business consequences before acronyms. If a sentence needs a glossary, we rewrite it.
Scope you can read
Named systems, stated hours, measurable deliverables and published starting prices.
No guaranteed outcomes
We will never promise guaranteed compliance, certification or breach prevention.
Honest examples
Sample reports are labelled illustrative. Client names and quotes appear only with permission.
Our own security is part of what you're buying
We hold ourselves to the controls we recommend, and at the end of an engagement we hand back records, revoke access and confirm deletion in writing.
- Written authorisation and confidentiality terms before any access
- Managed company devices, MFA and named admin accounts
- A credential vault and least-privilege access, reviewed regularly
- Separate environments for each client
- Client evidence in restricted storage with agreed retention
- Peer review for risky changes, with rollback steps
- Client data never goes into public demos or unapproved AI tools
Start with the Health Check
Tell us which system your business can least afford to lose, or which customer review is coming up. We'll scope a fixed-fee check around it and send a one-page proposal within two working days.