[raxxorrax]

Firing IT is the worst you can do for IT security. I would still check if maybe they gave out the means to deface the site though...

Honestly there is merit to the claim in my opinion. The security industry is full of scam, now even formerly reputable providers begin to sell very flawed solutions. But internal IT is not part of that.

It is also a care about doing a sensible risk analysis. Your web server should maybe be isolated from critical systems as any other system the public can interact with.