Practical questions.
Plain answers.

Yes. We design and develop mobile apps, websites, web applications and bespoke software. We can also connect them to your business systems. We agree the platforms, features and release requirements around what your users and business need.

No. Tell us what you want to achieve and who it is for. We can help shape the requirements, explore the technical approach and agree a practical starting point. The first conversation costs nothing; any paid discovery work is scoped and agreed before it begins.

Yes. We can discuss new features, modernisation, integrations and workflow automation. We first review the existing systems, access and dependencies so the scope reflects what is possible and what needs further investigation.

Yes. Maintenance, support and further development can be agreed as part of the project or separately. We define the systems covered, responsibilities, availability and response arrangements with you.

Yes. We agree responsibilities, access and the change process with you, so the work fits the people and systems already in place. You can bring us in alongside your existing provider.

Yes. We can review a proposal, architecture or technical problem as a defined piece of work. We agree what you want assessed and the output you need before starting.

Yes. We can discuss additional capacity for a project or a specific task, including development, integration and technical support. Responsibilities and availability are agreed for the engagement.

Yes. You can describe the problem through our contact page first. The initial conversation costs nothing; you do not need to upload sensitive information to start it.

We first establish the scope and dependencies, then agree the proposed work and price with you. If further investigation is needed before we can quote implementation, that is discussed separately.

No. Sending your report starts a conversation about the work. Scope and price are agreed before paid implementation begins.

Care and maintenance can be agreed alongside project work or as a separate engagement. The systems covered, support hours and response arrangements are defined in the scope.

Our specialism is remediating findings from a penetration test. We implement fixes and support verification and retesting; the scope of any independent retest should be agreed with your testing provider.

The remediation flow asks you to verify your email and sign a mutual NDA before uploading findings. Uploaded files are encrypted at rest and access-controlled.

We explain the constraint, record what remains and discuss the options. A partial fix or a temporary mitigation is identified as such.

The agreed handover includes a record of changes, verification evidence and any remaining limitations or recommended next steps. This supports review and retesting by your team and testing provider.

The Danzell question set (Cyber Essentials version 3.3) applies to assessments started from 26 April 2026. Multi-factor authentication on every cloud service that offers it, and installing high-risk and critical updates within 14 days, are now automatic fails rather than non-compliances. Cloud services are formally defined and cannot be excluded from scope, all internet-connected devices are in scope by default, passkeys and FIDO2 security keys are recognised as multi-factor authentication in their own right, and new questions ask for legal entities, addresses and the number of people with access to business data.

Every user account on every cloud service that supports multi-factor authentication must have it enabled: email, file storage, accounting, HR, CRM and administration portals included. An authenticator app, a passkey or a FIDO2 security key all qualify. Administrators should use separate accounts for admin work, protected by something stronger than SMS codes. We can plan and carry out the rollout with your team or IT provider.

Cyber Essentials is a verified self-assessment against the five controls, signed off by a director. Cyber Essentials Plus covers the same requirements but adds an independent technical audit of a sample of your devices and cloud services by an assessor. Readiness work for both covers the same ground; Plus benefits from a dry run of the technical checks first.

No. Certification is carried out by a licensed certification body under IASME. We help you understand the requirements, close the gaps and gather the evidence, and can support you through the application. Our five-minute readiness check at remedynine.com/cyber-essentials/ is indicative only and is not an assessment.