When you think about replacing your outdated surveillance systems, the reasons are usually pretty predictable.

The cameras are getting old, the footage isn’t clear enough anymore, they want better coverage or remote access, maybe they want newer features.

Those are all great reasons to upgrade, but there’s another elephant in the room that no one talks about enough.

Today’s surveillance systems are connected to your network. They have software, firmware, user accounts, and in a lot of cases, remote access. In other words, they’re not just cameras anymore. They’re connected devices, just like your computers, servers, and phones.

This means that they need to be managed like connected devices, too.

If they’re running outdated firmware, using weak passwords, or no longer getting security updates, they might be creating risks that have nothing to do with blurry footage or blind spots.

Here’s why more businesses are starting to look at surveillance systems as part of their overall cybersecurity strategy.

And why you should, too.

Your Surveillance System is Part of Your IT Infrastructure

For a long time, surveillance cameras were pretty simple.

You mounted them, connected them to a recorder, and hoped you never needed the footage.

Today’s systems are much more sophisticated.

Most modern surveillance systems are connected to your network, accessible from mobile devices, and capable of sending alerts, storing video remotely, and integrating with other business systems.

That’s part of what makes them so valuable. But it also changes the conversation.

Once a surveillance system is connected to your network, it’s no longer just a collection of cameras. It’s another connected device that needs to be configured, maintained, and secured just like any other piece of business technology.

Unfortunately, that’s not always how it’s treated.

A lot of (probably most) businesses keep using surveillance systems long after they’re supported, hardly ever update firmware, and never revisit the security settings after the initial installation.

Over time, those oversights create risks that have nothing to do with video quality.

Key takeaway: The moment your surveillance system connects to your network, it becomes part of your overall IT environment, not just your physical security strategy.

Unsupported Doesn’t Just Mean Outdated

When a computer stops getting security updates, most businesses understand it’s time to replace it.

The same thinking should apply to surveillance systems.

Manufacturers eventually stop supporting older cameras, recorders, and other surveillance hardware. Once that happens, security updates and firmware patches may no longer be available, even if the equipment still appears to be working normally.

That’s where the risk starts to change.

A camera can continue recording crystal-clear footage while running software that’s years out of date. If security vulnerabilities are discovered after support ends, there may never be a fix.

That doesn’t automatically mean your business is going to be compromised.

But it does mean you’re relying on tech that may no longer be keeping up with today’s security landscape.

That’s one of the biggest reasons businesses are replacing legacy surveillance systems. Because you need to make sure the technology protecting the business isn’t introducing unnecessary risk.

Key takeaway: A surveillance system doesn’t have to stop working to become outdated. Sometimes the biggest risk is what you can’t see.

Could Someone Else Be Watching?

Most business owners assume the only people who can view their surveillance footage are the people they’ve given access to.

In a properly configured system, that’s exactly how it should work.

The problem is that older surveillance systems aren’t always configured properly. Weak passwords, outdated firmware, exposed remote access, or unsupported hardware can all create opportunities for unauthorized access if they aren’t addressed.

That doesn’t mean every legacy camera is vulnerable, but it does mean businesses shouldn’t assume that because a camera is recording, it’s also secure.

The last thing any business owner wants is to install cameras to protect their property, only to find that someone outside the business has found a way to access the system.

That’s why it’s so important to review who has access, remove old user accounts, use strong credentials, keep firmware up to date, and make sure remote access is configured securely.

Surveillance systems are designed to give your business visibility, not someone else.

Key takeaway: A surveillance system should help you monitor your business. It should never become an opportunity for someone else to do the same.

Surveillance Shouldn’t Be “Set It and Forget It”

One of the biggest misconceptions about surveillance systems is that once they’re installed, the job is done.

In reality, they’re a lot like any other piece of business technology.

• They need software updates.

• Firmware should be kept current.

• User accounts should be reviewed as employees come and go.

• Remote access should be configured carefully

• Older hardware should be evaluated before it reaches the end of its supported life.

The problem is that surveillance systems usually fall into a different category in people’s minds. Servers get patched, laptops get replaced, fiirewalls get monitored.

But the cameras?

They sit forgotten in the background, sometimes for years, without anyone thinking much about them.

That’s exactly why it’s worth revisiting your surveillance system every so often. Your business, your technology, and the threat landscape have all changed since those cameras were first installed.

A surveillance system should be just as much a part of your technology strategy as your computers, your network, or your cybersecurity tools.

Key takeaway: The best surveillance systems aren’t just installed well; they’re maintained, monitored, and managed over time.

So, When Is It Time to Upgrade?

You might assume you’ll know when it’s time to replace your surveillance system. Maybe a camera fails or stops recording. Usually, something breaks, and that’s the catalyst for an upgrade.

Sometimes, though, you won’t have a clue because the warning signs are much more subtle.

Maybe the manufacturer no longer supports the hardware. Maybe replacement parts are getting harder to find. Maybe the system still records, but it doesn’t integrate with the way your business operates today. Or maybe you’re just not confident that it’s as secure as it should be.

Those are all good reasons to start asking questions.

The best time to evaluate a surveillance system isn’t after it becomes a problem. It’s while it’s still giving you the opportunity to plan your next move.

Upgrading doesn’t have to mean replacing every camera overnight. Sometimes you just have to understand what you have, identify where the risks are, and put together a plan that makes sense for your business.

A little planning today can help you avoid much bigger problems tomorrow.

Key takeaway: The right time to evaluate your surveillance system is before you’re forced to replace it, not after it catches you by surprise.

It Might Be Time to Look at Your Cameras a Little Differently

When most businesses think about upgrading their surveillance systems, they’re usually thinking about better image quality, newer cameras, or adding a little more coverage.

Those are all good reasons to upgrade, but they’re not the only reasons.

Today’s surveillance systems are part of your technology environment. They help protect your business physically, but they also need to be protected themselves.

If your cameras have been running for years without much thought, it may be worth asking whether they’re still meeting your needs, not just from a surveillance standpoint, but from a security standpoint as well.

The good news is that you don’t have to figure it out on your own.

If you’re planning a surveillance upgrade or simply want a better understanding of what’s changed, we recently recorded a webinar that walks through our approach to designing modern surveillance systems.

We cover everything from choosing the right cameras and NVRs to planning coverage, exploring newer technologies, and building a system that’s designed around your business.

Watch the webinar to learn what goes into planning a surveillance system that protects your business today and for years to come.

A few years ago, if a business wanted custom software, the conversation usually ended before it even started. The idea sounded great, but the reality was a lot less exciting.

Long development timelines, big budgets, and the challenge of finding the right developers made custom software feel out of reach for a lot of businesses.

In 2026, that’s completely changed.

You can have an idea in the morning and a working prototype by the afternoon.

That’s the exciting part about AI and vibe coding.

But like all fun things, there’s always a part that needs to be addressed before you can start letting the creative juices flow.

Building has become so easy that it’s tempting to skip the planning entirely.

We’ve seen businesses jump straight into building because they finally can, only to realize a few weeks later that they solved the wrong problem, built something nobody uses, or built a custom solution when an existing tool would have worked just fine.

The truth is, the most successful AI projects don’t start with code. They start with questions.

Before you build anything with AI, here are five questions every business should ask first.

“Is This Actually a Problem Worth Solving?”

It’s easy to get excited about AI. You think of a great idea, open your favorite AI tool, and before you know it, you’re halfway through building something.

But before you start writing prompts or designing workflows, take a step back and ask yourself a simple question:

Is this actually a problem?

Not every inconvenience needs custom software. The best AI projects solve problems that are costing your business something, whether that’s time, money, productivity, or customer satisfaction.

Maybe your team spends hours every week manually updating spreadsheets. Maybe important information is scattered across multiple systems. Maybe customers are constantly emailing with the same questions.

Those are real problems.

On the other hand, if you’re building something because it sounds cool or because you can, it may not deliver much value once the excitement wears off.

A good rule of thumb? If multiple people are feeling the same frustration over and over again, there’s a good chance you’ve found a problem worth exploring.

“Are We Doing This One Thing Over and Over Again?”

Some of the best AI projects start with a sentence that sounds like this:

“There has to be a better way to do this.”

Maybe it’s a report that someone manually pulls every Friday, or perhaps your team is copying information from one system to another. Maybe you’re sending the same emails, updating the same spreadsheets, or following the same process dozens of times a week.

Individually, these tasks don’t seem like a big deal, but collectively, they add up.

An hour here. Thirty minutes there. A few clicks repeated hundreds of times over the course of a year. Before long, your team is spending an insane amount of time on work that doesn’t really need a human touch.

That’s where AI and automation can make a huge difference.

Some of the most valuable tools we’ve seen are simple automations that save people time every single day. Definitely not flashy customer-facing applications, though those are cool, too.

If a process is repetitive, predictable, and follows the same steps over and over again, it may be a great candidate for AI.

“Is Getting and Finding Information Harder Than Pulling Teeth?”

A lot of businesses don’t have a work problem, they have an information problem.

Important data lives in spreadsheets, emails, shared drives, and half a dozen different applications. One team has one version of the information, another team has a different version, and everyone spends more time looking for answers than actually using them.

If you’ve ever found yourself asking:

“Where does that report live again?”

“Who has the latest version of that file?”

“Can someone send me that spreadsheet?”

…you know exactly what we’re talking about.

As businesses grow, information tends to spread out. New tools get added, processes change, and before long, nobody has a complete picture of what’s happening.

This is the perfect opportunity to consolidate the information you already have together in a way that’s easier to access and understand. That’s why dashboards, internal portals, and knowledge bases are some of the most practical AI projects businesses can build.

It’s a great way to make existing information more useful and accessible.

“Will This Make Life Better for My Team or Customers?”

One of the easiest mistakes to make with AI is building something because it’s technically impressive instead of genuinely useful.

For example, a tool can have all the bells and whistles in the world, but if it doesn’t make someone’s life easier, it’s probably not going to deliver much value.

The best AI projects solve friction. They save your team time, eliminate unnecessary steps, or make it easier for customers to do business with you.

Before you start building, ask yourself who benefits from the solution. Will your employees spend less time on manual work? Will your customers get faster answers or a better experience? Will it remove a pain point that people deal with every day?

The most successful AI projects aren’t always the biggest or the most sophisticated. They’re the ones that make work easier, improve the customer experience, and leave people wondering how they ever managed without them.

“Does This Actually Need to Be Custom?”

This might be the most important question on the list. Just because you can build something with AI doesn’t automatically mean you should.

We’ve seen businesses get excited about an idea and jump straight into building, only to realize later that there was already a tool on the market that solved the problem perfectly well. In some cases, a few process improvements or a better use of existing software could have accomplished the same thing without building anything new at all.

That’s not a bad outcome, by the way.

The goal is to solve a business problem, not necessarily to build an entirely new, custom software.

Sometimes the right answer is a custom dashboard or an internal tool that fits your business perfectly. Other times, the right answer is an existing platform that can be implemented quickly and maintained with far less effort.

Before you start building, ask yourself a simple question: Is there something unique about this process that truly requires a custom solution?

If the answer is yes, you may have a great candidate for AI development. If the answer is no, you may save yourself a lot of time, money, and complexity by taking a different approach.

So…Should You Build It?

AI has made building software faster, easier, and more accessible than ever before. That’s incredibly exciting, but it also makes it tempting to jump straight into development before you’ve really thought through the problem you’re trying to solve.

The businesses getting the most value from AI aren’t necessarily building the most things. They’re building the right things.

They’re solving problems that waste time, create friction, scatter information, or make it harder to serve customers. They’re asking good questions first and building second.

Because at the end of the day, the goal isn’t to have an AI-powered tool.

The goal is to make your business work better.

If you have an idea but aren’t sure whether it needs a custom solution, that’s okay. Sometimes the hardest part isn’t building something; it’s figuring out whether it’s worth building in the first place.

That’s where we can help.

Whether you’re exploring an internal tool, a customer portal, an automation, or something completely different, our AI Consulting service can help you evaluate your idea, identify opportunities, and determine the best path forward before you invest time and money into development.

Ready to explore what’s possible? Schedule a consultation and let’s talk about what you should build, and what you probably shouldn’t.

A lot of businesses (unfortunately) don’t think about their surveillance system until they actually need it.

Maybe there’s a break-in, or a customer dispute, or an accident in the parking lot. Suddenly, everyone wants footage, and that’s when they realize the cameras aren’t capturing what they thought they were…at the worst possible moment.

Lately, though, we’re seeing more Phoenix businesses replace their surveillance systems before something goes wrong and their reasons for doing so are definitely worth writing about.

For a lot of businesses, the system that worked five or ten years ago just isn’t meeting their needs anymore.

Here’s why so many Phoenix businesses are taking a fresh look at surveillance, and what they’re looking for in a modern system.

Phoenix Businesses Have Unique Security Needs

Phoenix isn’t a city of small storefronts packed onto a few blocks.

Businesses here are usually spread across large properties, big parking lots, warehouses, industrial spaces, and multiple locations across the Valley. A manager in Scottsdale may need visibility into a facility in Mesa. A property owner in Phoenix might be responsible for several buildings spread miles apart.

Then there’s the heat.

Arizona’s extreme temperatures can be hard on older equipment, and a lot of businesses are finding that aging surveillance systems just aren’t performing the way they used to.

We’re also seeing more businesses operating longer hours, managing larger properties, and dealing with growing concerns around theft, liability, and after-hours activity.

A few cameras at the front door don’t solve those problems.

Businesses need reliable coverage, remote access, and the ability to see what’s happening across their properties, no matter where they are.

When The “Good Enough” Surveillance System Isn’t Good Enough Anymore

Not that long ago, most businesses wanted a surveillance system for one reason: if something happened, they wanted to be able to pull the footage.

Today, that’s changed.

Business owners want to know what’s happening at their properties, like checking on deliveries after hours, for example.

The problem is that a lot of older systems weren’t built with those expectations in mind. They’re still recording, but they weren’t designed for the nitty-gritty details.

That’s why we’re seeing so many Phoenix businesses take a fresh look at their surveillance systems. The equipment may still be working fine, but the visibility and access to information just don’t cut it anymore.

Modern Surveillance Has Changed the Conversation

_{AI pro LPR in action}

Five or ten years ago, replacing a surveillance system usually meant one thing: the old one broke.

Today, businesses are upgrading for a completely different reason.

Surveillance has come a really long way. We have higher-resolution cameras now, remote access, smarter search capabilities, and cloud-connected management tools. It’s completely changed what businesses expect from their systems.

A business owner can check multiple locations from their phone or quickly pull footage without digging through hours of recordings. Teams can get alerts and access information from virtually anywhere.

A lot of Phoenix-based businesses we work with are realizing that surveillance can give a lot more than just a recording of what happened after the fact.

For example, cameras that are designed to catch really specific content, or cameras that are meant to cover a 360-degree view of a location but might not be able to catch tiny details like license plates/

A Lot of Businesses Have Outgrown Their Systems

Phoenix has been growing for years, and a lot of businesses have grown right along with it.

We’ve seen businesses open second and third locations, take over additional suites, expand into larger warehouses, and add entirely new buildings to their operations. What started as a single office has turned into multiple properties spread across the Valley.

The problem is that surveillance systems don’t always grow at the same pace.

A system that made perfect sense when the business had one location may suddenly need to cover multiple entrances, larger parking lots, loading areas, additional employees, and entirely new spaces that didn’t exist when the cameras were first installed.

Over time, businesses start making small additions. A camera gets added here, another gets installed there. Maybe a different location ends up with a completely different system.

Before long, they’re managing multiple platforms, dealing with inconsistent coverage, and trying to piece everything together when they need information.

It works…until it doesn’t.

Eventually, business owners reach a point where they realize they’re spending more time working around their surveillance system than benefiting from it.

That’s one of the biggest reasons Phoenix businesses are upgrading. They’re replacing something that’s no longer built for the size, complexity, and pace of the business they’ve become.

Phoenix Businesses Are Finally Looking at Surveillance Differently

For a long time, most businesses (not just Phoenix businesses) treated surveillance like a checkbox.

Install a few cameras, make sure they’re recording, and move on.

Today, businesses are looking at surveillance a little differently. Nobody installs a surveillance system expecting something bad to happen. But any business owner who has been part of a liability dispute can tell you that it happens when you least expect it.

A customer claims they slipped in your parking lot, or an employee reports missing equipment. A vehicle is damaged after hours, then someone says one thing happened, and someone else says another.

In moments like these, having clear, reliable footage can make all the difference.

We’re seeing more Phoenix businesses realize that surveillance is more than just security. Now, its biggest advantage lies in helping to protect your business from liability.

The truth is, when something bad does happen, having good (and reliable) footage can help answer questions, resolve disputes, support insurance claims, and provide documentation when the facts really matter.

Bad footage, or no footage at all can leave you relying on assumptions and hearsay.

That’s not a position you want to be in.

For a lot of businesses, replacing an aging surveillance system is about having confidence that if something does happen, they’ll have the information they need to protect their people, their property, and their business.

A System Built for the Business You’ve Become

Phoenix isn’t slowing down anytime soon. Businesses are expanding, properties are getting larger, and operations are becoming more complex.

At the same time, the expectations around surveillance have changed. Business owners want better visibility, more reliable information, and confidence that if something does happen, they’ll have the footage they need to protect themselves.

The truth is, a lot of businesses are still relying on systems that were designed for a much different version of their company.

If your cameras are several years old, if you’ve added locations, expanded your property, or haven’t looked at your surveillance strategy in a while, it may be time to take another look.

Because the best time to find a blind spot isn’t after an incident. It’s before one happens.

Whether you’re upgrading an aging system or starting from scratch, the right surveillance solution should be built around the way your business operates today, and where it’s headed next.

If you’re ready to start planning a surveillance upgrade, we’d love to help you find the perfect match for the unique needs of your business. Contact us for a complimentary consultation today.

AI is changing just about every industry right now. It isn’t necessarily a bad thing, but when it comes to cybersecurity, it gives us much bigger fish to fry.

A recently documented incident known as JADEPUFFER has security researchers paying close attention. It didn’t use a brand-new exploit, an advanced piece of malware, or anything like that.

What’s got researchers biting their nails is how the attack was carried out.

According to security firm Sysdig, JADEPUFFER may be the first ransomware operation executed end-to-end by an autonomous AI agent. The agent reportedly exploited a known vulnerability, moved through the environment, encrypted data, and adapted its approach when it encountered problems along the way.

The techniques themselves were fairly standard. It relied on techniques that experienced attackers already know.

The level of autonomy was not.

While researchers say a human operator still initiated the attack, the incident gives us a glimpse into what future cyberattacks could look like: They’re only going to get faster, more adaptive, and increasingly capable of operating with minimal human involvement.

Here’s what happened and why businesses should be paying attention.

What Happened?

According to Sysdig’s analysis, the attack began with an internet-facing server running an unpatched version of Langflow, a popular tool used to build AI workflows.

The AI agent exploited a known vulnerability, gained access to the environment, and then carried out the rest of the attack chain on its own.

It moved through the network, encrypted 1,342 configuration items, deleted the original files, and ultimately left behind a ransom note.

None of those individual steps is particularly new. Skilled attackers have been using similar techniques for years.

What makes JADEPUFFER noteworthy is that, according to Sysdig, an autonomous AI agent handled the entire process from start to finish. The researchers also observed the agent adapting when it hit problems, retrying failed steps and refining its approach without direct human intervention. That’s definitely new.

In one logged sequence highlighted by Forbes, the agent reportedly went from a failed login attempt to a working fix in just 31 seconds.

Key takeaway: The techniques weren’t revolutionary. The level of autonomy and the speed of the attack was.

Why Researchers Are Paying Attention

The concern isn’t that AI suddenly learned how to hack. The concern is that AI can dramatically lower the cost, time, and expertise needed to carry out cyberattacks.

Historically, launching a ransomware campaign needed skilled operators who knew how to find vulnerabilities, move through networks, and adapt when something went wrong.

According to Sysdig, JADEPUFFER suggests that some of those tasks could now be handled by autonomous agents.

That changes the economics of cybercrime.

If attackers can automate more of the process, they could potentially be able to launch more attacks, against more targets, at a much faster pace than before.

As Forbes noted, the threat is really an ordinary attack that can now operate at machine speed and potentially at a much bigger scale.

For businesses, that’s a really important distinction.

Cybersecurity teams have traditionally been built to defend against human-operated attacks. If attackers increasingly rely on autonomous systems that can act in seconds and run continuously, the challenge of detecting and responding to threats becomes much, much more difficult.

Key takeaway: The real concern is the possibility that familiar attacks could become faster, cheaper, and easier to scale with AI.

What This Means for You

First off, there’s no reason to panic.

JADEPUFFER didn’t rely on a never-before-seen exploit or some advanced piece of malware. According to the reporting, it used a known vulnerability and techniques that attackers already understand.

The bigger takeaway is that AI could make those attacks faster and easier to execute.

As the cost and effort needed to launch cyberattacks decrease, more businesses could find themselves in the crosshairs, including businesses that weren’t considered attractive targets a few years ago.

The good news is that the fundamentals of cybersecurity haven’t changed.

But it is more important than ever to double-check the following:

Keeping internet-facing systems patched and up to date: A lot of attacks start by exploiting known vulnerabilities that already have fixes available. Regular patching reduces the number of opportunities attackers have to gain an initial foothold.

Reduce unnecessary exposure to the internet: Not every system needs to be accessible from the public internet. Limiting what’s exposed can reduce your attack surface.

Protect credentials and sensitive information: User accounts, API keys, and administrative credentials are valuable targets for attackers. Strong passwords, multi-factor authentication, and the right access controls help keep them secure.

ALWAYS monitor for unusual activity: The earlier suspicious behavior is detected, the sooner it can be investigated and contained. Visibility into your environment is critical, especially as these attacks continue to move faster.

Have a reliable incident response plan in place: No business wants to experience a security incident, but preparation is crucial. A documented response plan can help your team act quickly, minimize disruption, and recover faster.

If attacks continue to move toward machine-speed execution, businesses will need to think about how quickly they can identify and respond to suspicious activity.

Key takeaway: AI may change the speed and scale of cyberattacks, but strong cybersecurity fundamentals remain your best defense.

Is This the Beginning of a New Chapter in Cybersecurity?

So, should businesses panic?

No.

The attack itself wasn’t particularly sophisticated. It used a known vulnerability and techniques that attackers have been using for years.

What makes JADEPUFFER interesting is what it might tell us about where things are headed.

If AI can help attackers move faster, adapt on the fly, and launch more attacks at a lower cost, we’re probably going to see a lot more of this kind of experimentation in the years ahead.

The good news is that the advice hasn’t really changed.

The fundamentals still matter. What may be changing is the speed of the game.

Cyberattacks have always evolved, and AI is likely going to be another chapter in that story. The businesses that stay informed, stay proactive, and continue investing in their security foundations will be in a much better position to adapt to whatever comes next.

If cyberattacks start moving at machine speed, businesses can’t afford to stand still.

Want to understand where your biggest security risks are today? Contact us for a complimentary IT assessment and learn how to build a more resilient security strategy.

Imagine this: Every Monday morning, someone on your team spends an hour copying information from one spreadsheet into another, sending the same reports to the same people, and double (sometimes triple) checking that nothing was missed.

It works, but it’s tedious, repetitive, and probably isn’t the best use of their time.

A year ago, solving a problem like that might have meant buying expensive software or hiring a whole development team to build something custom (also expensive).

We’re here to tell you that in 2026, there’s another option.

Vibe coding makes it possible to build custom websites, internal tools, automations, dashboards, and AI-powered applications faster than ever before.

The only question you have to ask yourself before starting isn’t whether you have the skills to build something. Instead, ask yourself if you’re solving the right problem.

Here are five common business challenges that are perfect candidates for vibe coding.

What Exactly Is Vibe Coding?

At its core, vibe coding is using AI to build software by describing what you want in plain English instead of writing every line of code yourself.

Want a customer portal? Tell the AI what it should do.

Need an internal dashboard? Describe the data you want to see.

Looking to automate a repetitive process? Explain the workflow, and AI can help build it.

That doesn’t mean anyone can create secure, production-ready software overnight. The best results still come from good planning, the right tools, and experienced guidance throughout the process.

Think of AI as an incredibly fast developer. It can build remarkably quickly, but it still needs someone to define the vision, ask the right questions, and make sure the final product is reliable, secure, and ready for real-world use.

For more information on vibe coding and to watch us build with it in real time, check out our free webinar.

Automating Repetitive Manual Tasks

If you run a business, manage one, or own one, then you definitely have repetitive, manual tasks. Think about all the times you or a colleague has to copy information from one system to another, update spreadsheets, send the same repetitive emails, or create weekly reports.

None of these tasks is particularly difficult, but they do take a lot of time.

Now, imagine if those tasks happened automatically.

With vibe coding, you can build simple automations that handle repetitive work in the background, freeing up your team to focus on higher-value projects instead of administrative busywork.

The best part? You don’t need a massive software project to make a meaningful impact. Sometimes eliminating just one repetitive task can save hours every week.

Consolidating Scattered Information

Every business has information people need every day.

Policies, procedures, sales documents, training materials, client information… The problem is that it’s usually spread across email threads, shared drives, spreadsheets, and half a dozen different applications.

When employees can’t find what they need, they waste time searching. Or worse, they rely on outdated information.

Vibe coding makes it possible to build internal knowledge hubs and AI-powered assistants that put everything in one place. Instead of wondering where a document lives, employees can simply ask a question and get the answer they need.

The easier it is for your team to find information, the more productive they’ll be.

Simplifying Customer Processes That Take Too Long

How many emails does it take for a customer to get a quote?

Or schedule an appointment?

Or submit a service request?

For a lot of businesses, the answer is “too many.”

Vibe coding makes it easy to build customer-facing tools that streamline these interactions. Whether it’s a quote calculator, appointment scheduler, client portal, or intake form, the right build can reduce back-and-forth while creating a better experience for your customers.

Sometimes the biggest improvements aren’t flashy or expensive. They’re the small frustrations your customers no longer have to deal with.

Making it easier to do business with you is one of the best investments you can make.

Reporting That Takes Hours Instead of Seconds

Every business relies on data to make decisions. The problem is getting it.

If someone has to manually pull reports from multiple systems, update spreadsheets, and piece everything together before a meeting, you’re spending valuable time just preparing the information.

With vibe coding, you can build custom dashboards that bring your most important metrics together in one place. Sales performance, support tickets, inventory, project status, KPIs, etc.

Whatever matters most to your business can be displayed in real time.

Instead of spending time building reports, your team can spend time acting on them.

In the end, better visibility leads to better decisions.

Bridging Disconnected Systems

Most businesses rely on multiple platforms to get work done.

Your CRM is in one place. Your accounting software is in another. Customer requests come in through email, forms, or chat, and someone has to manually move information from one system to the next.

Those small manual handoffs add up. They take time, create opportunities for mistakes, and slow down your team.

Vibe coding makes it possible to connect those workflows with custom tools and automations. Instead of jumping between applications or copying data by hand, you can build solutions that move information where it needs to go automatically.

The result is a smoother workflow, fewer manual tasks, and more time spent on work that actually grows your business.

Your tech should work together, not create more work for your team.

You Don’t Need a Bigger Problem to Justify a Better Solution

When most people think about custom software, they picture massive projects with long timelines and even bigger budgets.

Vibe coding changes that.

Sometimes the most valuable solution isn’t a complex application. It’s a dashboard that saves your team an hour every day. A customer portal that eliminates back-and-forth emails. An automation that quietly takes repetitive work off someone’s plate.

The hardest part usually isn’t building the solution. It’s identifying the right problem to solve and choosing the best approach.

That’s where we can help.

Whether you have a fully formed idea or just know something in your business could work better, our AI Consulting team will help you evaluate your concept, choose the right tools, guide the build process, and make sure your solution is secure before it goes live.

Ready to start building? Check out our Vibe Code Consulting services. Let’s turn your next idea into something real.

Microsoft’s upcoming Microsoft 365 pricing changes have gotten plenty of attention, but the price increase is only part of the story.

If your business relies on Microsoft 365 every day, your next renewal is a really good opportunity to take a closer look at what you’re paying for, what features are included in your plan, and whether your current licensing still makes sense.

The best renewals aren’t the ones that are done automatically; they’re the ones that are planned intentionally.

Before you sign your next agreement, here are five things every business should review to avoid unnecessary costs and get the most value out of your Microsoft 365 investment.

Know What You’re Paying For

Before you look at Microsoft’s new pricing, take a look at your current licensing.

Over time, it’s common for businesses to add users, change roles, add new tools, and evolve. The Microsoft 365 licenses that made sense a few years ago may not be the best fit for you today.

Start by asking a few simple questions:

• Are all assigned licenses still being used?

• Do users have the right licenses for the work they do?

• Are you paying for features your business doesn’t use?

• Are there users who could move to a different plan?

Understanding your current environment gives you a much clearer picture of how the upcoming pricing changes will affect your business, and whether there are opportunities to optimize before your renewal.

Key takeaway: Don’t evaluate the price increase until you know what you’re paying for today, right now.

Look Beyond the Price Increase

It’s easy to focus on the number on your renewal notice. Before you do, take a closer look at what’s included.

A lot of Microsoft 365 plans are gaining additional capabilities, including expanded mailbox storage, enhanced phishing protection, Microsoft Defender, Intune, and improvements to Copilot Chat.

Ask yourself whether these new features could replace products you’re already paying for.

If they do, the increase may not be as significant as it first appears. If they don’t, it’s worth understanding exactly where your budget is going before you renew.

Key takeaway: Evaluate the value you’re receiving, not just the cost of renewal.

Estimate the Impact Before You Renew

Nobody likes surprises. Especially when it comes to IT budgets.

Instead of waiting for your renewal quote to see how the new pricing will affect your business, estimate the impact ahead of time. Having a clear picture of your expected costs makes it easier to budget, evaluate your options, and have more informed conversations before your renewal date arrives.

The earlier you understand the potential impact, the fewer surprises you’ll face when it’s time to renew.

Key takeaway: A little planning now can make your next Microsoft 365 renewal much easier.

Review Your Security Stack

Microsoft is adding more security capabilities to some Microsoft 365 plans, but that doesn’t automatically mean you should overhaul your security strategy.

Instead, use your renewal as an opportunity to review the tools you’re already paying for. If your plan now includes features like Microsoft Defender, Intune, or enhanced phishing protection, determine whether they complement your existing security stack or if they can replace some of the functionality you already have.

Every business has different security needs, so there really isn’t a one-size-fits-all answer. The important thing to remember is that you need to understand what’s included in your licensing and make intentional decisions before your renewal, not after.

Key takeaway: Your Microsoft 365 renewal is a chance to evaluate your security investments, not just your licensing.

Don’t Treat Renewal as a Checkbox

It’s easy to renew your Microsoft 365 licensing and move on.

Don’t do that.

Your renewal is a great opportunity to step back and evaluate whether your techn still aligns with your business.

Have your needs changed? Are your users on the right plans? Are you taking advantage of the features you’re already paying for? Could you simplify your licensing and strengthen your security at the same time?

Taking the time to ask these questions can help you get more value from your Microsoft 365 investment long after your renewal is complete.

Key takeaway: The best Microsoft 365 renewals aren’t automatic; they’re intentional.

Plan Ahead Before You Renew

Microsoft 365 renewals need more than just looking at the price and making choices based on that. They’re a great opportunity to take a closer look at your licensing, strengthen your security, and make sure that you’re getting the most value from your technical investments.

The good news is you don’t have to wait until your renewal arrives to start planning.

We created a free Microsoft 365 Pricing Calculator to estimate how the July 2026 pricing changes could affect your business. Take a closer look at what’s changing and what you need to review before you renew.

A little preparation today can help you make more informed decisions tomorrow.

When Microsoft announced its Secure Boot 2026 certificate update, it sounded straightforward enough: update the firmware, install the latest patches, and move on.

In reality, a lot of businesses are finding the process to be much more involved than they expected.

A successful Secure Boot transition needs multiple layers of validation, staged remediation, and careful coordination between firmware, Windows security updates, BitLocker, and certificate verification. Miss a step, and businesses could be left with non-compliant devices, or worse, widespread BitLocker recovery lockouts.

Rather than treating it like another routine update, we saw an opportunity to build something smarter.

Here is how we used AI and automation to make the Secure Boot transition so much easier.

The Challenge

One of the biggest misconceptions about the Secure Boot 2026 transition is that it’s simply a BIOS update.

It really isn’t.

• Every device has to be evaluated individually

• Some systems need BitLocker suspended before any changes can be made

• Others require Secure Boot to be enabled, a BIOS or firmware update, specific Microsoft security updates, or verification that the new 2023 certificate was actually deployed.

Once everything is complete, BitLocker protection needs to be restored.

To make things even more complicated, not every device follows the same path. Different manufacturers, hardware generations, and Windows update levels all influence what needs to happen next. A device that’s current on its BIOS, for example, may still need Microsoft security updates. Another might need firmware updates before it can receive the new certificates.

In other words, it’s a staged process that requires the right actions, in the right order, on every single machine.

It’s complex and tedious.

Why We Took a Different Approach

As we mapped out the remediation process, it became clear that this wasn’t something we wanted to manage with spreadsheets, manual tracking, or one-size-fits-all deployments.

Every endpoint had to be evaluated individually, and every remediation step had to happen in the right order.

Our goal was to build a process that could safely scale across hundreds (or even thousands) of devices while giving our engineers complete visibility into where every machine stood.

Our Solution

Instead of treating every device the same, we built a staged remediation program that evaluates what each machine actually needs before taking action.

Using Datto RMM, remediation jobs are deployed only where they’re required. BitLocker is safely suspended before changes are made, required firmware and Microsoft’s security updates are applied where needed, and BitLocker protection is restored once the transition is complete.

Behind the scenes, every device is classified based on its current status. Rather than a simple “Pass” or “Fail”, our system identifies exactly which stage each machine is in. Whether it needs BitLocker preparation, Secure Boot enabled, a BIOS update, Microsoft security updates, certificate verification, or escalation.

Datto handles the execution while our custom portal brings everything together into a single fleet view. That gives our team a clear picture of overall progress, what’s been completed, and what still needs attention.

How AI Helped

The Secure Boot 2026 transition doesn’t come with a single playbook.

Microsoft, Dell, and Lenovo each have their own guidance, update requirements, verification steps, and remediation paths. Bringing all of that together into one repeatable process would have taken significant time if done manually.

We used AI to help consolidate those playbooks into a single staged workflow. This made it much easier to determine which devices needed firmware updates, Microsoft security updates, or both.

AI also accelerated the development of the automation scripts by helping build logic to evaluate device state, automate remediation, and incorporate guardrails for common failure scenarios like pending reboots, locked files, and blocked installers.

AI also helped us build the reporting dashboard that gives our team visibility into every stage of the remediation process. Instead of seeing a single “non-compliant” status, we can quickly identify whether a device is waiting on Windows updates, certificate verification, firmware, or another remediation step. This makes it much easier to prioritize the next action.

The Results

By combining AI, automation, and custom reporting, we turned a complex, multi-step remediation process into a structured program that’s easier to manage at scale.

Our engineers can quickly identify which devices need firmware updates, Microsoft security updates, certificate verification, or additional attention, all from a single dashboard.

Datto handles execution, while our custom portal provides visibility into every stage of the transition.

The result is a proactive, repeatable process that helps organizations prepare for the Secure Boot June 2026 deadline with less manual effort and minimal disruption to end users.

Complex IT projects don’t have to become operational headaches.

Whether you’re preparing for a major security initiative, automating repetitive processes, or building custom solutions with AI, our team can help you get there faster. Contact us for your complimentary IT assessment to get started.

There’s nothing worse than investing in a top-of-the-line surveillance system, planning coverage, investing in the right NVR, thinking you’re doing everything right, only for it to fail you when you need it most.

Your cameras can be online, recording, and functioning exactly as intended while still missing the footage you actually need.

The cameras aren’t inherently bad, nor has the NVR run out of storage space. It’s usually as simple as not allocating the right camera to the right location.

Blind spots are hard to identify unless you’re regularly reviewing footage or looking for something in particular, only for it to be out of frame.

If there’s anything you need to remember when you’re planning a surveillance system, it’s this: Bad cameras are rarely the issue. Bad planning is.

In this blog, we’re going to help you cover your bases. Here are the top five surveillance blind spots we see most often, and what you can do about them.

Entrances and Exits Without Identification Coverage

One of the most common surveillance mistakes we see is assuming that because an entrance is covered, it’s automatically protected.

In reality, most entrance cameras are positioned way too high, too far away, or too wide to capture meaningful details. Sure, they can show that someone entered the building, but when it’s time to review footage, identifying that person becomes a lot more difficult.

This is especially common in parking lot entrances, gates, lobbies, and main access points, where the goal should be more than simple activity monitoring. These areas usually serve as the first (and usually the last) opportunity to capture a clear image of a person entering or leaving the property.

When planning surveillance around entrances and exits, camera placement should be designed with identification in mind. That means considering camera angle, distance, lighting conditions, and the level of detail you’ll need if you ever need that footage as part of an investigation.

Parking Lots With Coverage But No Detail

Another common area where surveillance systems fall short is parking lots.

You might have installed a wide-angle camera because it can see the whole parking lot. While it can absolutely capture vehicles coming and going, people walking through the lot, and activity across a large area, you won’t get the details you need if something happens.

If a car is damaged overnight or a hit-and-run occurs, you’ll be able to see that something happened, but not who was involved.

This is why parking lots usually need a combination of coverage and detail. Wide-angle cameras can help monitor overall activity, but they should be paired with cameras strategically positioned to capture identifying information where it matters most.

Loading Docks, Service Areas, and Side Entrances

When businesses think about surveillance, they tend to focus on the most visible parts of the property. The main entrance, the lobby, the front gate, and the pool.

And while those areas are absolutely important, they’re not always where incidents happen.

In a lot of environments, some of the highest-risk areas are the ones employees, vendors, and visitors use every day without a second thought. Loading docks, service entrances, delivery zones, maintenance areas, and dumpster enclosures often see a steady flow of activity but get far less surveillance attention during the planning process.

These locations can become blind spots where unauthorized access, theft, property damage, and other incidents occur outside the view of primary cameras.

Part of the problem is that these areas aren’t always customer-facing, so they tend to get deprioritized. But, from a security perspective, they’re some of the most important areas to monitor.

When planning your surveillance coverage, it’s worth asking a simple question: If something happened tomorrow, would you have the footage you need?

If the answer is no, it may be time to take a closer look at the areas behind the scenes.

Common Areas With Obstructed Views

Some of the most challenging surveillance environments are the spaces people use every day, like the pool, clubhouse, lobby, break room, and shared workspaces, to name a few.

These areas are usually open, active, and filled with architectural features that can interfere with visibility. A camera may technically cover the space, but that doesn’t mean it can clearly capture everything happening within it.

Columns can block key sightlines, for example, or landscaping can create hidden pockets of activity. These introduce unexpected blind spots that aren’t obvious until footage is reviewed after an incident.

This is especially common in shared spaces where people naturally gather, move around, and interact. What looks like comprehensive coverage during installation can leave important areas partially hidden from view.

That’s why your surveillance planning needs to go beyond simply checking whether a camera can see a room. The real question is whether the camera can see the areas that matter most within that room.

The Blind Spot Nobody Talks About: Retention

Not all surveillance blind spots are physical.

Sometimes the footage you need simply isn’t there anymore.

This is one of the overlooked aspects of surveillance planning because everything appears to be working normally. Your cameras are recording, and footage is being stored, right?

Then something happens. That’s when a lot of businesses discover their retention period wasn’t long enough, storage capacity was underestimated, or footage has already been overwritten.

Unfortunately, these problems often go unnoticed until it’s too late to fix them.

Retention planning should be based on a lot more than just available storage. It should account for the number of cameras, recording quality, frame rates, compliance requirements, and how long footage may realistically need to be preserved.

A Surveillance System Is Only as Good as Its Strategy

Surveillance blind spots don’t always look the way people expect.

Sometimes they’re hidden behind a building column, sometimes they’re caused by poor camera placement, sometimes they’re the result of choosing the wrong camera for the environment, and sometimes they’re sitting quietly in the background as footage gets overwritten day after day.

The common thread is that most surveillance issues aren’t discovered during installation. Unfortunately, they’re discovered when someone needs answers, and the system can’t provide them.

That’s why effective surveillance starts long before the first camera is mounted.

At NTS, we help businesses, communities, and multi-site organizations design surveillance systems around visibility, not just camera counts. From coverage planning and camera selection to storage, retention, and long-term support. Our goal is simple: helping you build a system that works when it matters most.

Contact us for a free consultation today.

For a lot of businesses, cyber insurance has become just another line item. You buy a policy, answer a few questions during renewal, and assume it’ll cover your bases if something goes wrong. If you don’t keep up with the cybersecurity space, it makes sense.

That’s exactly why we’re writing this. The cyber insurance process is starting to change, and not enough people are talking about it.

Cyberattacks are becoming a lot more frequent; they’re just not making headlines unless the breached business is huge. This has led insurers to take a much closer look at the businesses they are covering, and the questions they’re asking are only getting tougher.

The good news is, you don’t have to completely reinvent your cybersecurity strategy right before renewal season. You just have to be more strategic about it.

In this blog, we’ll explore why cyber insurance providers are asking tougher questions, what businesses should expect moving forward, and how you can prepare for the increased scrutiny.

Cyber Insurance Is No Longer Just a Safety Net

For years, cyber insurance was thought of as a financial backstop. It was always black and white; if a business was breached, its cyber insurance policy would help cover recovery costs, legal expenses, business interruption, and other losses incurred.

This is how it used to be, to an extent. Today, that expectation is starting to evolve.

Cyber attacks in the 2020s are much more expensive, disruptive, and more difficult to recover from than they were just a few years ago. Ransomware can bring entire operations to a standstill, supply chain attacks can impact thousands of businesses at once, and even a relatively small security incident can trigger big costs.

Because of this, insurers are taking a much closer look at the risks they’re agreeing to cover. For example, instead of just evaluating whether your business might experience a cybersecurity incident, they’re evaluating how prepared you are to prevent and respond to one.

It’s a big shift from shopping around, signing a contract, and feeling secure. Now, the insurer is asking for insurance, and that changes things quite a bit.

The Difference Between Having Controls and Proving Controls

This is where a lot of businesses run into trouble.

Most organizations have cybersecurity controls in place, especially businesses with enough wherewithal to have a cyber insurance policy in the first place. But even if you have multifactor authentication, endpoint protection, and backups, can you prove that those controls are working the way you think they are?

For example, a company may have multifactor authentication enabled, but not for every single user. Backups may exist, but when was the last time they were tested? Endpoint protection may be installed, but alerts aren’t being actively monitored. Security policies may be immortalized on paper, but no one is reviewing them or enforcing them.

From a business perspective, when days are busy and long, these can feel like minor details, a “who wants to breach my small business, anyway?”

But from an insurer’s perspective, they are absolutely critical.

When a business is breached, insurers want to understand what controls were in place at the time, how they were managed, and whether they were functioning properly when the incident occured. The difference between “we had it” and “we can prove it was enforced” is incredibly important because it determines whether your losses will be covered.

It also determines whether you are insurable in the first place.

What Are Insurers Looking For?

While cyber insurance providers may differ in their underwriting requirements, most are looking for the same thing: evidence that you are actively managing cyber risk.

Here are some areas to spotlight:

Multifactor Authentication (MFA): Insurers want to know that critical systems are protected and that MFA is enforced across the board, not just enabled for a handful of users.

Endpoint Protection: Every laptop, desktop, and cell phone connected to your environment represents a potential entry point. Insurers want to see that you have visibility into your endpoints and that you can detect suspicious activity quickly.

Backup and Recovery Processes: Having backups is important, but knowing that they work is even more important. Insurers are placing greater emphasis on backup testing and business continuity planning.

Patch Management: Outdated software is still one of the most common attack vectors. Businesses should have a process for identifying and addressing those vulnerabilities before they can be exploited.

Access Controls: Not every employee needs access to every single system. Insurers often look for evidence that you are managing user permissions and removing access when it’s no longer needed.

Third-Party Risk: Vendors, cloud platforms, and software vendors are now part of your security ecosystem. Understand who has access to your data and what risks those relationships may introduce.

Incident Response and Business Resilience: If a cyber attack happens tomorrow (knock on wood), what happens next? Insurers want confidence that you have a plan and can recover with minimal disruption.

The common thread across all of these areas is preparation. They don’t care so much that you have security tools in place; they want you to demonstrate that those tools and processes are actively working to reduce risk.

How To Prepare Before Renewal

The good news is that preparing for increased scrutiny doesn’t necessarily mean a complete overhaul of your cybersecurity strategy.

In a lot of cases, it’s just about understanding where gaps exist and addressing them before your next renewal, or worse, before a cyber attack puts your controls to the test.

Here’s a short checklist you can follow:

• Your MFA policies: Take the time to verify that MFA is not only available but is enforced across all critical systems and user accounts.

• Test your backups: Don’t sit on this one.

• Audit user access: Review user permissions to eliminate unnecessary risk.

But most importantly, work with your IT partner. A proactive review of your cybersecurity environment can help identify potential gaps before they become bigger problems down the line. It’s a lot easier to take care of any potential issues before renewal season than it is to explain them to underwriting after an incident.

And if you don’t have a security partner, we’d be happy to take a look under the hood and help you cover any unmanned bases. Contact us to schedule your complimentary cybersecurity assessment today.

New day, new cybersecurity headline.

That seems to be the cadence as of late. New cybersecurity warnings from regulators and security researchers have been making the rounds recently, with concerns ranging from political tensions to the growing capabilities of AI-powered tools.

It’s easy to read stories like this and assume they’re only relevant to governments, big banks, and Fortune 500 companies. Unfortunately, they apply to your business, too.

As attackers gain access to better tools and faster ways to identify vulnerabilities and weaknesses, the time between finding that entry point and exploiting it just keeps shrinking.

The good news is that the fundamentals of protecting yourself haven’t really changed, even if the landscape has.

Which is exactly why we’re writing this article. We’re going to break down what the most recent cybersecurity warnings actually mean for your business and the practical steps you should be focusing on right now.

The Threat Environment Is Changing…Fast.

For years, businesses have operated under the assumption that they have time to react. You learn about a vulnerability, security teams check it out, patches are scheduled, systems get updated, end scene. Everyone goes about their days, and everything is fine.

It doesn’t work like this anymore. That timeline is getting much shorter, and fast.

Recent warnings from security regulators and researchers point to a future where attackers can identify, weaponize, and exploit vulnerabilities much faster than they could just a few years ago. In some cases, AI is helping to fast-track parts of that process.

So, what does this mean for your business?

It means the gap between “we know the problem” and “someone is actively taking advantage of it” continues to shrink.

This is one of the reasons we’re seeing a bigger emphasis on vulnerability management, visibility management, and incident response. The businesses that can quickly identify risk and act on it are in a much stronger position than those relying on slower, reactive processes.

In the very recent past, cybersecurity was mostly about reducing risk. Today, it’s becoming a race against time.

You Don’t Need “Frontier AI” to Be Impacted

When conversations turn to frontier AI models, nation-state threats, or advanced cyber abilities, it’s easy to think “That has nothing to do with my small business. Why should I care?”

Valid. What does this have to do with a property management company or a growing business, anyway?

The reality is, you could be indirectly threatened. Attackers don’t need to use cutting-edge AI against your organization specifically. They can use it to scan for vulnerabilities faster, identify targets more efficiently, automate parts of their attacks, or increase the number of phishing campaigns they send.

At the same time, think about how much more connected businesses are in 2026. Everyone uses a cloud platform; you can’t function without your software vendors, third-party providers, and tech partners have become critical parts of your daily operations, whether you realize it or not.

When risks creep up within any of the above, the impact can extend far beyond the big companies that regularly make headlines.

This is why cybersecurity isn’t just an enterprise problem. Businesses of all sizes need to pay attention to the fundamentals and make sure that their environments are prepared to respond.

Let’s get into the recommended actions.

Operational Readiness Matters More Than Ever

One thing stands out in these warnings: the recommended actions aren’t really full of bells and whistles, or overly complicated cybersecurity jargon that most people don’t understand.

The key takeaway is that there is no magic tool, no big revolutionary new tech you need to implement, no AI-powered silver bullet to stop the big bad monster in its tracks.

Instead, the guidance focuses on the same fundamentals cybersecurity experts have been talking about for years.

• Patch known vulnerabilities

• Reduce unnecessary exposure

• Test your backups

• Understand what’s happening in your environment

Why? Despite all of the attention surrounding AI and new/advanced cyber threats, most successful attacks come down to basic security gaps. Systems that haven’t been patched, for example, or exposed services that no one realized were still accessible.

But the most important of all is operational discipline. The businesses that know what they have, understand what their risks are, and have a process in place for responding to them will always be in a stronger position than those operating without visibility or a plan.

In other words, when it comes to cybersecurity, it’s always best to be ready for attacks instead of trying to do damage control when an attack happens.

Why Backup Testing and Visibility Matter

Most businesses in 2026 have backups. Not very many businesses, however, know with confidence that those backups will work when they actually need them.

This is exactly why a lot of the latest cybersecurity recommendations focus not just on having backups but on testing them. A backup that can’t be restored won’t be much help during a ransomware attack, system failure, or a wrench in your operations.

This same principle applies to visibility.

You can’t lock doors you don’t know are there. You can’t patch vulnerabilities you haven’t identified. You can’t respond quickly to threats if you don’t have a clear picture of what’s happening inside your environment.

As attack timelines shrink, visibility becomes your competitive advantage. The faster you can identify a problem, the faster you can contain it.

What You Should Do Right Now

If there’s one takeaway from the latest cybersecurity warnings, it’s this: Now is a really good time to revisit the fundamentals.

Start by reviewing your patch management process. Make sure critical vulnerabilities are being identified and addressed quickly. Take inventory of internet-facing systems and confirm that unnecessary services and ports aren’t exposed.

Next, test your backups. Seeing that they’re there and exist isn’t good enough. Test whether they can be successfully restored if something goes wrong.

It’s also worth evaluating visibility across your environment. Do you know what systems are connected to your network? Are critical assets being monitored? Would you know if something unusual happened tomorrow?

Finally, take a close look at your incident response process. When a new threat creeps up, who is responsible for evaluating it? Your team needs to be able to respond quickly, and they can’t do this without clear escalation paths in place.

Cybersecurity doesn’t have to be overly complicated, but it does need good preparation. The businesses that take the time to strengthen these foundational areas will be much better positioned to handle whatever comes next.

If you need help implementing any of these, or just want to take a look under the hood, contact us to schedule your free cybersecurity assessment.

Thanks for reading Network Thinking Solutions Substack! Subscribe for cybersecurity updates, IT guidance, emerging threats, and practical advice from the NTS team.

FOR IMMEDIATE RELEASE

Network Thinking Solutions Renews SOC 2® Type I Compliance Commitment, Reinforcing Our Commitment to Data Security.

[Westlake Village, CA] — [May 21, 2026] — Network Thinking Solutions (NTS), a trusted managed services provider (MSP) specializing in secure and streamlined IT operations, is proud to announce the successful completion of its latest SOC 2® Type I compliance audit. This milestone reinforces the company’s ongoing commitment to the highest standards of cybersecurity, operational integrity, and the protection of client data.

SOC 2® (System and Organization Controls 2) compliance is a widely recognized auditing standard designed for technology and cloud computing organizations.

It evaluates how effectively a service organization manages customer data based on five “trust service criteria”: security, availability, processing integrity, confidentiality, and privacy.

“Cybersecurity and operational trust are ongoing commitments, not one-time milestones. Successfully completing another SOC 2® audit reinforces the processes, controls, and accountability standards we continue to maintain across our organization and for the clients who trust us with their environments.”-- Wally Hass, CEO, Network Thinking Solutions

The audit was conducted by Advantage Partners & Vanta, an independent third-party CPA firm, which confirmed that NTS’s internal controls and processes meet the stringent requirements set forth by the AICPA.

This compliance assures clients that NTS is equipped to handle their sensitive data with industry-leading care and rigor. It evaluated the design and implementation of controls related to security, availability, and confidentiality across NTS’s operational environment.

As cybersecurity threats continue to evolve, NTS remains focused on continuously strengthening its internal processes, security controls, and operational standards to help support clients across increasingly complex technology environments.

For more information about Network Thinking Solutions and its managed IT services, contact us today.

When people think about cybersecurity risks, they usually picture ransomware, phishing emails, or a dark room with a bunch of screens and a guy in a hoodie creeping on an unsuspecting business.

But sometimes, some of the biggest risks are much more stealthy than that.

Recently, reports surfaced that a public GitHub repository tied to a CISA contractor exposed plaintext credentials, cloud keys, internal systems, and other highly sensitive operational data. The story is shocking on its own, but the bigger takeaway goes far beyond GitHub or this specific incident.

Think about how easily internal processes and temporary workflows can become serious security risks over time. That’s the real takeaway.

It might surprise you to hear that in a lot of cases, cybersecurity failures don’t start with super-advanced hacking techniques on the part of the attacker. It’s more subtle than that.

They usually start with little ingrained habits in your business that no one stopped to question.

In this article, we’re going to dive into how your internal workflows, operational shortcuts, and overlooked processes can become some of the biggest cybersecurity threats facing your business, and what you can do about it.

CISA, The Contractor, and GitHub: What Happened?

According to reports, a public GitHub repository tied to a contractor for CISA exposed a significant amount of highly sensitive operational data, including plaintext credentials, cloud keys, internal system information, and development-related assets.

Security researchers also noted that GitHub’s secret scanning protections had been disabled on the repository, while some credentials appeared to follow weak or predictable password patterns.

This might sound like just a GitHub problem, but the underlying issue was actually operational on the contractor’s part.

The failure point was the workflow surrounding the tools, not the tools themselves.

Before we get into how exactly internal processes become security risks, we need to look a little deeper into what happened here.

The Real Problem Wasn’t GitHub

The thing to keep in mind is that GitHub was just the environment where the exposure happened. The bigger issue was everything happening around it.

• Plaintext credentials

• Weak password practices

• Disabled security protections

• Convenient workflows, not secure ones

This happens way more often than people realize. Over time, businesses will build shortcuts, and what is supposed to be “temporary” becomes a permanent process. Teams need to move fast, and as systems grow increasingly complex, no one stops to ask whether a workflow still makes sense from a security perspective.

Even businesses with advanced infrastructure and dedicated cybersecurity teams can still create major exposure risks without realizing it.

So, let’s talk about what happens when internal processes fall to the wayside in favor of convenience.

How Internal Processes Become Security Risks

Mature cybersecurity means continuously evaluating your operational processes, not just deploying more and more tools to cover as many bases as possible.

Modern environments are deeply interconnected. One domino falls, they all fall. One exposed credential, one overly permissive account, or one insecure workflow can create open doorways for attackers to move in and gain access.

Think about a developer at a fast-moving startup. They have way too much going on to think about those credentials they stored temporarily. Or the admin who created a quick workaround to save time. Or a team that ignored a security warning because that particular workflow is so convenient.

These are the decisions that stop becoming temporary when work piles up, and teams move on to the next priority. These are also the decisions that leadership may not even realize exist at all.

But most importantly, this is how security risks happen, and it’s not always because of malicious intent.

Why This Should Matter to You

It’s really easy to assume that you’ll never be targeted.

Why would you?

Cybercriminals want the biggest fish, not your small or medium-sized business. This is exactly what moves security hygiene to the back burner, and these are the famous last words of so many businesses before they are breached.

Attackers do want the big fish, but they care more about achieving their goal with minimal resistance. They know that the big fish have really big defenses. Smaller businesses then become a very easy and very convenient target.

This is exactly what makes operational security so important. You can invest in the best firewalls, endpoint protection, monitoring tools, and cloud security platforms, but if the underlying workflows aren’t secure, those risks become much harder to see.

And, in modern environments, those workflows don’t always live completely within the four walls of your business. How many vendors do you work with? What about contractors, developers, and third-party platforms? These third parties typically become extensions of your operational environment, too.

What To Do About It

Stories like this are scary, but they’re also a great reminder that cybersecurity reviews need to go beyond the tools you have in place to protect your business. It’s just as important to set aside the time to evaluate your workflows and the operational habits surrounding your environments.

Here is a great place to start:

1. Review where credentials and sensitive information are being stored

2. Audit administrative access and permissions regularly (set a quarterly reminder)

3. Identify legacy workflows or outdated authentication methods

4. Monitor your repositories, cloud environments, and internal tools

5. Look for “temporary” processes that may have unintentionally become permanent

6. Limit third-party access

But most importantly, create space to question how things are done, not just whether they’re working.

And remember, when it comes to cybersecurity, operational convenience and operational security are not always the same thing.

If you need help evaluating legacy workflows, reviewing your operational security risks, or finding potential exposure points in your environment, contact us for your complimentary cybersecurity assessment today.

A manufactured housing operator came to us with one of these challenges. They wanted to create a scalable way for their custom CRM platform to handle email communication across 100 properties.

At first glance, the request seemed straightforward, but as the project evolved, it became clear that the underlying email workflow would have significant implications for security, scalability, long-term maintenance, and cost.

Rather than going ahead with their original design, they came to us to evaluate the bigger picture and build an approach designed to support their business long-term.

Here is how we did it.

The Challenge

We knew that our client’s CRM platform needed to send emails to leads, monitor inboxes for responses, and support communication workflows across nearly 100 properties.

The challenge was that the original design relied heavily on individually licensed Microsoft 365 mailboxes connected through IMAP. On paper, it worked, but operationally, it created some major concerns.

First, there was the cost. Licensing nearly 100 mailboxes adds up fast, especially when you also have to factor in third-party mailbox costs.

Second, there was the long-term technology concern. Microsoft has been steadily moving away from legacy authentication and older email protocols in favor of more modern, secure workflows. Continuing to build around IMAP raised questions about scalability, maintainability, and future compatibility.

The bigger issue wasn’t “Can we make this work?”

It was, “Can we build this in a way that still makes sense three years from now?

Our Approach

Instead of moving forward with the original design, our team worked with our client to create a more modern approach built around Microsoft Graph API and OAuth-based authentication workflows.

The goal was to reduce unnecessary licensing overhead while aligning the environment more closely with Microsoft’s long-term security direction.

Rather than relying on individually licensed mailboxes tied to legacy protocols, the proposed approach leveraged shared mailboxes and Graph API permissions to handle communication between the CRM and Microsoft 365.

Our client was already familiar with Graph API workflows from previous Outlook integrations within their software, which helped push conversations around feasibility and implementation.

Just as importantly, both of our teams agreed not to rush a full deployment immediately across all properties.

Instead, the plan was to start with a single property to test the workflow, validate the integration, and identify any unknowns early, before scaling the solution further.

Building the Integration

To support the new workflow, the proposed design centers around a secure App Registration in Microsoft Entra ID. This would allow the CRM platform to use Graph API permissions to securely send and receive email activity without relying on traditional mailbox authentication workflows.

The CRM itself would connect directly to the inboxes to manage outbound communication and monitor for customer responses. This would take away the need for more forwarding workflows or more complicated mailbox management processes.

We also worked closely with our client to review authentication requirements, discuss implementation options, and align the technical workflow with how the CRM already operated internally.

At the same time, the project was approached pragmatically. While Graph API was the preferred direction, the team also talked about contingency options, including the possibility of leveraging a third-party email server if we ran into any issues during testing.

Our ultimate goal was to modernize the workflow by building something flexible, scalable, and realistic for long-term operational use.

Why This Matters

Projects like this are becoming more and more common as businesses try to modernize older workflows while balancing security, operational efficiency, and cost.

For our client, the conversation evolved past simply creating mailboxes. It became an opportunity to reevaluate how the environment was being designed from the ground up.

In the end, we were able to reduce unnecessary licensing overhead, move away from legacy authentication methods, and build a workflow that was better aligned with Microsoft’s long-term ecosystem.

It also reinforced the value of slowing down before scaling.

By testing the integration with a single property first, both of our teams created the space we needed to validate the workflow while identifying potential speed bumps early. It also built confidence in the approach before expanding it across the business.

Sometimes the best solution isn’t the fastest deployment, it’s the one designed to remain secure, scalable, and maintainable long after the initial rollout.

Still relying on legacy email workflows or evaluating how your applications integrate with Microsoft 365? We help businesses like yours modernize these environments with scalability and security in mind. Contact us today for a complimentary evaluation.

Most of our clients have us fully manage their IT, which means computers, switches, firewalls, access points, and more. This client, however, chose not to have us manage their community networks. Fair enough, but when you’re asked to provide an inventory without network monitoring, it quickly becomes a challenge.

The buyer sent over an Excel spreadsheet for our client to complete. Now, for those who know me, sending spreadsheets back and forth as attachments in 2025 makes me cringe. That was common in 2010, but it’s not 2010 anymore. There are far better ways to handle this today. When I see IT professionals use this method…ugh

At first, I considered importing the spreadsheet into Manus and having Manus spin up a website for the project. That is an interesting idea, and one I may revisit. But instead, I threw it into Lovable. We had rebuilt our website entirely using Lovable (with Cursur and Claude Code) a few months back, so it felt like the right place to start. Lovable did a great job. It turned the Google Sheet version of the spreadsheet (I avoid Excel whenever possible these days) into a clean, well-structured web form.

The form was lengthy and detailed, so I realized users would likely need to start, pause, and return later to complete it. Questions like, “What brand is that router?” or “Can we get the exact model of the printer?” naturally came up. Photos were also being collected, which added complexity.

While working in Lovable, I encountered a menu issue that had been bugging me, so I switched to Cursur (easy to do since our site runs through GitHub). Lately, I have found myself hopping between tools, and GitHub integration makes that seamless. Once the menu was fixed, I worked on form functionality.

Because the form originated as a spreadsheet, both sides wanted the data to still live in a spreadsheet format. The submissions were already being saved into Supabase, but I set up an Edge Function to automatically sync everything into a single Google Sheet. That way, the sheet refreshed in real time anytime a new community was added or updated.

I also built in email notifications for users when their form was created, including a code so they could return and update it. SMTP2Go made that easy. I deliberately kept the emails simple, avoiding large, messy data dumps. The data itself is cleanly stored in Supabase and the synced Google Sheet.

I started this project around 6 a.m. and wrapped up around 11 a.m. Realistically, the focused work was 2–3 hours — the rest was split with emails and other projects.

In the end, it was another reminder of how quickly technology is moving. It’s not about passing around Excel files in 2025; that went out years ago. It’s about leveraging modern tools that let you build fast, flexible solutions without needing off-the-shelf products like Typeform. I like Typeform, but it costs money. These days, more and more can be built from scratch in just a few hours, and we’re seeing that across our daily work.

Last week I had the opportunity to speak at the 2025 Western Manufactured Housing Communities Association (WMA) Convention & Expo in Reno, Nevada. It was a fantastic event that brought together community owners, operators, and technology partners from across the country to discuss innovation, operations, and the growing role of cybersecurity in our industry.

What We Covered

My session focused on Cybersecurity and IT for 2025, specifically designed for manufactured housing and RV community operators. We discussed practical, real-world steps that community owners and management teams can take to strengthen their technology foundations. Key areas included:

• Microsoft 365 Security Best Practices – using conditional access and built-in tools to reduce phishing risk and improve compliance.

• Desktop and Endpoint Cybersecurity – ensuring every device is monitored and protected under a SOC 2-aligned framework.

• Camera Systems and Physical Security – integrating network-connected surveillance systems safely and efficiently.

• AI Tools for Everyday Use – exploring how artificial intelligence can help reduce manual work, improve communication, and support resident engagement.

• Building a Simple Website with Lovable – a short demo showing how property managers can create professional websites in minutes. You can try it yourself at lovable.dev.

• Windows 10 End-of-Life – what every operator needs to do before Microsoft ends support in October 2025.

You can view my full presentation slides here: WMA 2025 Presentation Slides

Email Security Findings at WMA 2025

Throughout the conference, our team at Network Thinking Solutions spoke with and tested the email-security configurations of more than 75 companies using our Mail Security Check tool.

The results were eye-opening:
Only one company had a fully correct setup of SPF, DKIM, and DMARC records.

This highlights just how far the industry still needs to go to strengthen protection against spoofing and phishing attacks. Email remains one of the most common entry points for security breaches, and proper DNS configuration is one of the simplest and most effective defenses.

Looking Ahead to TMHA 2025

Next up, Network Thinking Solutions will be at the Texas Manufactured Housing Association (TMHA) Annual Convention this week.
We’ll have a booth on the expo floor and are looking forward to connecting with community owners, vendors, and technology partners to continue the conversation about cybersecurity, IT automation, and AI tools shaping the future of manufactured housing.

Learn more about the event here: TMHA Annual Convention

Final Thoughts

Events like WMA and TMHA underscore how vital technology has become to the manufactured housing sector. Whether it’s email security, camera networks, or AI-driven automation, every step toward modernization makes communities safer and more efficient.

At Network Thinking Solutions, we’re proud to help operators across the country build secure, connected, and forward-looking communities.

Visit networkthinking.com to learn more about how we support MH and RV operators nationwide.

Background

Our initial goal was to provide a seamless remote support experience by embedding the BeyondTrust (Bomgar) support portal directly into our website, networkthinking.com. However, BeyondTrust explicitly prohibits embedding its portal into third-party sites to mitigate cross-site scripting (XSS) risks. They typically have customers use an external page, which has served us well, but prevents integration into a standard website. Your limited what you can do on that page.

Because of this limitation, we pivoted to using the BeyondTrust API, which allowed us to securely recreate the support workflows on our own platform.

About BeyondTrust Remote Support (Bomgar)

BeyondTrust Remote Support, formerly known as Bomgar, is an enterprise-grade remote support solution designed for IT teams, help desks, and service providers. It allows technicians to securely access desktops, laptops, servers, and mobile devices across multiple platforms—whether users are on or off the corporate network. Key features include session recording for compliance, support for Windows, macOS, Linux, iOS, and Android, seamless integration with ticketing systems, and advanced security controls such as granular permissions and audit trails. The main benefits are faster problem resolution, reduced downtime, enhanced end-user satisfaction, and compliance-ready security that meets enterprise and regulatory standards

Technical Approach

Phase 1 – Local Node.js API Server

I began with a lightweight Node.js server that handled communication with the BeyondTrust API. This server:

• Fetched available representatives in real time.

• Generated session keys on demand.

• Provided API endpoints to the frontend for listing reps and starting sessions.

The first version was a simple HTML page (support.html) where reps were listed and clients could start sessions directly

Phase 2 – Extending for Flexibility

Our support team needed more options than just a rep list. They also required:

• A “General Support” session that automatically generates a session key.

• A manual session key entry for clients provided with keys.

I extended the backend and frontend to support both flows, giving clients flexibility in how they start sessions.

Phase 3 – AI-Assisted Migration to Supabase

To reduce overhead from hosting a separate backend, I used AI-powered tools to accelerate development:

• ChatGPT was used to troubleshoot API flows, refine Node.js logic, and assist in translating backend code into Supabase Edge Functions.

• Cursor (AI coding environment) helped convert the Node.js server into a Supabase Edge Function, making the system fully serverless.

• Lovable (AI UI generator) was used to modernize the frontend. It transformed the original support.html into a branded index.html consistent with our website’s look and feel.

This AI-assisted workflow let us move quickly from prototype to production without a large development investment

.

Final Implementation

The finished version provides a smooth, branded support experience:

• Real-time technician availability pulled from BeyondTrust.

• A “General Session” option that instantly generates a session key and launches the support client.

• Manual session key entry for pre-created sessions.

• Modern UI aligned with our brand, powered by AI-assisted frontend design.

• No backend server to maintain—Supabase Edge Functions handle the API logic.

  

  
  

Key Benefits

• Security-first design: Compliant with BeyondTrust restrictions while avoiding XSS risks.

• AI-accelerated development: ChatGPT, Cursor, and Lovable enabled rapid prototyping, troubleshooting, and design alignment.

• Client-first experience: Multiple entry points into support sessions (general, rep-specific, or key-based).

• Operational efficiency: No more dedicated backend server; Supabase handles scaling and availability.

• Brand consistency: The interface matches our website, creating a seamless client journey.

👉 This project shows how combining APIs, serverless functions, and AI-powered development tools can transform a vendor’s restricted support portal into a custom, branded, and modern client experience.

Viktoriia Krasikova did a great job on this project, taking on the lion's share of the work.

Recent advancements in AI are reshaping IT service desk automation in ways that are especially valuable for Managed Service Providers (MSPs). Beyond writing assistants like Grammarly, AI now enables automation of tasks that once required hiring developers or making significant investments.

At Network Thinking Solutions, we’ve been experimenting with these tools and building them into our workflows. Having a strong internal team gives us a unique advantage, but what excites me most is that some of the biggest long-standing pain points in IT support are finally solvable.

The Ticketing Pain Point Every MSP Faces

One of the most time-consuming parts of IT support has always been finalizing tickets after remote support sessions. Documenting everything thoroughly is critical, but it pulls technicians (myself included) away from helping the next client. Skipping documentation creates bigger problems later, yet doing it right has always been tedious.

Why We Still Use Bomgar (BeyondTrust) for Remote Support

For over a decade, we’ve relied on Bomgar (well before BeyondTrust acquired them). We initially chose it because it provided features our RMM couldn’t:

• Recorded sessions for accountability

• Linux support for technicians

• Built-in chat for client communication

• Safe Mode with Networking for reboots

While our RMM has remote access, Bomgar’s screen recording feature remains invaluable. It helps technicians remember what was done, gives clients visibility, and allows us to quickly review mistakes and retrace steps. After each client session, the details of the session and a link to the recording are put into an Autotask ticket via API. The client then waits for our team to update the recording ticket with our notes and summary of the resolution.

AI and IT Service Desk Automation: The Breakthrough

When OpenAI first launched ChatGPT, my immediate thought was: could AI watch our session recordings and generate ticket summaries automatically?

The challenge: AI tools could summarize transcripts, but our Bomgar recordings didn’t produce transcripts. I tested ChatGPT, Claude, Gemini, Mistral, DeepSeek, and others, with no success.

That changed when I discovered Google AI Studio, which can summarize YouTube videos. Uploading a Bomgar session video produced accurate, concise summaries. From there, the team went further:

• Upload Bomgar recordings directly via Google AI Studio’s API (no YouTube needed)

• Generate session summaries instantly

• Feed those summaries into Autotask tickets

• Notify technicians in Slack for quick review

How We Integrated Google AI Studio, Autotask, and Slack

Because we already had Slack and Autotask integrated, connecting everything was straightforward. Now, here’s how the process flows:

1. Record session in Bomgar (as always).

2. Send to Google AI Studio API → AI generates a session summary.

3. Automatically attach the summary to the correct Autotask ticket.

4. Send Slack notification so the technician can review and finalize.

The result? Remote support ticket automation that saves time, improves accuracy, and keeps both technicians and clients happy. The upload to Google AI Studio is automatically done in the background, and the team member is sent a DM (Direct Message) in Slack when done.

For those wanting to dive deeper, we use Google AI Studio, Gemini (gemini-2.5-pro), Bomgar (Beyond Trust), FFmpeg, SQLite, Slack, Autotask, Python, and GitHub to create the solution we wanted.

Version 2 of this, we plan to merge what we already do today with Slack and Autotask. Once the tech receives the DM, they will be able to adjust Issue Type, Ticket Status, and other key fields in Slack, add any notes, and update the ticket within Slack, without ever going to Autotask to interact with the ticket.

The Results: Faster Ticket Closure and Happier Clients

The impact has been tremendous:

• Clients get immediate, detailed updates after remote sessions.

• Technicians save time by focusing on support instead of tedious ticket notes.

• Documentation is consistent, transparent, and always tied to session recordings.

In short, AI is no longer a “nice-to-have”; it’s becoming essential for MSPs looking to scale IT service desk efficiency.

Here is a screenshot of the completed summary posted to the Autotask ticket. We do a lot of work with Manufactured Housing and the property owners. The example below uses the website manageamerica.com and shows how we help our clients in all facets of support, such as troubleshooting a website and then helping to open a ticket. The details pulled from the recorded sessions are invaluable.

👉 If you’re interested in how we’re applying AI automation for MSP workflows, or want to see what’s possible in your environment, visit Network Thinking Solutions to learn more.