Home/About
About EmpowerIT · 30 years in K-W

We built this system because we've seen what happens when it doesn't exist.

This is the story of how 30 years in the trenches shaped an IT company that exists for one reason: so K-W manufacturers never have to make the phone call we've answered too many times.

1995Year one
30 yrsIn the field
K-WWhere we live
ManufacturingWho we serve
01 / The Story
It started with a phone call

The kind no business owner wants to make.

The details change, but the call is always the same.

A server has failed and production is dead. Ransomware has encrypted everything and the backup hasn't been tested in two years. A major customer sent a security audit with a 90-day deadline and the current IT provider has no idea where to start.

The voice on the other end is stressed. Sometimes panicked. Always exhausted. They've been let down by an IT provider who promised reliability and delivered excuses. Now they're bleeding money and racing a clock.

We've taken that call more times than we care to count. And every single time, we thought the same thing:

This shouldn't have happened. Someone should have caught this. Someone should have prepared for this.

Eventually, we stopped just answering the phone. We built a system so our clients never have to dial that number in the first place.

"Production is dead."

A failed server. No warm spare. The line stops. Hourly losses start mounting before lunch.

"They encrypted everything."

Ransomware on the file shares. The backup hasn't been tested in two years. Recovery takes weeks.

"They want it in 90 days."

A customer security audit lands. No documentation. No evidence. The contract is on the table.

"Our IT guy stopped answering."

The provider who promised reliability is gone. The team is left holding a system no one understands.

02 / Why we exist
Not founded on a plan

Founded on experience.

EmpowerIT wasn't founded on a business plan. It was founded on 30 years of walking into other people's disasters.

We didn't start with a pitch deck and a growth strategy. We started in the field. Thirty years of it. Servers in closets. Networks held together with hope. Critical systems that hadn't seen a patch in years. And occasionally, environments that had been completely destroyed by an attack, a failure, or simple neglect.

We saw what caused those disasters. More importantly, we saw the patterns. The gaps that kept appearing. The warning signs that were missed. The backups that weren't tested. The documentation that didn't exist. The security that was someone's good intention rather than an active defense.

Over time, we built a system that closes every one of those gaps. Not because a framework told us to. Because we learned what happens when you don't.

Every monitoring rule in our platform exists because we once saw a server fail without warning. Every backup test schedule exists because we once discovered that a client's backups hadn't been working for months. Every security policy exists because we once walked into a factory that had been encrypted by ransomware — with no recovery path.

We didn't read about these scenarios. We lived them. Our clients benefit from everything we learned the hard way, without ever having to learn it themselves.
03 / What we believe
Three convictions

Three principles that shape every decision we make.

conviction one

Prevention is the only ethical business model in IT.

Responding to disasters is necessary. Preventing them is the job. Our entire platform is built around finding and fixing problems before they become emergencies. If we're showing up after something breaks, we've already let you down.

→ Encoded in every monitor, patch & backup test
conviction two

Transparency is not optional.

An IT provider who can't show you what they're doing, how quickly they're responding, and what they're preventing is not a partner — they're a black box you're paying to trust. We measure ourselves rigorously and share those measurements openly. Every quarter, you see exactly what we did and why it mattered.

→ Quarterly business reviews, no jargon
conviction three

Certifications prove you studied. Experience proves you can perform.

We respect the industry's credentials. But we've never confused a certificate on the wall with the ability to recover a crashed server at 2 AM. Our credibility comes from 30 years of solving real problems for real businesses.

→ Tested in situations no exam can simulate
04 / The team behind the system
K-W team. K-W roots.

30 years of IT experience. Based in Kitchener-Waterloo. Built for manufacturers.

Lee, CEO of EmpowerIT, with Max
Lee 30 years of IT, KW-born
Max Office morale officer

We're not a franchise. We're not a branch office of a company headquartered somewhere else. We're a K-W team that's spent decades in this community, serving businesses up and down the 401 corridor.

Our experience spans the evolution of business technology: from on-premise servers to the cloud, from break-fix to managed services, from basic antivirus to 24/7 threat hunting. We've worked inside businesses. We've consulted for them. We've been the emergency responders when their IT fell apart.

That breadth of experience means we don't panic when things go wrong. We've seen worse. We've fixed worse. And we've learned from every single incident what needed to be in place to prevent it from happening again.

Today, we focus exclusively on manufacturers in Kitchener-Waterloo, Cambridge, and Guelph. They face a unique combination of pressures — production uptime demands, cascading customer compliance requirements, and the complex convergence of office IT with shop floor operational technology. Most IT providers don't understand that world. We do. It's the only world we serve.

Kitchener Waterloo Cambridge Guelph 401 corridor
05 / Where we focus
Narrow on purpose

K-W manufacturing. That's it.

We're not trying to serve every business in every industry. We serve mid-sized manufacturers in Kitchener-Waterloo, Cambridge, and Guelph.

When you focus on one type of client, you get very good at solving their specific problems. We know the compliance frameworks manufacturers face. We know the pain of a production line stoppage. We know how to segment operational technology from the main network without disrupting production.

We know because we've done it — repeatedly, for years.

You're our client if you…

  • Supply larger customers that demand cybersecurity and compliance proof
  • Cannot afford production downtime
  • Need an IT partner who understands both the office and the shop floor
  • Have been let down by generic IT providers who promised reliability and didn't deliver
06 / The platform
What we use, and why we share it

The system we built. The problems it prevents.

We're transparent about what we use because we believe clients deserve to know what protects their business.

24/7 Security Operations Center

SOC

Active threat hunting, continuous log analysis, real-time attack detection. Powered by the same threat intelligence platform trusted by government and defense organizations. Every detection, every blocked attack, and every remediation action is automatically documented for compliance evidence.

Proactive Infrastructure Monitoring

RMM

24-hour monitoring of every critical system. Hardware health, patch status, performance anomalies — all tracked continuously. Automated maintenance runs in the background. Problems are caught and resolved before they cause downtime.

Instant Server Recovery

BCDR

When a server fails, our recovery system boots a fully functional copy in under five minutes. We don't wait for replacement hardware. We don't spend days restoring from cloud backups. We get you operational immediately, then fix the underlying issue.

Audit-Ready Documentation

DOC

Every network diagram, security policy, configuration record, and system credential is maintained in a structured, secure documentation system. When an auditor asks for evidence, we assemble it in hours — not the weeks most organizations require.

Measurable, Accountable Service

QBR

Every support request tracked. Every response time measured. Every quarter, a business review that shows you exactly what was done, what was prevented, and how your technology is performing against your production goals. No ticket dumps. No jargon. Clear business outcomes.

07 / A note on credentials
Plainly stated

What we have. And what we don't.

We don't chase certifications for display. Our industry is full of paper credentials and empty promises. We've chosen a different path.

If a specific certification is required for your compliance framework, we can align to it. But our clients don't choose us for the letters after our names. They choose us because our system works, our experience is real, and we take responsibility for outcomes — not just activities.

The bar we hold ourselves to:
A failed system back online in under five minutes. An audit evidence package in hours, not weeks. A response from a real human in under fifteen.

30 years of field experience

In business IT, across every major technology shift the industry has seen — from on-prem to cloud, break-fix to managed.

Real incident response history

Ransomware recoveries, failed audit remediations, disaster rebuilds from backup. We've done all of it, often under pressure.

A documented, tested system

Every component reflects something we learned the hard way. Recovery procedures are tested quarterly, not theoretically.

A government-grade SOC platform

Built on Field Effect, whose threat intelligence serves government and defense clients. Not a generic AV layer pretending to be security.

A relentless commitment to prevention

That comes from knowing exactly what happens when prevention fails. We've been in those rooms. We don't want our clients there.

The bottom line

We've answered the worst phone calls. We built this company so you never make one.

We didn't start EmpowerIT because we saw a market opportunity. We started it because we were tired of walking into disasters that should have been prevented.

Every manufacturer we serve benefits from 30 years of hard-won CEO experience baked into an 11-year-old company. Every monitoring alert, every security policy, every backup test, every documented process — it all traces back to something we learned the hard way.

Our clients sleep better because we already lost sleep over the scenarios they'll never face.

That's why we're here. That's what we've built. That's EmpowerIT.
— Lee & the team
No pitch. Just a conversation about where you are and where you need to be.