The best firewall in the world can't stop someone clicking a bad link.

Most successful cyber attacks start with a human being doing something they shouldn't. Not a sophisticated hack. Not a zero-day exploit. Just someone in accounts opening an email that looked like it came from DHL. Beacon Academy is Dave's cybersecurity training platform — built to turn your team from your biggest vulnerability into your first line of defence.

Your people aren't the problem. Their training is.

A question that'll tell you everything you need to know about your business's cyber security. Walk up to anyone on your team — the office manager, the new apprentice, the person who's been there 15 years — and ask them to name three things they do to keep the company cyber secure.

Can they answer?

Dave asks this a lot. And most business owners go quiet, because they already know. Their team can't answer that question. Not because they're careless or lazy. Because nobody ever taught them. Meanwhile, the phishing emails keep getting smarter. That invoice from "your accountant" with the slightly wrong email address. The text message about a missed Royal Mail delivery. The Teams notification that isn't from Teams at all. These attacks don't need your team to be stupid. They just need them to be untrained.

Most IT companies tick a box. Dave built a platform.

The usual story: your IT provider adds "security awareness training" as a line item on your contract. You get access to some generic videos. Maybe a quarterly email reminder about passwords. Nobody tracks who's watched what. Nobody tests whether it worked. And your team clicks the same dodgy links they always did.

Dave took a different approach. He built Beacon Academy as a standalone training platform — separate from Ashvale IT, with its own curriculum, its own structure, and its own domain. Not because it looked good on a proposal. Because bolt-on training doesn't change behaviour. Dedicated training does.

No other Bristol MSP has done this. Plenty offer "cybersecurity training" as a service. None of them built an entire platform around it.

Practical skills. Not PowerPoint slides.

Phishing awareness

Your team learns to spot the red flags before they click. Real examples, not textbook ones. The email that comes at 4:47pm on a Friday when everyone's tired and rushing to finish — that's the one that gets people. Beacon Academy trains for exactly those moments.

Password hygiene

"Password123" is still the fourth most common password in the UK. Beacon Academy covers password managers, multi-factor authentication (the text message or app code you use alongside your password), and why reusing your Netflix login for your work email is a genuinely terrible idea.

Social engineering

Not all attacks come through a screen. Some come through a phone call from someone claiming to be "the IT department." Your team learns how manipulation works — and how to spot it when someone's trying it on them.

Incident response

What do you do when something goes wrong? Not panic — that's step zero. Beacon Academy covers who to call, what to document, and how to contain a breach before it spreads. The 43 minutes between a breach starting and someone reporting it is where the real damage happens.

Built by someone who's investigated the aftermath.

Dave studied forensic computing at university. The kind where you pull apart hard drives and trace how a breach happened. Where you reconstruct timelines of attacks, figure out what went wrong, and write reports that end up in legal proceedings.

That background matters for one very specific reason. Dave doesn't teach cybersecurity theory. He's seen what actually happens when a business gets breached — the financial cost, the operational chaos, the look on a business owner's face when they realise their client data's been compromised. He built Beacon Academy because he kept seeing the same preventable mistakes. And he got tired of investigating them after the fact.

"Anyone in your business should be able to give you three ways they can keep the company cyber secure. If they can't, that's a training problem."

— Dave Ellison, Ashvale IT

Train your team before someone else tests them.

Beacon Academy is Dave's dedicated training platform. You'll find course details, formats, and booking options there. It's separate from Ashvale IT because training deserves more than a footnote on an IT support page.

Want to talk through what your team needs first? Book a 30-minute meeting with Dave. He'll assess where the gaps are (there are always gaps — even in businesses that think they're covered) and recommend the right training path. No sales pitch. Just an honest conversation about whether your people could spot a phishing email at 4:47pm on a Friday.

Message Dave