glacierr
get in touch

glacierr

focused cybersecurity

01security apps 02consultancy
book a first call
▼

·two things, done extremely well

we build security apps — and we consult.

We're not another platform trying to transform your SOC. We do two things, and they feed each other: focused tools that slot into the stack you already run, and consultant-led engagements across a single lifecycle. All fixed-fee, all on the hook.

arm · 01

security apps

Security Copilot agents, custom AI development, automation, and a continuous compliance portal. Productised tools, forged on real work — yours off the shelf.

copilot agents custom ai automation compliance portal
explore security apps → arm · 02

consultancy

Bespoke and off-the-shelf engagements across a single lifecycle — assess what's there, build what's missing, evolve as the threat surface moves. Consultant-led, fixed fee, start to finish.

assess build evolve fixed fee
see the three stages →

·where we fit

three sizes of security partner.
we're the third.

The big players are slow, layered and bill the clock. We sit in a new slot: lean, consultant-led, productising what we learn — high value without the delivery machine.

the big ones

built for slide-ware.

  • five-layer delivery models
  • juniors learning on your time
  • day rates, padded teams

larger boutiques

good people. slow process.

  • three-month engagement starts
  • swap-outs once under contract
  • still billing the clock

glacierr

apps + a team. fixed fee.

  • start in two weeks, not three months
  • the people who scope, deliver
  • tools battle-tested on real work

·the business case

what it adds up to.

The things every steering deck asks for — scoped, delivered and evidenced, not promised.

01

risk reduction

Security risk worked down across your technical and governance estate — gaps found, closed, and evidenced.

02

reduced costs

Technical consultancy and apps that cut waste — ingestion, licensing, manual effort — with the coverage impact shown before anything is switched off.

03

improved security posture

Your Microsoft estate tuned and measurably better configured — secure score, Purview, Defender, identity hygiene.

04

improved efficiency

Automation and AI take the repetitive work across your whole security practice — governance, compliance, technical, engineering — so hours go where judgement is needed.

05

legal & regulatory requirements

Ongoing visibility against your obligations — ISO 27001, GDPR and the rest — with audit-ready evidence for when the auditor comes asking.

06

outcomes

Value you keep — evidence, tooling and configuration that feed the next improvement, with us alongside whenever you want to go again.

arm · 01

security apps

productised tools, forged on real work — yours off the shelf.

security copilot agents custom ai development automation development continuous compliance portal

01what we build

four kinds of tool.

Each one began as a painful, high-friction problem on a real engagement. The ones that generalise become products — battle-tested before they ever reach your tenant.

tool · 01

security copilot agents

Microsoft Security Copilot agents, off-the-shelf or bespoke. Tuned to your tenant, transferred to you, yours after we leave — no recurring licence to us.

tool · 02

custom ai development

Bespoke AI built against a runbook you already trust — operator-shadowed, evaluated on your own incidents, shipped to production.

tool · 03

automation development

Logic Apps, Power Automate, Sentinel playbooks. The high-friction work that gets deprioritised until it causes a breach — kicked out of the backlog and into production.

tool · 04

glacierr glass · soon

Continuous compliance monitoring in a custom glacierr portal — live posture between engagements, not point-in-time. In build for annual-programme clients first.

·security apps · current and developing

Microsoft Security Copilot coming soon · microsoft security store

cost & usage analyst

Itemises Microsoft Sentinel ingestion and shows the cost decisions supported by your own workspace data.

what it reads

Workspace usage telemetry, licensing inputs, retention plans and query activity.

what it returns

Per-table cost, grant and tier modelling, spikes, connector failures and efficiency indicators.

explore the analyst →
workspace cost review
SecurityEvent itemised from workspace telemetry
Microsoft Security Copilot concept

identity application analyst

Reviews application identities, permissions, consent grants and activity to surface stale or over-privileged non-human identities.

focus

App registrations, service principals and managed identities.

output

Prioritised, reviewable identity findings.

early build

glacierr glass

Brings selected Microsoft posture signals into one reviewable view, beginning with Secure Score mapping.

starting point

Microsoft Secure Score signals and improvement actions.

output

A clearer view of posture movement between reviews.

explore security apps

arm · 02

consultancy

consultant-led, fixed fee — assess, build, evolve.

assess build evolve bespoke & off-the-shelf

02three stages, one loop

assess. build. evolve.

One lifecycle, three stages, every engagement fixed-fee. Assess what's there, build what's missing, evolve as the threat surface moves — then loop back. Bespoke or off-the-shelf.

stage · 01£28k+

assess

the look-hard part.

Framework readiness, DLP posture, SOC effectiveness, cost and technical audits. Come in narrow, look hard, leave the evidence pack.

nist 800-53dlpsoc review
read more →
stage · 02£18k+

build

the hands-on part.

Implementation, configuration, hardening. Sentinel cost, Purview, Defender, Copilot agents and automations — landed and evidenced.

sentinel costpurviewdefender
read more →
stage · 03£24k+

evolve

the staying-with-it part.

Quarterly cycles, annual programmes, transformational engagements. Findings feed the next loop — and keep our tools sharp.

quarterlyannualtransformation
read more →
↺ evolve feeds back into assess — fixed fee at every stage, never day rates.
see all services

·how the two arms feed each other

one arm sharpens the other.

The two arms aren't separate businesses bolted together — they're one loop. The work makes the tools; the tools make the work.

consultancy → apps

Every engagement throws up the same high-friction problems. The challenges we solve harden into the apps — battle-tested on real work before they ship.

⇄
apps → consultancy

The apps make our consultants faster and sharper — so engagements start further ahead, and you get tools that have already met your problem.

·the numbers

millions saved. coverage held.

The headline numbers are cumulative across the founder's prior engagements — not glacierr's alone.

£4.2m

cumulative sentinel savingacross prior engagements. detection coverage held or improved in every case.

2:1

consultant-to-client ratiotwo senior consultants, every engagement. no delivery layer, no swap-outs.

100%

fixed-fee engagementsevery engagement priced on outcome. no day rates. no exceptions.

·how we engage

we don't bill the clock.

Scoping that spirals, days that turn into weeks, costs that break the budget. Not glacierr.

day rates → milestones
· fixed scope
· fixed fee
· fixed outcome

· about us

our story

the tools and the team we wish we'd had.

experience security coverage innovation automation & ai

glacierr is not another platform promising to transform your SOC.

We've been in your shoes — so we build the tools, and do the work, that fix what actually hurts.

We've been on the inside — working across SOCs, cyber, and privacy teams, where the stakes are high, the tooling is noisy, and things should work better than they do.

We've built the playbooks, lived the 3am incidents, wrangled with tech debt, and watched integrations break. We've seen how delays getting the right data to the right place turn into missed detections, slow responses, and spiralling costs.

And we've spent far too long navigating toolchains that promised the world, but delivered complexity.

so we started glacierr.

we fix the painful, high-friction parts of modern security.

The bits no one wants to touch. The stuff that slips through the cracks. The work that slides down the backlog until it bites — because fixing it costs more time and budget than anyone wants to spend.

So that's the whole job: small, focused security apps you can buy off the shelf, and consultant-led engagements when you'd rather we did the work. Buy the tool, hire the team, or both.


we've sat inside breach rooms.

we've picked apart the aftermath.

now we build the tools, and do the work, we wish we'd had.

01

lived-in credibility.

We've delivered the work, not just advised on it — across SOCs, cyber and privacy teams. We know where the gaps are because we've fallen into them.

02

consultant-led, no layers.

The senior consultants who scope the engagement are the ones who deliver it. No juniors on your time. No swap-outs once you've signed.

03

apps + consultancy.

Most firms do one or the other. We do both — so the tools are battle-tested and the consultants come armed.

shall we get on with it?

First call is thirty minutes. We come back inside a week with a fixed-fee proposal sized to what you actually need — or point you at the app that already solves it.

book a first call see all services

prefer email? hello@glacierr.io