Three decades of analysing attacks, responding to incidents and building security businesses, distilled into something more practical.
The 1990s
We started as a small group of cyber security professionals back in the late 1990s, before "cyber" was called cyber. Yes, some of us really are that old.
Back then, we were collecting firewall logs, analysing security events and working with threat intelligence long before it became an industry buzzword.
The 2000s
As our careers progressed, we all took slightly different paths across financial services, investment management, managed services and cyber security. Some of us worked inside investment firms, others built and ran MSPs and security businesses. One of us even disappeared off to New Zealand for a while.
The 2010s
Through years of incident response, we kept seeing the same story. Different organisations. Different technologies. Different attackers. But the same weaknesses causing the same breaches.
It became clear that much of the industry was focused on the wrong part of the problem. The industry has spent years building complicated security stacks designed around the idea that breaches can be completely prevented. The reality is very different.
2015
Many years later, over a beer, we decided to start a dedicated cyber security monitoring and incident response company together. We brought clients from our respective networks and grew the business with the focus on responding to what attackers were doing before they got where they wanted to go.
2021
We eventually sold the business to a cyber security PLC, expanding our reach into new industries and working with a much broader range of organisations. The customers changed, but the challenges didn't. During this time, we also met some exceptional people who would later join us on the next stage of our journey.
2024
After years of helping organisations respond to cyber attacks, we came to a simple conclusion: cyber security had become too complicated. So we started Thea. We wanted to take everything we'd learned from security monitoring, incident response and real-world attacks and build something more practical. Solutions that solve genuine problems without enterprise budgets, six-month projects or unnecessary complexity.
Start with a free conversation. We'll walk through your exposure and help you decide whether we're the right fit.