Platforms we work with

Click a platform to see what it is, how it is secured and where AI is taking it.

Drag the ring, use the arrow buttons or the left and right keys. Click the highlighted front card to open it.

Platforms

Microsoft Entra ID

Cloud identity and access

What it is

Microsoft's cloud identity service (formerly Azure Active Directory). It signs users in to Microsoft 365, Azure and thousands of other apps, and decides who may access what.

3D flow: how it works

  1. Sign in The user signs in, using multi-factor or passwordless authentication.
  2. Assess Conditional Access weighs the user, the device, the location and the sign-in risk.
  3. Decide The result is to allow, require more proof, or block, before any app is reached.

Illustrative flow of a typical setup. Not live customer data.

What it does, in motion

UserAppEntra IDopen appredirect: sign inpassword + MFArisk + policy checktoken issuedaccess granted

Illustrative simulation of a typical scenario. Not live customer data.

Security

  • Multi-factor authentication and passwordless sign-in
  • Conditional Access: allow, block or require MFA based on user, device, location and risk
  • Role-based admin roles and privileged identity controls

AI direction

  • Risk-based sign-in and user-risk detection using machine learning
  • Signals feed Conditional Access so risky sessions are challenged automatically
  • AI-assisted security investigation tools are available in the wider Microsoft security stack

How we use it

This platform is part of our Cloud Desktop work.

Summary for orientation only: check the vendor's documentation for current features. Product names are trademarks of their owners; InfoXteK does not claim a vendor partnership.

Platforms

Veeam Backup & Replication

Backup, replication and recovery

What it is

Backup and recovery software for virtual, physical and cloud workloads. It takes image-level restore points, replicates workloads, and can start a failed machine directly from backup.

3D flow: how it works

  1. Protect A backup job takes image-level restore points of each workload.
  2. Store Restore points are kept in a hardened repository so they cannot be altered.
  3. Copy and verify A further copy goes offsite or offline (the 3-2-1 rule) and backup data is checked for ransomware signs.
  4. Recover Choose a clean restore point and restore, or start the machine directly from backup.

Illustrative flow of a typical setup. Not live customer data.

What it does, in motion

Restore points over timeRP1RP2RP3RP4RP5RP6RP7RP8Local repoImmutable repoCloud copyProductionRansomwareInstant recovery VMClean point RP6 chosen: recovery without paying

Illustrative simulation of a typical scenario. Not live customer data.

Security

  • Immutable and hardened repositories so backups cannot be altered
  • 3-2-1 copy strategy: three copies, two media, one offsite or offline
  • Encryption of backup data and role-based access

AI direction

  • Malware and anomaly detection on backup data to spot ransomware activity
  • Helps choose a clean restore point after an attack
  • Automation of recovery testing and reporting

How we use it

This platform is part of our Disaster Recovery work.

Summary for orientation only: check the vendor's documentation for current features. Product names are trademarks of their owners; InfoXteK does not claim a vendor partnership.

Platforms

Forcepoint DLP

Data loss prevention

What it is

Data loss prevention software that finds and classifies sensitive data, then monitors or blocks it as it moves through endpoints, email, web and cloud apps.

3D flow: how it works

  1. Data moves Someone tries to send, copy, upload or print data.
  2. Classify Policies recognise personal data, source code and regulated information.
  3. Act Depending on the policy and the user's risk, the action is blocked, encrypted, warned about or simply logged.
  4. Review Incidents keep the evidence an investigator needs.

Illustrative flow of a typical setup. Not live customer data.

What it does, in motion

Policy engineFiles on endpointEmailUSB driveCloud uploadPIIBLOCKEDsource codeOnly approved data reaches its destination

Illustrative simulation of a typical scenario. Not live customer data.

Security

  • Policies for personal data, source code and regulated information
  • Block, encrypt, warn or log when data leaves via USB, email, upload or print
  • Incident review with evidence for investigators

AI direction

  • Machine-learning classification of unstructured data
  • Risk-adaptive protection that tightens controls as user risk rises
  • Policies that cover data sent to generative AI tools

How we use it

This platform is part of our Cyber Security work.

Summary for orientation only: check the vendor's documentation for current features. Product names are trademarks of their owners; InfoXteK does not claim a vendor partnership.

Platforms

SentinelOne Singularity

Endpoint detection and response

What it is

An endpoint security platform (EDR/XDR) that watches process behaviour on each device, detects attacks and can respond automatically on the endpoint.

3D flow: how it works

  1. Watch The agent watches process behaviour on the device, even when it is offline.
  2. Respond on the device It can kill, quarantine or isolate without waiting for the cloud.
  3. Roll back On supported systems, files changed by ransomware can be restored.
  4. Investigate Telemetry from endpoints, identity and cloud is correlated for the analyst.

Illustrative flow of a typical setup. Not live customer data.

What it does, in motion

winword.execmd.exepowershell.exeencrypts filesSingularity agentbehaviour flaggedKILL + QUARANTINEFilesrolled backhost isolated

Illustrative simulation of a typical scenario. Not live customer data.

Security

  • Behavioural detection of malware, ransomware and fileless attacks
  • Automatic kill, quarantine and network isolation of infected hosts
  • Rollback to restore files changed by ransomware on supported systems

AI direction

  • On-device behavioural AI that works even when the machine is offline
  • AI-assisted threat hunting and investigation
  • Telemetry correlated across endpoints, identity and cloud

How we use it

This platform is part of our Cyber Security work.

Summary for orientation only: check the vendor's documentation for current features. Product names are trademarks of their owners; InfoXteK does not claim a vendor partnership.

More platform pages are being added. Product names are trademarks of their owners; listing a platform does not imply a partnership.

Talk to us about your IT

Tell us what you need and we will suggest a sensible next step.

Request a consultation