A small team, deliberately.
Kovart Security is a two-person firm. The person who scopes your test is the person you'll deal with throughout, and the person who runs it is the person who fixes what it finds.
The opposite of a frightening pitch and a report nobody fixed.
Professional services firms kept getting the same two things from the security industry: a sales pitch built on fear, and a test report that landed in an inbox and stayed there because nobody owned the fixes.
We set Kovart up to offer the opposite. A calm conversation about what's actually exposed, a fixed price you know before anything starts, and the same people carrying the work through to closure. No scare tactics, no day rates, no pressure to take the next stage.
We work mostly with accounting, legal and financial advisory firms of 20 to 150 people, because they hold sensitive client data, get asked to prove it's protected, and rarely have a security specialist in-house.
Two people. One point of contact.
You won't be passed between an account manager, a sales team and a delivery team. Dylan handles every conversation from the first call onwards; Devan leads every test and every fix.
Dylan Davison
Your point of contact from the first call through every stage. Scoping, quoting, report walkthroughs and keeping you informed.
Devan Patel
Leads the technical work: running the assessments, fixing what they find, and standing behind the closure report.
Based in England. Working across the UK, the US and Canada.
United Kingdom
Where we're based and who we work with. Testing and remediation are remote, so location doesn't limit who we can work with.
United States
Fully remote engagements, scheduled in your time zone. Reports and evidence packs are shaped for US insurers and client questionnaires.
Canada
The same fixed-price stages, delivered remotely and scheduled around your working day.
Protection without pressure.
Six things we hold ourselves to on every engagement. If we ever fall short of one, tell us.
No scare tactics
You'll hear what we found, how likely it is to be exploited and what it would cost you. Not a breach headline and a countdown.
Fixed price, known first
Every stage is quoted before it starts. If we find more than expected, that's our problem, not a change to your invoice.
We fix what we find
The people who tested your systems are the people who fix them. No hand-off, no second supplier, no findings left open because nobody owned them.
Reports written for partners, not just IT
Each finding carries a plain-English explanation alongside the technical detail, so decisions get made without a translation layer.
Your IT provider stays your IT provider
We work alongside whoever runs your systems day to day. We're not trying to replace them.
Nothing without written authorization
We never test a system we haven't been authorized in writing to test. It protects you as much as it protects us.