KullaTech

IT, cloud and security services — owned from start to finish.

KullaTech delivers Microsoft 365 migrations, cloud and infrastructure projects, technical due diligence and managed security services. Senior-led, clearly scoped and documented.

Start a conversation Explore security services
Watch: how we protect your business (1 min)

Delivering remotely across Europe and North America.

DeliverySenior-led, no handovers
EngagementProject or managed service
SecurityKullaTech-operated service stack
Delivery regionEurope and North America

The difficult part is not buying technology.

It is knowing what you have, where the risk sits, what should change and who is responsible when something goes wrong.

KullaTech brings projects, cloud and security into one technical view so decisions are made against the real environment rather than a collection of disconnected tools.

  • What systems, users and devices are actually in scope?
  • Which identities and business assets matter most?
  • Where are the security and operational gaps?
  • What needs to move, patch, protect or retire?
  • Which controls overlap and which are missing?
  • Who owns the response, recovery and documentation?

What KullaTech delivers

Focused technical services for businesses that need one team to understand the environment, do the work and remain accountable for the result.

Managed security services

Protection for company assets, email, domains, identity, web access, vulnerabilities and business data — operated as KullaTech services rather than a collection of separate licences.

Microsoft 365 and Workspace migration

Tenant-to-tenant, Google Workspace to Microsoft 365 and on-premises Exchange to cloud. Users, mail, files, collaboration and DNS cutover planned as one migration.

Cloud and infrastructure

AWS, Microsoft Azure and Alibaba Cloud across identity, networking, backup, migration and day-to-day administration.

IT due diligence and integration

Discovery, risk assessment, licensing review and a costed integration plan for acquisitions, consolidations and complex technology estates.

KullaTech Security Services

One managed security stack. One team responsible for it.

KullaTech manages the protection around your devices, email, identity, domains, web access, vulnerabilities and business data. Each service below can run on its own or as part of one managed stack.

Protect · Monitor · Remediate · Recover · Report

Six layers, the risk in each, and how we stop it.
01

Asset Protection

Your computers should not become your weakest link.

Managed threat detection and response, security monitoring, vulnerability remediation and controlled patching across company endpoints.

02

Email Protection

Protect the inbox. Protect the business.

A managed security layer around business email that identifies phishing, impersonation and suspicious messages, and supports remediation when something gets through.

03

Domain Protection

Stop criminals from pretending to be your company.

We configure and monitor SPF, DKIM and DMARC so receiving mail systems can tell authorized email from attempts to spoof your domain.

Check your domain →
04

Identity Protection

Passwords are keys. Stop leaving copies everywhere.

Secure password storage, controlled credential sharing, MFA, role-based access and privileged-access controls for the accounts that matter.

05

Vulnerability Protection

Find security weaknesses before attackers do.

Continuous discovery, prioritization and remediation coordination across the environment.

06

Web Protection

Stop threats before users reach them.

Block malicious domains, phishing sites and unsafe web destinations before a connection is made.

07

Data Protection

Security can fail. Recovery cannot.

Managed backup, retention and recovery for Microsoft 365, endpoints and servers.

08

Security Operations

One team responsible for the complete environment.

KullaTech monitors, investigates, coordinates remediation and reports on the security stack.

See what happens →

Show me what happens when…

KullaTech Domain Protection

Check how easily your domain can be impersonated.

Run a free check for the public email-authentication controls that help prevent spoofing and impersonation.

DMARC · SPF · DKIM · BIMI

Free domain check
Enter your domain
FREE
Checks DMARC, SPF, DKIM and BIMI using public DNS records.

Technology we trust.
Operated by KullaTech.

The customer relationship stays with KullaTech. These specialist platforms provide the technology underneath the managed service.

Huntress Managed detection & response
Action1 Patch & vulnerability remediation
IRONSCALES Email protection
EasyDMARC Domain authentication
Keeper Identity & privileged access
Nodeware Vulnerability management
ISO/IEC 27001 · SOC 2

Preparing for ISO 27001 or SOC 2? Your security can already count.

Auditors ask two questions: do the controls exist, and can you prove they work over time? Every KullaTech security service maps to specific ISO/IEC 27001:2022 Annex A controls and SOC 2 criteria, and produces the evidence an auditor asks for.

01

Protect

The managed stack puts the technical controls in place: malware protection, monitoring, patching, MFA, web filtering and backup.

02

Prove

A monthly evidence pack: alerts handled, patch status, MFA coverage, backup and restore results, ready for your auditor.

03

Prepare

Readiness work for what tools cannot do: gap assessment, risk assessment, Statement of Applicability, policies and audit support.

Which controls each KullaTech service supports
KullaTech serviceISO/IEC 27001 Annex ASOC 2Evidence produced
Asset Protection8.1 · 8.7 · 8.16 · 5.24–5.26CC6.8 · CC7.2–CC7.4EDR alerts and incident tickets
Email Protection5.14 · 8.7CC6.8 · CC7.2Phishing detection and remediation log
Domain Protection5.14 · 8.21CC6.6DMARC reports and policy history
Identity Protection5.15 · 5.17 · 5.18 · 8.2 · 8.5CC6.1–CC6.3MFA coverage and access reviews
Vulnerability Protection8.8 · 8.9 · 8.19CC7.1 · CC8.1Scan results and patch reports
Web Protection8.23CC6.8Blocked-threat reports
Data Protection5.30 · 8.13 · 8.14CC7.5 · A1.2–A1.3Backup jobs and restore tests
Security Operations5.24–5.27 · 8.15 · 8.16CC7.3–CC7.5Monthly security report
Supports 22 Annex A controls and the core SOC 2 security criteria. Certification also needs a management system: scope, risk assessment, policies, people, suppliers and internal audit. That is our readiness service, not a licence.
Ask for a free control check

KullaTech does not issue certificates. ISO/IEC 27001 certification is granted by an accredited certification body; SOC 2 reports are issued by independent CPA firms.

Selected work

Engagements led by our founder, described by shape rather than by client. Names and identifying details are withheld under the terms they were delivered under.

Tenant-to-tenant consolidation

Two commercial real-estate firms merged onto a single Microsoft 365 tenant.

  • Email, shared mailboxes, distribution lists and SharePoint content
  • Identity mapping and phased cutover by department
  • Source tenant retained through the agreed rollback window

Google Workspace to Microsoft 365

40-mailbox migration for a professional services client.

  • Mail, Drive content and shared calendars
  • DNS, MX, SPF, DKIM and DMARC cutover
  • Pilot group, then two production waves

SharePoint Server EDRMS deployment

Document and records management across multiple government ministry farms.

  • SharePoint Server 2019 farm architecture
  • Records classification and retention structure
  • Deployment and administrator handover

Multi-cloud estate administration

Ongoing operation of workloads across AWS, Azure and Alibaba Cloud.

  • Identity, networking and backup across three providers
  • Cost review and commitment analysis
  • Migration planning and expense estimation

How we work

A kulla is an Albanian stone tower house — built by one family, from stone that was already there, to stand for generations. The method follows.

Senior-led

You work with the engineer doing the work, not an account manager relaying questions to someone you never meet. Fewer people, shorter path, no handover losses.

Scope before price

We measure the estate before quoting it. Estimates arrive as a range with the assumptions written down, and we tell you what would move them.

Everything documented

Every engagement ends with the runbook, the inventory and the decisions. You never become dependent on us to understand your own environment.

Rollback first

No migration starts until there is a verified backup of the source and a tested way back. The source estate stays intact through the retention window.

Remote delivery. International reach.

Senior engineering delivered remotely across Europe and North America. You get consulting-grade rigour on a scope and a price that a mid-market business can actually approve.

Three commercial shapes

Subcontracted delivery under your brand, fixed-scope projects, or ongoing monthly management. Most clients start with the first and move to the third.

Time zones that overlap

Central European hours cover the whole European working day and the first half of the US East Coast day. Cutovers run on your weekend, not ours.

Documented handover

Runbooks, inventories and decision records at the end of every engagement — the same artefacts your auditor and your next provider will ask for.

Credentials

Held and current. Grouped by what they let us do rather than listed as a badge wall.

Cloud and infrastructure

AWS Certified Solutions ArchitectAssociate
Microsoft CertifiedAzure Network Engineer Associate (AZ-700)
Microsoft CertifiedAzure Fundamentals (AZ-900)
Alibaba Cloud Certified AssociateACA-LLM
CanonicalTechnical concepts

Security and compliance

ISO/IEC 27001Information security management
NetwrixPAM, DLP, Active Directory Security, Password Secure
BarracudaEmail Protection, Cloud Security Guardian
AkamaiPartner technical

Data protection and continuity

NAKIVOTechnical Professional
BarracudaCloud-to-Cloud Backup

Tell us what you need to change or protect.

A migration, cloud project, managed security requirement or complex IT change. Email us the environment, the approximate user count and what you need to achieve. We will come back with the next practical step.

Email
contact@kullatech.com
Email us

We reply within one working day. Details you send are treated as confidential and are not shared.

  • What you need help with
  • Current platform and approximate number of users
  • Any deadline or target date