Aspen · Roaring Fork Valley
Quiet, sensible security for people who are worth targeting.
Wealth is a targeting criterion. The people who live and do business in this valley receive better-researched attacks than the national average, and the defences in most homes were set up by whoever plugged in the router.
What the risk actually looks like
It is very rarely a hooded figure and a progress bar. It is an email from a contractor you are already working with, asking you to update the account the next payment goes to. It is a cloud photo library reused across four accounts with the same password. It is a camera system on the internet with its factory login intact. It is a family office assistant whose laptop has no encryption and no backup.
None of those are fixed by buying a product. They are fixed by someone competent spending a day looking, and then keeping an eye on it.
What we put in place
At the perimeter. A properly configured firewall, remote access closed off unless there is a reason for it, DNS filtering that quietly removes a large share of the problem, and network segmentation so a compromised smart plug cannot reach a laptop.
On the devices. Endpoint protection, full-disk encryption, automatic updates that actually run, and a password manager for the household so credentials stop living on a note in a kitchen drawer.
Behind it all. Backups that are tested rather than assumed, multi-factor authentication on the accounts that matter, and monitoring that tells us when something changes.
For businesses in the valley
Small businesses here carry the same obligations as large ones — payment data, guest records, staff information — with none of the staffing. We cover the fundamentals properly: email security and impersonation protection, staff onboarding and offboarding that revokes access on the day it should, and a documented answer to the question of what happens if the office is unusable tomorrow.
Scope
What this covers.
Covered by membership rather than billed by the hour. Every property is surveyed individually — this is the range of work it covers. On-site attendance is included from the Priority tier upward.
- Firewall configuration and management
- Network segmentation and access control
- DNS filtering and web protection
- Endpoint protection on computers and mobiles
- Full-disk encryption and device hardening
- Password management for households and teams
- Multi-factor authentication rollout
- Backup, verification and recovery testing
- Email security and impersonation protection
- Continuous monitoring and incident response
Related
Rarely on its own.
These overlap more than they look like they do. A camera problem is usually a network problem, and a network problem is usually a security problem waiting to happen.
Technology Concierge
One point of contact for every device, network and system in the property — and for every vendor who installed them.
Smart Home Systems
Control4, Sonos, lighting, cameras and automation, kept working long after the installer has moved on.
Managed WiFi & Networks
Business-grade networks that reach the guest house, the garage and the gate. Monitored, not just installed.
Questions
Common questions.
The things people ask us most often, answered without the marketing. If yours isn't here, phone and ask.
Who provides cybersecurity for small businesses in Aspen?
Ajax MS provides practical cybersecurity for homes and small businesses across Aspen and the Roaring Fork Valley — firewall management, network segmentation, endpoint protection, backup and continuous monitoring. It is sized for an organisation with no IT department, not for a bank, and it is included in membership rather than sold as a separate product.
What does an attack on a business like ours actually look like?
Almost never a hooded figure. It is an email from a contractor you are already working with asking you to update their bank details, a cloud account reusing a password from somewhere else, or a camera system still carrying its factory login. The defence is somebody competent looking once and then watching.
Why would anyone target a business in a town this size?
Because wealth is a targeting criterion and attacks are automated. Properties and firms in this valley receive better-researched approaches than the national average precisely because the names and the holdings are public. Small does not mean invisible; it usually means undefended.
Are we required to do anything about this?
Possibly, depending on what you hold. Payment data, medical records, client financials and staff information all carry obligations that do not scale down with headcount. We are not lawyers and this is not legal advice, but we can tell you plainly what you are holding and what protecting it involves.
How do we know our backups would actually work?
By restoring one, which is the part almost nobody does. A backup nobody has tested is a belief, not a backup. We verify restores on a schedule and keep a copy where ransomware cannot reach it, because the moment you need it is the worst possible moment to find out.
What should we do first if we think we have been breached?
Call us before changing anything, and do not pay anybody. Disconnecting the wrong machine or wiping a mailbox destroys the evidence needed to work out what was reached. Members have a 24/7 line for exactly this, and the first hour matters more than the rest of the week.
Tired of being your own IT department?
Membership is capped at 250 clients. Tell us about the property and we'll tell you honestly whether we're the right fit.
Get in touch
Tell us about
the property.
- Call
- (970) 279-1222
- [email protected]
- Office
- 312 Aspen Airport Business Center, Ste B
Aspen, CO 81611 - Hours
- Weekdays 9:00am – 5:00pm · 24/7 member support line