# Stabilise > Apple-specialist Managed Service Provider in London. We design, run, and secure Apple-first IT environments for creative agencies, film and TV production, architecture practices, and growth-stage startups across the UK. Cyber Essentials Plus certified, Apple Authorised, and not Apple-exclusive: Windows and cloud platforms are supported where they're part of the fleet. Stabilise Ltd is a London-based Apple-specialist Managed Service Provider founded in 2024 by Dustin Rhodes and Alan Avins, combining over three decades of enterprise Apple expertise. Legal entity: Stabilise Ltd Address: 6-7 St Cross Street, London, EC1N 8UB Phone: +44 203 355 7522 Email: hello@stabilise.io LinkedIn: https://www.linkedin.com/company/stabilise X: https://x.com/StabiliseLDN YouTube: https://www.youtube.com/channel/UCbKS45GOup2Rr675eSRLBBQ GitHub: https://github.com/Stabilise Certifications: Apple Authorised Service Provider (AASP), Apple Certified Support Professional (ACSP), Apple Certified Macintosh Technician (ACMT), Jamf 300, ISC2, Cyber Essentials Plus. Geographic coverage: on-site across London Zones 1-3, remote UK-wide. Premium-tier urgent tickets have a 15-minute response SLA; other tiers and ticket priorities have their own response targets documented in client agreements. ## Services - [Infrastructure Architecture](https://stabilise.io/services/infrastructure-architecture): Enterprise Apple infrastructure design and management. 99.9% uptime through zero-touch deployment, proactive monitoring, and ecosystem design. - [Apple IT Support London](https://stabilise.io/services/apple-it-support-london): Specialist Apple IT support for London businesses. Less than 15 minute emergency response. 95% same-day resolution by real engineers. - [Enterprise Security](https://stabilise.io/services/enterprise-security): Enterprise Apple security with zero breaches. 99.7% threats blocked. Cyber Essentials Plus compliance built into every engagement. - [Technology Strategy](https://stabilise.io/services/technology-strategy): Fractional CTO services for growing businesses. Quarterly technology planning with 85% implementation rate across all clients. - [Projects](https://stabilise.io/services/projects): Standalone Apple IT projects from £1,500 to £75,000+. Network builds, migrations, NAS deployments, office fit-outs, and Cyber Essentials certification. - [On-Site IT Support](https://stabilise.io/services/on-site-it-support): On-site Apple IT support across London. Less than 90 minute arrival in Zones 1-3. 95% same or next-day handling for all requests. - [AI & Automation](https://stabilise.io/services/ai-automation): Operations automation for London's fastest-growing firms. We connect your systems so your team can focus on the work that matters. First automation live in 3 weeks. ## Industries - [Film & TV Production IT Support](https://stabilise.io/industries/film-tv-production): Specialist Apple IT support for film and TV production companies in London. Rapid deployment, on-set support, and infrastructure that keeps productions running. - [Apple IT for Creative Agencies](https://stabilise.io/industries/creative-agencies): Managed Apple IT for London creative agencies. Infrastructure, support, and security designed for Mac-heavy teams running Adobe, Figma, and creative workflows. - [Apple IT for Architecture Practices](https://stabilise.io/industries/architecture-practices): Specialist Apple IT support for architecture practices in London. High-performance Mac infrastructure for CAD, BIM, and 3D rendering workflows. - [IT for Startups](https://stabilise.io/industries/startups): Apple infrastructure, identity, and support built for startups that move fast. From your first 5 Macs to your 50th, without hiring an IT team. ## Key Pages - [About](https://stabilise.io/about): Mission, values, and delivery methods. - [Team](https://stabilise.io/team): The people behind Stabilise. - [Contact](https://stabilise.io/contact): Get in touch. - [Pricing](https://stabilise.io/pricing): Tier structure and quote builder. - [Apple Authorised Partner](https://stabilise.io/apple-partner): Apple partnership credentials and meaning. - [Mac Business Guide](https://stabilise.io/mac-business-guide): Free guide to running a Mac-based UK business. - [Email Security Audit](https://stabilise.io/email-security-audit): Free DMARC, SPF, and DKIM check. - [Mac Support London](https://stabilise.io/mac-support-london): London-specific Mac support landing page. - [Slack AI Bot](https://stabilise.io/slack-ai-bot): Slack-based IT helpdesk bundled with managed plans. - [Projects](https://stabilise.io/projects): Case studies of completed engagements. ## Blog - [Okta vs Entra ID vs Google vs JumpCloud: Choosing an Identity Provider for a Mac-First Business in 2026](https://stabilise.io/blog/okta-vs-entra-id-vs-google-vs-jumpcloud-mac-idp-comparison-2026): Okta, Microsoft Entra ID, Google Workspace, and JumpCloud compared for Mac-first businesses. Platform SSO support, Apple Business Manager federation, MFA experience, and 2026 pricing, from an Apple MSP that deploys them. - [Platform SSO on macOS 27: one login for the Mac and everything else, no Microsoft required](https://stabilise.io/blog/platform-sso-macos-27-mac-login-without-microsoft): macOS 27 moves Platform SSO into Declarative Device Management and adds a web-based login window, so staff sign in to the Mac with your identity provider and inherit that session everywhere. Here is how it works, the exact Apple keys, and why you do not need Microsoft Entra or Intune to run it. - [macOS 27 changes how Macs are managed: binary control is in, PPPC is out](https://stabilise.io/blog/macos-27-mdm-binary-control-pppc-replacement-mac-admins): WWDC 2026 brought two big shifts for managed Macs: native binary allow and deny lists through the Endpoint Security framework, and a new declarative privacy framework that replaces PPPC. Here is what changes, with the exact MDM keys, and what UK businesses should do before the autumn release. - [We Couldn't Buy the Board We Needed, So We Designed Our Own PCB with Claude Code](https://stabilise.io/blog/fusb302b-usb-c-pd-breakout-pcb-claude-code): We needed a USB-C Power Delivery breakout for a hardware project and the board that fits can't be bought right now. So we designed and manufactured our own with KiCad and Claude Code. Here's the full build, including the mistakes. - [Is Munki Still Relevant in 2026? Yes, But Not as Your MDM](https://stabilise.io/blog/is-munki-still-relevant-2026): Munki is alive in 2026: version 7 is a full Swift rewrite supporting macOS 26. But it was never an MDM. Here's where Munki still wins, where Jamf, Mosyle and Intune take over, and the pairing most teams should run. - [Your Passkey Rollout Won't Fail on the Cryptography. It'll Fail on Recovery.](https://stabilise.io/blog/enterprise-passkey-rollout-fails-on-recovery-not-cryptography): Passkeys map cleanly to FIDO2 and the maths is bulletproof. Enterprise rollouts still break, on recovery, mixed fleets, and enrollment. Here's how to do it properly on a Mac-first estate. - [Mac-specialist MSP vs Windows-first generalist: what Mac-heavy teams need to know](https://stabilise.io/blog/mac-specialist-msp-vs-windows-first-generalist-uk): Why a Mac-specialist MSP beats a Windows-first generalist for Mac-heavy UK teams. The IBM support data, where Active Directory and RMM tools fail on macOS, and how to tell if your provider is genuinely Apple-capable. - [ClickFix on Mac: the attack that tricks your own staff into running malware](https://stabilise.io/blog/clickfix-mac-attack-staff-running-malware-uk-businesses): ClickFix tricks Mac users into pasting a malware command into Terminal themselves. Here is how it works, why it walks past notarisation and even passkeys, the macOS Tahoe 26.4 paste warning, and what UK businesses should do. - [Jamf Protect vs CrowdStrike vs SentinelOne vs Sophos: A 2026 EDR Comparison for UK Businesses](https://stabilise.io/blog/jamf-protect-vs-crowdstrike-vs-sentinelone-vs-sophos-edr-mac-comparison-2026): Jamf Protect, CrowdStrike Falcon, SentinelOne Singularity, and Sophos Intercept X for Mac compared. 2026 pricing, macOS depth, ransomware rollback, managed services, and how to choose for UK businesses. - [Mac Security Baselines: What NCSC and CIS Want UK Businesses to Configure](https://stabilise.io/blog/mac-security-baselines-ncsc-cis-uk-businesses): NCSC's macOS guidance and the CIS Apple macOS Benchmark cover most of what UK businesses need on Mac. Here's what they say, where they overlap, and what to do about macOS Tahoe. - [Apple Business: When the Free Built-in MDM Is Enough (and When to Upgrade) for UK Businesses in 2026](https://stabilise.io/blog/apple-business-built-in-mdm-when-to-upgrade-uk-2026): Apple Business launched on 14 April 2026 with free built-in MDM, replacing Apple Business Manager and Apple Business Essentials. Here's when it's enough for UK SMEs and when you need Jamf, Intune, or Iru instead. - [Jamf Pro vs Microsoft Intune vs Iru: A 2026 Apple MDM Comparison for UK Businesses](https://stabilise.io/blog/jamf-pro-vs-microsoft-intune-vs-iru-apple-mdm-comparison-2026): Jamf Pro vs Microsoft Intune vs Iru (formerly Kandji) for Apple device management in the UK. 2026 pricing, feature depth, identity integrations, and how to choose. - [Passkeys for Business: Ditching Passwords on Mac, iPhone, and iPad](https://stabilise.io/blog/passkeys-for-business-ditching-passwords-on-mac-iphone-ipad): Passkeys are replacing passwords across the Apple ecosystem. Here's what UK businesses need to know about deploying them on Mac, iPhone, and iPad in 2026. - [Mac vs Windows Total Cost of Ownership for UK SMEs](https://stabilise.io/blog/mac-vs-windows-total-cost-of-ownership-uk-smes): Macs cost more upfront but less over time. Real TCO numbers for UK businesses with 10 to 200 staff, covering hardware, support, security, and lifespan. - [WWDC 2026: What Apple's Announcements Will Mean for Your Business](https://stabilise.io/blog/wwdc-2026-what-apple-announcements-mean-for-your-business): Apple's WWDC 2026 is weeks away. Here's what UK businesses running on Mac, iPhone, and iPad should be watching for, and how to prepare for the changes coming this autumn. - [Traditional VPNs vs Tailscale and Twingate: Which Remote Access Model Fits Your Business?](https://stabilise.io/blog/traditional-vpn-vs-tailscale-twingate-zero-trust-remote-access): Traditional VPNs vs zero-trust tools like Tailscale and Twingate. We compare setup, security, ease of use, and MDM deployment for UK businesses. - [Cyber Essentials v3.3: The Complete Guide to April 2026 Changes](https://stabilise.io/blog/cyber-essentials-v3-3-the-complete-guide-to-april-2026-changes): Cyber Essentials v3.3 takes effect 27 April 2026. Cloud services now mandatory in scope, MFA is a hard fail, and stricter scoping rules apply. Complete guide to compliance. - [Why Everyone's Buying Mac Minis for Clawdbot – What London SMEs Need to Know](https://stabilise.io/blog/why-everyones-buying-mac-minis-for-clawdbot-what-london-smes-need-to-know): Clawdbot is driving Mac mini sales across Silicon Valley. We explain what it does, why safer alternatives like n8n exist, and what London businesses should consider. - [Fortinet Firewalls Are Getting Hacked Even After Patching CVE-2025-59718 – What UK Businesses Need To Do Now](https://stabilise.io/blog/fortinet-firewalls-hacked-after-patching-cve-2025-59718): Fortinet admins report compromises on patched FortiGate devices. CVE-2025-59718 bypass actively exploited. What UK businesses must do now to secure network infrastructure - [The £13,200 Cloud Storage Bill That Could Become a £4,200 One-Time Investment](https://stabilise.io/blog/the-large-cloud-storage-bill-that-could-become-a-small-one-time-investment): London creative agencies spend £13,200 on cloud storage over 5 years. A managed NAS costs £4,190. We handle the complexity so you get 215% ROI and 800MB/s performance. - [Cyber Essentials Plus: Why Our Clients Pass Without Scrambling](https://stabilise.io/blog/cyber-essentials-plus-why-our-clients-pass-without-scrambling): Cyber Essentials Plus certification should confirm what's already true, not require a scramble. Here's how we make compliance a natural outcome of proper IT management. - [What Is IT Consultancy? A UK Business Guide to Strategic Technology Advisory](https://stabilise.io/blog/what-is-it-consultancy-a-uk-business-guide-to-strategic-technology-advisory): IT consultancy means strategic technology guidance, not just break-fix support. Learn how UK businesses use IT consulting to drive growth, reduce costs, and plan ahead. - [How to Accelerate CVE Remediation with MDM](https://stabilise.io/blog/how-to-accelerate-cve-remediation-with-mdm): Apple patched two WebKit zero-days exploited in targeted attacks. Here's how MDM accelerates remediation for company devices, what BYOD self-enrolment offers, and individual se - [Identity Management Platform Showdown: Which SSO and IAM Solution Works Best for UK Businesses](https://stabilise.io/blog/identity-management-platform-showdown-which-sso-and-iam-solution-works-best-for-uk-businesses): Comparing Okta, Microsoft Entra ID, Google Identity, JumpCloud and open source IdP platforms for UK businesses. Real pricing, security track records, and which fits. - [What is the difference between Onedrive and Sharepoint?](https://stabilise.io/blog/what-is-the-difference-between-onedrive-and-sharepoint): OneDrive vs SharePoint explained: Learn when to use personal storage vs team collaboration, how they work together on Mac, and which files belong where in Microsoft 365. - [Apple's RDMA Revolution: How Mac Clusters Are Changing Local AI Hosting](https://stabilise.io/blog/apples-rdma-revolution-how-mac-clusters-are-changing-local-ai-hosting): Apple's macOS 26.2 introduces RDMA over Thunderbolt 5, enabling cost-effective Mac clusters for private AI hosting. Technical guide plus real-world performance data included. - [The Creative Remote Access Challenge](https://stabilise.io/blog/the-creative-remote-access-challenge-vpn): Transferring 4K projects over VPN is painfully slow. London's leading creative studios use a different approach: workstation-over-VPN eliminates file transfers entirely. - [Film Production IT Support London: Why Generic IT Providers Fail Creative Teams](https://stabilise.io/blog/film-production-it-support-london-final-cut-pro-infrastructure): Why do film productions struggle with corrupted 4K footage and render farm failures? Generic IT providers don't understand creative workflows. Here's what works instead. - [Wi-Fi for Business: Why Most London Companies Get It Wrong (And How to Fix It)](https://stabilise.io/blog/wifi-for-business-london): 94% of UK businesses face poor Wi-Fi. Learn why most London offices get it wrong and how UniFi infrastructure solves connectivity problems properly. - [What IT Outsourcing Means for UK Businesses](https://stabilise.io/blog/what-it-outsourcing-means-for-uk-businesses-and-why-most-get-it-wrong): IT outsourcing means strategic partnership, not cheap support. Learn what UK businesses should expect, questions that matter, and red flags that cost thousands. - [Are Password Managers Safe? What Businesses Need to Know](https://stabilise.io/blog/are-password-managers-safe-what-businesses-need-to-know): Password managers are safe when used properly. We compare 1Password, Bitwarden, Keeper, and Dashlane for London businesses, with honest guidance on implementation and security. - [Is Apple Passwords Enough for Your Business, or Do You Still Need 1Password?](https://stabilise.io/blog/is-apple-passwords-enough-for-your-business-or-do-you-still-need-1password): Apple Passwords vs 1Password for UK businesses: Free doesn't mean suitable. Why enterprises need dedicated password managers for compliance, audit trails and team security. - [Windows Server 2012 R2 End of Support: What to Do Next](https://stabilise.io/blog/windows-server-2012-r2-end-of-support-what-to-do-next): Windows Server 2012 R2 ended support in October 2023. Learn what this means for security and compliance, your migration options by workload, and practical next steps. - [98% of London's Creative Businesses Have Broken Email Security (And Don't Know It)](https://stabilise.io/blog/98-percent-of-londons-creative-businesses-have-broken-email-security-and-dont-know-it): We audited 265 London creative businesses. 98% lack email encryption, 56% have no authentication, 41% no impersonation protection. Here's what SPF, DKIM, DMARC and MTA-STS do. - [The UK Business Guide to Zero-Touch Mac Deployment (2026 Edition)](https://stabilise.io/blog/zero-touch-mac-deployment-complete-setup-guide-for-uk-businesses): How to set up zero-touch Mac deployment in 2026 using Apple Business, Blueprints, and MDM. Covers automated enrolment, identity, FileVault, UK GDPR compliance, and a step-by-step checklist. - [Gmail's Gemini AI Update: What UK Businesses Need to Know About Email Privacy](https://stabilise.io/blog/gmails-gemini-ai-update-what-uk-businesses-need-to-know-about-email-privacy): Google's Gemini AI in Gmail raises real privacy concerns for UK businesses. Learn what's changed, GDPR implications, security risks, and how to protect your business data. - [Should Your Business Deploy Cloudflare WARP? A Comprehensive Analysis for UK Enterprises](https://stabilise.io/blog/should-your-business-deploy-cloudflare-warp-a-comprehensive-analysis-for-uk-enterprises): Should UK businesses deploy Cloudflare WARP? We analysed 135+ sources to reveal the truth behind the Zero Trust hype. Real advantages, hidden trade-offs, and who benefits most. - [The Rise of Mac in UK Finance: Why Banks Are Switching from Windows](https://stabilise.io/blog/the-rise-of-mac-in-uk-finance-why-banks-are-switching-from-windows): UK banks are quietly deploying thousands of Macs. Discover why financial institutions are switching from Windows, driven by security, compliance, and surprising cost savings. - [iOS Self-Enrollment for MDM: Why Your Personal iPhone is Safer Than You Think](https://stabilise.io/blog/ios-self-enrollment-for-mdm-why-your-personal-iphone-is-safer-than-you-think): Worried about work MDM on your personal iPhone? Apple's User Enrollment uses cryptographic separation to keep your photos, messages, and browsing private. Here's how it works. - [MacBook Pro M5: What Your Business Needs to Know](https://stabilise.io/blog/macbook-pro-m5-what-your-business-needs-to-know): Apple's M5 MacBook Pro: what it means for your business fleet and Intel migration deadlines. - [The £47,000 Hidden Cost: Why London Businesses Waste Money on Manual Mac Deployment](https://stabilise.io/blog/the-hidden-cost-why-london-businesses-waste-money-on-manual-mac-deployment): London businesses waste up to £47,000 per 50 Macs through manual deployment. Discover how automated Mac deployment with MDM saves money and improves security. - [Zero-Touch Device Deployment: The Modern Way to Onboard Mac Users in UK Businesses](https://stabilise.io/blog/zero-touch-device-deployment-the-modern-way-to-onboard-mac-users-in-uk-businesses): Discover how zero-touch Mac deployment automates device setup for UK businesses. Learn the benefits, costs, and implementation process from London's Apple IT specialists. - [Why Your Apple-Heavy Network Needs a Mac Mini for Content Caching: The Ultimate Guide](https://stabilise.io/blog/mac-mini-content-caching-apple-network-bandwidth-uk-msp): Essential guide to implementing Mac mini content caching for Apple-heavy networks. Reduce bandwidth usage by 90% whilst accelerating update delivery. - [When the Screens Go Dark: What UK Business Leaders Need to Know About Cyber Security in 2025](https://stabilise.io/blog/when-the-screens-go-dark-what-uk-business-leaders-need-to-know-about-cyber-security-in-2025): M&S lost £300m to ransomware that started with a phone call. UK businesses face 4 major attacks weekly. Learn why your security budget might not save you, and what works - [Behind the Scenes: Managing Macs at Scale in Film Production](https://stabilise.io/blog/mac-mdm-uk-film-production-guide): How UK film studios manage Apple devices at scale. From Pinewood to indie productions - MDM strategies, zero-touch deployment, and security for creative workflows. - [Why Your Creative Agency's IT Feels Broken (And How to Fix It Without Hiring a CTO)](https://stabilise.io/blog/why-your-creative-agencys-it-feels-broken-and-how-to-fix-it-without-hiring-a-cto): UK creative agencies lose £52k yearly to IT issues. Discover why Apple-first infrastructure transforms creative business. - [Why UK Businesses Are Rethinking Windows: The Privacy Wake-Up Call](https://stabilise.io/blog/windows-the-privacy-wake-up-call): Changes to Windows 11 are forcing UK businesses to reconsider their operating system choices - [Apple Intelligence and Enterprise Security: What UK IT Managers Need to Know](https://stabilise.io/blog/apple-intelligence-enterprise-security-uk-it-managers): Navigate the complexities of Apple Intelligence in UK enterprises: data sovereignty concerns, MDM controls, and the government's encryption battle with Apple. - [Two Friends, One Vision: The Birth of Stabilise](https://stabilise.io/blog/two-friends-one-vision-birth-of-stabilise): How Alan Avins and Dustin Rhodes spent eight years working together at LeftBrain, then started Stabilise. - [iPhone 17 Enterprise Impact: How Apple's 2025 Release Transforms UK Business Technology](https://stabilise.io/blog/iphone-17-enterprise-impact-uk-business-technology-2025): The iPhone 17 lineup transforms enterprise mobility with Wi-Fi 7, advanced MDM, and Apple Intelligence, driving productivity, compliance, and ROI for UK businesses. - [Why Apple Devices Transform Employee Retention: The Data-Driven Business Case for 2025](https://stabilise.io/blog/why-apple-devices-higher-employee-retention-data-2025): Discover why organisations offering Apple devices see 17% better retention rates. Data-driven insights for UK businesses on technology choice and employee loyalty. - [How NIS2 Compliance is Reshaping UK Apple IT Infrastructure in 2025](https://stabilise.io/blog/nis2-compliance-apple-it-infrastructure-uk-2025): Essential NIS2 directive compliance guide for Apple business environments. How UK companies must adapt Mac infrastructure and security protocols. ## Optional - [Full markdown corpus](https://stabilise.io/llms-full.txt): Raw markdown of services, industries, and all blog posts. - [Per-page markdown access](https://stabilise.io/api/md/): GET /api/md/{collection}/{slug} returns raw MDX for any blog post, service, industry, project, or team member. - [Sitemap](https://stabilise.io/sitemap.xml): XML sitemap of every public URL.