Cybersecurity should not be a luxury.

Wecomply was formed on one idea: the tools that keep large organisations safe should be available to everyone else too.

Endpoint monitoring, threat detection, compliance auditing, staff training — this is a mature industry with good products in it. All of them are priced and packaged for buyers with a security team, a procurement process and a budget line. That is a rational commercial decision, and it leaves a gap the size of everybody else: small businesses, sole traders, community organisations, charities, families, individuals.

Those people get the same threats with none of the defences. The phishing page does not check your headcount. The fake system notification does not care whether you have an IT department. In fact the least protected are targeted the most, precisely because they are the easiest and because nobody has ever sold them anything better than advice.

The advice they get is to be careful online. That is not a security control. It puts the entire burden of defence on the person with the least training, the least time and the most to lose, and then calls it their fault when it fails.

What we intend to build

A catalogue of small, single-purpose security tools, each one doing one job to a commercial standard and each one usable by somebody with no security background at all. Not a suite, not a platform, and not a dashboard that needs an administrator. A tool you install, that works, and that you can stop thinking about.

The first is Argus, which blocks the scams that talk you into compromising your own computer. It runs entirely on your device and makes no network requests at all — not as a promise, but as something enforced in the code and checked on every build. That is the standard the rest of the catalogue is held to: if a tool has to send your browsing somewhere to work, it is the wrong design.

Being honest about limits is part of the same standard. Every Wecomply tool says what it does not cover, on which browsers, and why. A security product that overstates itself is not a security product; it is a different kind of scam.

Where the money comes in

Some tools are free and stay that way. Others will be paid, and larger organisations will pay for scale — deployment across a fleet, central management, reporting. What will never be true is that the person on one laptop gets a weaker product than the enterprise. There is no honest reason to build two standards of protection, so we build one.

The name

Compliance has come to mean paperwork — an audit, a certificate, a box ticked once a year. We mean it literally: everyone actually meeting a baseline standard of security. Make everyone comply. That is only possible if the tools to do it are within reach of the people expected to comply, which is the whole of the work.