A Letter from CEO
Meet Steve Fortine
I’m Steve Fortine. I am a Wichitan, father, entrepreneur, and cyber security expert. For 21 years I’ve helped Wichita businesses, from mom‑and‑pop shops to aerospace and aeronautical engineering firms. We run reliably with managed IT services and security that sticks. This city raised me; serving it is personal.
- Local roots, local accountability, no distant call centers.
- 21 years of hands‑on managed IT and security for Wichita companies.
- Focus on outcomes: uptime, recoverability, and proof, not promises.
Why I’m Writing
We recently led the largest ransomware recovery of my career. The attackers exfiltrated sensitive data and then encrypted servers, workstations, on‑prem email, and local backups.
The ransom demand was 26 BTC. We did not pay.
The rebuild took months and direct recovery costs passed $600k—before counting lost revenue and the multi‑year credit monitoring we’re now funding for current and former employees.
This is the reality businesses face today.
-
Data theft plus encryption—double pain, public exposure. -
High‑risk lanes (cameras, VoIP, OT/PLC) isolated with QoS and no internet by default; vendor access via recorded bastions. -
DNS filtering and egress allow‑lists that make C2 chatter fail fast; alerts for long‑lived or unusual destinations.
Wichita, We Need to Talk
Incidents like this don’t mean your team doesn’t care. They mean assumptions beat evidence. “We have backups” is not the same as “we can restore cleanly this afternoon.” If you can’t show the last clean restore date by system, you’re gambling.
Backups must be immutable and isolated, or they are liabilities.
Identity is the new perimeter—weak MFA and token sprawl invite compromise.
Flat networks accelerate damage; segmentation and egress control buy time.
What “Ready” Looks Like (No Spin)
Readiness is a routine, not a shopping list. You prevent the common paths and prove recovery on a schedule—so your insurer, board, and customers trust the outcome.
Immutable backups on every tier
On‑site WORM, cloud object lock, and a vault copy with separate credentials. Quarterly clean test‑restores, documented.
Phishing‑resistant MFA + session control
Passkeys/FIDO2 for admins/remote access; legacy protocols retired; break‑glass accounts tested.
Segmentation and egress control
Default‑deny east‑west, named allow‑lists, DNS/egress filtering; vendor access time‑boxed and recorded.
Evidence
binder
Control matrices, screenshots, restore reports your insurer accepts.
My Promise to Wichita
Nobody can guarantee 100% prevention.
I can guarantee 100% of my firm’s energy, discipline, and access to the best technology, appliances, protocols, and practices to protect you—and to restore you cleanly if the worst happens.
We will push for the controls above because they work, and we’ll prove it with metrics your leadership understands.
A Note from Me
“I’m so proud of our city and the time served in Wichita. I’ve personally grown and consider myself so fortunate to have got to work with wonderful companies in Wichita, from the small mom & pop to large Aerospace and Aeronautical Engineering firms. Personally, my most rewarding has been the Kansas State School for the Blind as my passion is technology, and putting people and technology together for success has fueled my drive.
In today’s world, times sadly have changed. Crime has evolved and so have the culprits. I take great pride in customer education and securing businesses for the current and unknown threats of tomorrow. Nobody can guarantee you 100%, but I can guarantee you 100% of my firm’s resources to protect you with the world’s best technology, appliances, protocols, and practices.”
- Steve Fortine
Service Pledge (No Fluff)
Executive scorecard with five critical domains: identity, segmentation, backups, logging, vendor access.
Evidence binder with screenshots/logs/restore reports, formatted for carriers and boards.
30/60/90 plan with owners, dates, and acceptance criteria—plus a quarterly drill calendar.
Callout — Wichita Credibility
-
21 years serving
Wichita businesses. -
Industries: aerospace/aeronautical, manufacturing, education (Kansas State School for the Blind). -
Local, on‑site response—including live redesign during incidents when necessary.
21 Years Putting Customers First — Check Out My Other Products
Managed IT in Wichita, KS
Customer Trust with Branded Email
Domain & Email Security
Dominate SEO Together
What You Should Do Next
If you haven’t validated backups or MFA this quarter, do it now. If you can’t produce the last clean restore date by system, we’ll help you replace guesses with proof.
-
Book a **12‑hour readiness review** focused on immutability, MFA, segmentation, and evidence. - Require quarterly clean test‑restores and publish the dates internally.
- Cut legacy protocols; reduce standing admin to zero with just‑in‑time access.
Frequently Asked Questions
Yes. Our intake line is staffed 24/7 at 316-712-4006. For active incidents we begin containment within the first 15 minutes of the call — isolating affected systems, locking down admin paths, and protecting backups before attackers can reach them. No retainer required.
Always. Most engagements run alongside the client’s existing MSP and breach counsel. We coordinate access, document every privileged session, and produce evidence binders your counsel and cyber-insurance carrier can use directly. We’re not here to replace your IT partner — we’re here to handle the incident.
No firm should — and any firm that does is telling you what you want to hear. What we guarantee is process: clean rebuilds into segmented landing zones, verified before promotion to production; immutable backup validation; and documented chain of evidence at every step. Across 21 years and hundreds of engagements, recovery rates on incidents we engage on within the first 24 hours are very high. We’ll be straight with you about what’s recoverable and what isn’t.
This is one of the most common scenarios we see. We work back from whatever clean evidence exists — older off-site copies, cloud object-lock copies, vendor-side replicas, even physical media in storage. We never restore directly into a production network; everything lands in an isolated, scanned, validated environment first. If no clean backup exists anywhere, we’ll tell you immediately and walk you through alternatives including the legal and insurance implications.
Not when it’s rolled out correctly. We move clients through p=none → p=quarantine → p=reject in phases, monitoring DMARC aggregate reports the whole way and fixing alignment on every legitimate sender (your CRM, payroll, marketing tool, helpdesk) before tightening enforcement. Done in order, DMARC blocks impersonation of your executives without dropping a single real message.