A security incident can cost you clients, disrupt operations and take months to recover from. We help you identify and close security gaps before they become business problems.
Most SME owners don't know what they don't know. We give you a clear picture of where your business is exposed and the practical steps to do something about it, without overcomplicating it.
We review how your business handles data, access, and systems and tell you what the real risks are in plain English, not a 40-page technical report.
Not every risk needs an expensive solution. We prioritise what's genuinely dangerous for a business your size, so your time and money go where they make the biggest difference.
A trusted expert in your corner when you need it. Whether before signing with a new supplier, making an IT decision, or when something just doesn't feel right.
If you're running a small or medium-sized business without a dedicated IT security function, this is for you.
Solicitors, accountants, consultancies, architects. Client data is valuable to criminals and a breach could be catastrophic for your reputation.
Medical records are among the most sensitive data there is. GDPR obligations are real, and many small practices are operating on trust alone.
Payment data, customer accounts, supplier relationships. Online stores are actively targeted by automated attacks every single day.
Ransomware doesn't care about your customers. If your systems go down, so does your production and recovery can take weeks without a plan.
A single compromised supplier email can divert a payment or expose your entire client list. Supply chain fraud is one of the fastest-growing threats.
The most common entry point isn't a firewall gap, it's a staff member clicking a convincing email. Training and process matter more than software.
These aren't hypotheticals. They're the most common issues we find when we sit down with businesses like yours.
Attackers impersonate your CEO, a supplier, or your bank. A single convincing email can redirect a payment or expose credentials. This is the most common financial fraud route for SMEs.
Your files are encrypted, your systems are locked, and you're given a deadline to pay. Even with backups, recovery costs money and time you probably can't afford to lose.
One compromised password from a data breach can unlock email, cloud storage, and accounts across your business. Most SMEs have no visibility into who has access to what.
Without MFA, a stolen password is all an attacker needs. Microsoft reports MFA blocks over 99% of automated account attacks yet many SMEs still haven't turned it on.
Suppliers, contractors, and cloud services with access to your systems or data are an extension of your risk. Most businesses have no process to assess or review them.
Storing customer data in a spreadsheet, unclear retention policies, or sharing files via personal email. A breach report to the DPC is not a pleasant afternoon.
I'm an information security specialist with a background in the healthcare sector, one of the most heavily targeted industries for ransomware. I've spent years working with organisations on security strategy, risk management, and incident response.
I started Salmon Leap Security because small businesses deserve the same quality of security thinking as large ones, without the jargon, the enterprise price tags, or the assumption that you have an IT department to hand things off to.


No pitch, no pressure. Just a 30-minute call to understand your situation and see how we can help.