Cybersecurity, identity and AI security for teams that can’t afford to get it wrong.
XKONSULTING is a boutique security firm helping SMBs, mid-market companies and corporate teams in Portugal and the US secure Microsoft 365, cloud, identities, AI tools and people — through practical cybersecurity, governance and training.
Identity & access hardenedSecured
Conditional access enforcedActive
Data & permissions reviewedReady
Phishing & AI trainingRunning
Modern risk doesn’t come from one place
Most incidents start with a person, an identity or a misconfigured cloud tenant — not exotic malware. We focus on the risks that actually hit SMBs and corporate teams.
Phishing & account takeover
Credential theft and business email compromise targeting your people.
Microsoft 365 misconfiguration
Excessive permissions, weak MFA and risky sharing across Teams, SharePoint and OneDrive.
Weak identity & access control
No conditional access, dormant accounts and unclear who can reach what.
Ungoverned AI use
Employees pasting sensitive data into ChatGPT, Copilot and Gemini without rules.
Compliance & audit pressure
NIS2, ISO 27001, GDPR and enterprise security questionnaires you can’t answer yet.
Operational downtime
Ransomware, untested backups and remote access risk that can stop the business.
Three pillars. One security partner.
We keep our public offer focused so you always know what we do best — while supporting infrastructure and cloud sit underneath as enabling capabilities.
Cloud & Identity Security
Secure Microsoft 365, Entra ID, MFA, conditional access, Defender, email, backup and remote access.
Explore pillarCyber & AI Governance
Assessments, policies, risk management, NIS2 & ISO 27001 readiness, AI governance and fractional CISO.
Explore pillarAwareness Training
Practical training on phishing, deepfakes, data protection and safe use of AI tools — for every team.
Explore pillarBuilt for organisations where security is critical
We work mainly with organisations where security, operational continuity, sensitive data, identity, AI and training really matter.
Your managed security partner
Beyond one-off projects, we run and monitor your Microsoft 365, identity and cloud security on an ongoing basis — with regular reporting and one accountable partner, so protection keeps pace with the threats.
Managed Microsoft 365 & Identity
Ongoing management, monitoring and tuning of Microsoft 365 security, identity and access.
Learn moreManaged Cloud & Infrastructure
Continuous cloud, backup, firewall, VPN and continuity for critical systems.
Learn moreCyber Governance / vCISO
Recurring risk, policy and incident-response leadership with executive reporting.
Learn moreAnnual Awareness Program
A year-round awareness program — campaigns, role-based sessions and reporting.
Learn moreEasy ways to get started
Clear, scoped engagements that are simple to understand and buy — and lead to a roadmap, not a sales pitch.
Cybersecurity Readiness Assessment
A clear picture of your security, risk, Microsoft 365, identities, backups and priorities.
Learn moreMicrosoft 365 Security Assessment
A focused review of Entra ID, MFA, Conditional Access, Defender, SharePoint, Teams and permissions.
Learn moreMicrosoft 365 Copilot Security Readiness
Prepare data, permissions, Purview and DLP for safe Copilot adoption — before you turn it on.
Learn moreCyber & AI Awareness Workshop
A high-impact entry workshop for staff, leadership or specific teams.
Learn moreA focused partner, not a generalist IT shop
We deliberately specialise. That means senior people, sharper advice and security that fits how your business actually works.
- Boutique & senior-led — you work with experienced practitioners, not a ticket queue.
- Microsoft-first — deep focus on Microsoft 365, Entra ID and the tools you already pay for.
- Practical, not theoretical — we deliver outcomes, roadmaps and fixes, not just reports.
- Transatlantic presence — supporting clients across Portugal and the United States.
- Security & AI together — we help you adopt AI safely instead of banning it.
Find out where you really stand
Book a free 30-minute Security Readiness Call. We’ll talk through your Microsoft 365, identities, AI use and priorities — and tell you the three things to fix first.