Case Studies

The Challenge

A Perth industrial site was relying on a paper sign-in book at reception to log every visitor and contractor. There was no reliable way to notify hosts when someone arrived, no record of who had acknowledged site safety inductions, and no accurate list of who was on site in an emergency - a genuine WHS risk during a muster. Reception staff were manually calling or walking around to track down hosts, and the paper log itself was frequently illegible or incomplete.

What We Did

• Built a custom visitor sign-in system from scratch, deployed on a tablet at reception, replacing the paper sign-in book entirely
• Configured the sign-in flow to capture visitor name, contact details, company, host, and purpose of visit before entry is granted
• Built in mandatory site induction and safety declaration steps - visitors acknowledge site rules and WHS requirements as part of sign-in, with digital acceptance time-stamped and stored
• Implemented instant host notifications by email and SMS the moment a visitor signs in, removing the need for reception to manually track down staff
• Developed an emergency muster list view - a live, accurate list of everyone currently on site, accessible instantly during an evacuation or drill
• Added QR code pre-registration for expected visitors and regular contractors, letting them scan in on arrival and skip the manual form
• Built an admin dashboard for reporting and exporting visitor history, supporting audit and compliance record-keeping

The Challenge

A Perth professional services firm had been running on an ageing on-premise Exchange 2013 server and a local file server for over a decade. Staff working from home couldn't access files without a slow, unreliable VPN. The server was approaching end of extended support, and no backups had been tested in years. A ransomware incident at a nearby firm prompted the business owner to act.

What We Did

• Migrated 14 mailboxes, shared mailboxes, and 8 years of email history from Exchange 2013 to Microsoft 365 Exchange Online over a weekend with zero data loss
• Migrated all shared file server content to SharePoint and OneDrive - staff can now access files from any device without VPN
• Deployed Microsoft Intune across all 14 laptops - enforcing BitLocker encryption, screen lock, and endpoint protection from the cloud
• Enabled MFA and Conditional Access policies across all accounts - blocking access from unmanaged devices
• Decommissioned the on-premise server, eliminating server hardware, licences, and maintenance costs

The Challenge

A Perth trade business with three locations - main office, warehouse, and a second branch - was running consumer-grade routers at each site with no centralised management. Internet outages at the warehouse were causing significant operational disruption. All three sites were on the same flat network, with no separation between point-of-sale systems, staff devices, and guest WiFi. A business email compromise attempt had recently targeted their accounts payable team.

What We Did

• Deployed FortiGate 60F firewalls at all three sites with centralised management via FortiManager
• Configured proper network segmentation at each site: staff network, guest WiFi, POS/payment network, and management network each isolated from one another
• Implemented FortiGuard IPS, web filtering, and SSL inspection - blocking known malicious domains before they reach staff devices
• Installed SD-WAN with 4G failover at the warehouse - automatic internet failover within 30 seconds of primary connection failure
• Deployed Microsoft 365 MFA and Defender for Office 365 Safe Links across all accounts, directly addressing the BEC risk
• Set up centralised patch management through the RMM platform - all three sites patched on a consistent schedule

The Challenge

A Perth school was running three separate Windows Server 2012 file servers - each managing different departments - with end of extended support approaching. Data was fragmented across environments, permissions were inconsistent, and maintaining three separate server estates was creating significant administrative overhead. The school needed to consolidate and modernise without disrupting day-to-day operations.

What We Did

• Assessed all three file server environments and documented existing permissions, share structures, and data ownership across departments
• Planned and executed a phased migration of all file data to a consolidated Windows Server 2019 environment using Robocopy, preserving NTFS permissions and ensuring access continuity throughout
• Tightened permission structures and simplified share layouts during the migration in line with least-privilege principles
• Validated all data integrity and access continuity before decommissioning each legacy server
• Decommissioned all three Windows Server 2012 environments on completion, reducing infrastructure footprint from three servers to one

The Challenge

A Perth school was spending significant IT and admin staff time on repetitive manual tasks each term - uploading student and staff roster data to Microsoft School Data Sync required manual CSV preparation and submission, and distributing newly created parent account credentials required individual manual emails. These tasks were consuming hours of staff time and were prone to delays and errors.

What We Did

• Automated the Microsoft School Data Sync (SDS) CSV upload process using Power Automate - eliminating the manual upload cycle and removing the risk of human error in data submission
• Built an automated email workflow for distributing parent account usernames and passwords - new credentials are delivered automatically when accounts are created, with no IT involvement required
• Extended the parent communication workflow to include SMS notifications via ClickSend API integration - ensuring credentials reach parents reliably even where email delivery is uncertain

The Challenge

A Perth small business managing self-hosted web services and infrastructure needed to secure their public-facing environment without exposing servers directly to the internet. Their website was relying on Google reCAPTCHA on contact forms, but the business wanted to reduce dependency on Google services while maintaining effective bot protection. Inbound firewall ports were open to support public-facing services, and bot traffic and spam form submissions were increasing.

What We Did

• Implemented Cloudflare Tunnel (Cloudflared) to route all public-facing traffic through Cloudflare without any open inbound firewall ports - eliminating direct exposure of the hosted infrastructure to the internet
• Replaced Google reCAPTCHA across all website forms with Cloudflare Turnstile - improving privacy and reducing dependency on Google services while maintaining effective bot protection
• Configured Cloudflare DNS proxying across all subdomains - masking the origin server IP and enabling Cloudflare's DDoS mitigation and bot detection layers
• Implemented Cloudflare security rules and rate limiting to reduce malicious traffic reaching the origin server
• Managed SSL certificate deployment and renewal across all hosted services