version 26.6.4 · Western Australia · Est. 2011 · ·HP · Yealink · Ubiquiti · Kyocera · Microsoft Partner & Reseller
— Managed IT, since 2011

IT for businesses
that want the company to keep working.

For fifteen years, whedo.it has been the quiet operator behind some of Western Australia's most demanding small and mid-market firms.

Book a 30-min scoping call → Read the case studies
"We don't talk about uptime. The uptime talks for itself."
— Field notes, September 2026

What's actually going wrong
in Australian SMB IT this year.

Drawn from this year's breach data, the questions clients keep asking, and what attackers are doing right now. Each one maps to a service solution we have.

01
"Our backup looked fine — until we needed it."
Where victim size was known, 96% of ransomware victims in Verizon's 2026 breach report were small and medium businesses. Only 28% of ransomware victims in Veeam's 2026 research fully recovered their data. And in September, backup agents themselves were being exploited. Untested, deletable backups aren't a recovery plan.
Source · Verizon DBIR 2026 / Veeam 2026 / Sep 2026 advisories
02
"We thought our VPN was the perimeter."
It's not. Exploiting vulnerabilities is now the top way into a network, and the edge box is the favourite target — credentials for an estimated 75,000 Fortinet devices surfaced in June, and Citrix NetScaler zero-days were under attack in September. Identity, MFA and Conditional Access are the perimeter.
Source · Verizon DBIR 2026 / ASD, 2026
03
"We have MFA. How are we still being phished?"
Because the new tricks skip the password entirely: sign-in codes typed into a genuine Microsoft page, fake "verify you're human" pages that get you to paste a command, and a "help desk" on Teams asking for remote access. Phishing-resistant MFA and staff who know the patterns close the gap.
Source · Microsoft Threat Intelligence 2025–26
04
"We turned AI on. Now what?"
Copilot shows people everything they already have access to — so overshared files show up in answers. And AI agents go further: in September the government disclosed an AI agent had accessed a Medicare statistics portal without authorisation. Least privilege, human sign-off and logging have to come first.
Source · Microsoft Learn / ASD, Sep 2026
Warren Ephron, Director at whedo.it, Perth
— Warren Ephron, Perth
— The approach

Boutique by design.
Enterprise-strength underneath.

whedo.it is a WA-based managed services provider specialising in cybersecurity, Microsoft 365, and cloud security solutions. We’ve intentionally stayed boutique so our clients work directly with senior experts who know their environment and care about getting things right.

Every call, every quote, every incident goes through one senior pair of hands — whedo.it director, Warren Ephron. The boutique part is what clients hire; the industrial-strength part is what makes the boutique part work. Underneath sit the same platforms the bigger MSPs run on: Acronis MDR with a 24/7 SOC, Nerdio orchestrating AVD, the Microsoft Cloud Partner stack, RMM doing the heavy lifting on monitoring and patching.

That's the reason DCLA has been on the books fifteen years, ANWEST ten, Rose-Hip Vital several, and three Perth surveying practices keep renewing year on year. Senior on the front, industrial on the back, and the same person on the end of the phone the whole way through.

24/7 Security Monitoring Remote Workspace Support Microsoft Licensing & Support Proactive Maintenance Backup & Recovery
— The service catalogue

Six things you'd already be buying.
Bundled. Watched. Restorable.

01
Backup & recovery
Acronis MDR plus immutable storage for VM and Microsoft 365. 30-day retention. Tested monthly. The backup the ransomware crew can't touch.
Acronis MDR SOC
Active Protection
02
Identity & access
Entra ID with Conditional Access, MFA enforced everywhere. AVD with role-based Published Apps replaces the VPN — there is nothing left for an attacker to compromise.
Entra ID · CA
AVD · MFA
03
Email security
Defender for O365, Safe Links, Safe Attachments, impersonation protection, SPF / DKIM / DMARC tuned to your domain. Already in front of QR-code phishing.
Defender for O365
Anti-phish baseline
04
Microsoft 365
Business Premium licensing, tenant baseline, Secure Score lift, Intune device policies, SharePoint and Teams governance. Most providers stop at licensing — this is the operating layer.
M365 BP · CSP
Intune · SharePoint
05
Copilot readiness
Purview sensitivity labels, data classification, scoped access — before Copilot is let loose on your SharePoint. AI that works for you, not against your data posture.
Purview
Governance-first
06
Uptime & response
99.9% AVD availability — in writing. Multi-region failover. Nerdio-orchestrated host pools. The same Australian principal on every call.
99.9% SLA
P1 < 30 min
— What clients say
★★★★★
“Loading…”
— Google Review
— The work

Long-tenure clients,
across the state and country.

A sample of currently active engagements. Public testimonials carried over from whedoit.com; surveyor practices anonymised pending consent.

A commercial construction site, multi-storey building under way
— Construction
CASE STUDY·ANWEST CONSTRUCTIONS·SINCE 2016

A multi-site builder, kept in sync across every job.Lauren, Admin Manager, has been the client contact for a decade.

One of Western Australia's largest commercial builders. Multiple remote sites needed constant sync to head office for live project changes — drawings, RFIs, approvals — without the wait, the file corruption, or the VPN that won't connect. Built a resilient environment with secure site-to-site links, central file governance, and AU-only data residency. Ten years of uninterrupted service.

"Warren rolled this out seamlessly across all our remote sites."

Lauren — Admin Manager, ANWEST Constructions
Read the full case study →
A team in a modern office, collaborative working
— Health
CASE STUDY·ROSE-HIP VITAL·MULTI-YEAR

One click, the workspace is there.Custom apps, distributed team, zero install friction.

A distributed team needed shared access to custom applications without the install, VPN, and config headaches that come with traditional remote desktop. Built a cloud-hosted workspace — staff click one icon and the apps and the data are simply there. The team stopped thinking about IT.

"Our team just click on the icon on the desktop and 'whalla' — our custom desktops and applications are available for the team to work. We would recommend whedo.it to anyone migrating to the cloud."

Russell Diamond — CEO, Rose-Hip Vital
Read the full case study →
A close-up of fine cut diamonds on a dark fabric
— Diamond / gold
CASE STUDY·DCLA DIAMONDS·SINCE 2011

Fifteen years. Same business. Same standard.A high-trust engagement where security and confidentiality are non-negotiable.

A fifteen-year managed-service engagement for one of Australia's recognised diamond businesses. Identity-first architecture, hardened M365 tenant, secure desktop access — built for an environment where security and confidentiality are core to the brief, not bolt-ons. Continuous senior engagement across every renewal, every Microsoft generation, every threat-model pivot since 2011.

A public video testimonial from Roy Cohen, CEO, has carried across to every iteration of the whedo.it site. The longest-tenure relationship on the books — and the clearest proof that the boutique business model holds at scale and over time.

DCLA Diamonds · client since 2011
Read the full case study →
A professional office with collaborative working areas
— WA SME
CASE STUDY·PCC·AVD PUBLISHED APPS

A substantial SME, run on a Published-Apps backbone.One of three flagship WA SME engagements on whedo.it's books.

A multi-year managed-service engagement for a substantial WA SME built around an AVD Published-Apps architecture. Role-based desktop delivery, hardened identity layer, M365 governance, and a continuously updated security baseline. The kind of environment where staff don't think about the IT — because the IT keeps working.

A long-running continuous engagement — proof that the boutique business model holds equally well at scale, across multi-user environments with real complexity.

PCC · WA SME client · multi-year tenure
Read the full case study →
A wide regional Western Australian landscape, evoking the country towns served by our confidential client
— Regional NFP · Early Education
CASE STUDY·Confidential client·26 SITES · AVD + IDENTITY

Twenty-six regional centres on one cloud spine.A long-tenure WA not-for-profit; AVD + M365 hardening across regional WA.

Confidential client — Regional Early Education and Development — is a Western Australian not-for-profit caring for more than 640 children across twenty-six regional centres, from Augusta to Yilgarn. whedo.it runs the cloud spine: M365 identity as the single front door for every educator, AVD via Nerdio for the shared business systems, Intune for endpoint posture, Acronis for child-safe AU-resident backup. The same architecture used for enterprise tenants, sized for a multi-site not-for-profit.

A statewide cloud footprint, run quietly enough that leadership and twenty-six centres of educators can keep their attention on the children and families, not the IT.

Confidential client · regional NFP · multi-site long-tenure engagement
Read the full case study →
A surveyor at work outdoors with equipment
— Surveying
CASE STUDY·THREE PERTH SURVEYING PRACTICES·NAMES ON REQUEST

CAD-grade performance, from the field.Three of WA's leading surveying firms, currently expanding.

High-performance field-and-office workflows on cloud-hosted Windows desktops. CAD-grade performance on AVD, shared drawings across offices, secure access from the field. All three firms currently expanding — IT scales with them, no re-architecture needed, no migration weekend wasted. Drawings, datasets and team access — anywhere, with the same performance as the desk.

"Names withheld pending consent. Full reference list available on request from prospective clients."

— Editor's note, whedo.it
Read the full case study →
"The cloud solution provided by whedo.it is far superior to any other system we have previously used. Since moving over to the cloud our daily troubles have disappeared."
Justin Diamond · verified client review
Microsoft Cloud Partner · CSP
Acronis MDR SOC · 24/7
Nerdio Manager Enterprise
Australian-owned · Perth HQ
Essential Eight aligned
— Get in touch

Book a 30-minute
scoping call.
No hard sell, just information.

Warren discusses your business with you, flags what's exposed, and tells you what it would take to fix. If there's a fit, we'll talk about what's next. If there isn't, you'll still have a clear picture of your environment. No follow-up unless you ask for one.

+61 421 346 887

Replies typically within the hour, business hours, Perth time.

5.0
★★★★★ on Google · loading…
Read all on Google →