Tailored cybersecurity, hardened Wi-Fi, PDPO data compliance, and safe AI guardrails for Hong Kong consultants, law firms, accountants, and boutique practices — without the enterprise price tag.
Boutique practices across Central & Kowloon
Victoria Harbour, at night — the threat surface we defend is this city.
Figures from the Hong Kong Police Force Cybersecurity Report 2025 (CSTCB).
01
Primary intrusion vectors. Attack surface management and identity hardening are top defensive priorities.
02
Backup systems must not share authentication with production — avoid simultaneous compromise and recovery failure.
03
Insufficient log visibility severely hinders investigation and attribution — must be addressed.
Everything included
Nine hands-on capabilities covering the boring-but-critical parts of security, so you spend your time on client work.
Client isolation, WPA3 enterprise encryption, guest VLAN segregation, and protection against rogue access points in shared commercial buildings.
Prevent confidential client dossiers leaking into public GenAI models. Acceptable-use policies, data exclusion, and secure enterprise API routing.
Full-disk encryption, lightweight EDR, password manager rollout, hardware MFA keys, and immutability-tested backups.
Data Protection Principles audit, Personal Information Collection Statements, vendor risk screening, and breach-response readiness.
Stop spoofers pretending to be your firm. SPF, DKIM, and DMARC (p=reject) configuration, plus anti-phishing drills for your staff.
Immediate containment when a suspicious link is clicked, ransomware triggers, or a laptop is stolen. Local Hong Kong-based response.
Security-enhanced open-source routers and Wi-Fi mesh, supply to maintain: WPA3, VLAN isolation, managed firmware updates.
Your own stack for backups, private AI, and cyber-hygiene tools — documented and handed over, so nothing is a single point of failure.
Plain-language sessions on the open-source utilities that save small offices and executives time and money.
Pricing
Transparent pricing engineered for 1–10 person operations. No vague enterprise quotes.
Complete vulnerability & compliance baseline.
HK$3,800 one-off
Get auditedFull hands-on implementation & hardening.
HK$9,800 turnkey
Implement nowProactive monitoring & priority retainer.
HK$1,800 /mo · 5 seats
SubscribeGovernance & safe tooling for generative AI.
HK$4,500 fixed project
Add AI guardAnnual prices are billed yearly. Setup packages are one-off.
Who we serve
Boutique firms holding confidential client files and zero tolerance for downtime.
What clients say
"We found out our client files were one phishing click from exposure. NovaGuard fixed the Wi-Fi, set up MFA for the whole team, and explained everything in plain language."
"The PDPO kit saved us days. PICS statements, vendor screening, breach plan — everything our auditor asked for was already in place."
"They showed us exactly where staff were pasting client data into public AI tools, then gave us a policy and a safer setup. No jargon, no fear-mongering."
"Managed Guardian means I stop thinking about patches and backups. The quarterly check-ups catch things before they become problems."
"Our DMARC finally went to p=reject without breaking anything. Patient intake emails still land — spoofed ones don't."
FAQ
Yes. Attackers target any business holding client data, and ransomware — 43 cases recorded in 2025 per HKPF — needs no company size threshold. The PDPO also applies to every data user, with no small-business exemption.
We are hands-on, not tool-vendors. A named consultant walks your office, fixes the Wi-Fi, configures your email, and trains your staff. You get one accountable person and transparent fixed pricing — not a call centre and a renewal salesperson.
Yes — with guardrails. The Safe AI Add-on maps where confidential data is at risk, switches you to data-excluded enterprise tiers where needed, and gives you a short acceptable-use policy your staff will actually read.
The Cyber Health Check is usually completed within 2–3 business days of booking. Secure Start Deploy is typically finished within two weeks, including the staff workshop.
Often. Many clients keep their day-to-day IT support and add NovaGuard for security, compliance, and AI governance. We coordinate with your existing provider and document hand-off procedures.
Book a confidential 30-minute discovery call. No high-pressure sales — direct technical reality.
Contact
Inquiry response within 4 business hours, Monday to Friday.