Fully Managed IT
Your complete IT department, run for you.
Cybersecurity
Layered defense. Rehearsed response.
Attackers target mid-sized organizations because they hold valuable data and rarely have a security team. We give you the full stack, watched around the clock by people as well as software: endpoints, identities, email and your Microsoft 365 or Google Workspace tenant, with the evidence to prove it works.
Who it’s for
For leaders who need a straight answer to “are we secure?”
Most breaches start with a stolen password, a phishing email or an unpatched device. Those are exactly the risks a disciplined program closes.
- A cyber insurance renewal with a questionnaire you can’t confidently complete.
- A client or partner security review that stalls deals.
- A recent incident, or a near miss that exposed gaps.
- Sensitive data such as patient records, client files, IP or financial data spread across cloud apps and devices.
- Security tools that were bought, but never tuned or watched.
What’s included
Every layer an attack touches, covered and watched.
Security assessment
A security assessment mapped to CIS Controls, with a prioritized, costed risk register, so the first dollar goes to the biggest risk.
Identity & access
MFA on every account (phishing-resistant for admins), conditional access, privileged-account controls and quarterly access reviews, for Microsoft 365 and Google Workspace.
Endpoint detection & response (EDR)
EDR on every laptop, desktop and server: behavior-based detection, isolation of a compromised machine in minutes, and ransomware canaries that trip before the damage spreads.
Managed detection & response (MDR)
A 24/7 security operations team, not just software, reviews every alert from your endpoints and your tenant, filters the noise, and acts on the real ones. You get a person’s finding, not a dashboard.
Identity threat detection & response (ITDR)
Your Microsoft 365 or Google Workspace tenant is where modern attacks happen: stolen sessions, malicious mailbox rules, rogue app consents, impossible logins. We watch the tenant itself and shut a compromised account down fast.
SIEM & log retention
Security logs from endpoints, identity, email and network collected in one place, correlated, and kept for the retention your insurer or auditor expects, so an investigation has something to investigate.
Email security
Advanced filtering for Microsoft 365 and Google Workspace, impersonation and payment-fraud protection, link and attachment sandboxing, and DMARC, DKIM and SPF configured to stop spoofing of your domain.
Vulnerability & patch management
Continuous scanning, risk-ranked remediation, and monthly patch compliance reporting.
Backup & ransomware recovery
Immutable, off-site backups for Microsoft 365, Google Workspace, servers and critical systems, restore-tested on a schedule.
Security awareness training
Short monthly training and simulated phishing, with results reported to leadership.
Network & DNS protection
Next-generation firewalls, segmentation, secure remote access and DNS filtering.
Incident response
A written plan, a tabletop exercise with leadership, and a hands-on response team when it’s real.
Security policies
Acceptable-use and incident-response policies, adapted to your organization.
How it works
Assess, harden, watch, rehearse.
- Weeks 1–2
Assess
Security assessment mapped to CIS Controls, with a prioritized, costed risk register.
- Weeks 2–8
Harden
Close the highest-impact gaps first: identity, email, endpoints and backups.
- Ongoing
Watch
24/7 detection and response, monthly vulnerability and patch reporting.
- Annually
Rehearse
An incident-response tabletop exercise with leadership, and an updated plan.
What you can expect
Security you can explain to your board.
- A one-page security scorecard, updated every quarter.
- Help completing insurance and client questionnaires accurately, with evidence.
- A plan your leadership team has practiced before it’s needed.
- Clear ownership: who responds, who decides and who communicates.
- Continuous improvement measured against CIS Controls.
Questions
What leaders ask us.
We have an incident right now. What do we do?
Call 619.489.5217 immediately. Don’t power off affected machines or pay any ransom demand. Disconnect them from the network if you can, and write down what you’ve seen.
Which security framework do you use?
We use CIS Critical Security Controls as our operating baseline. When your obligations name a framework, we provide the technical evidence it asks for.
Can you help with our cyber insurance application?
Yes. We help complete questionnaires accurately, close the controls insurers look for (MFA, EDR, MDR, backups, training) and provide the evidence underwriters request.
What’s the difference between EDR, MDR and ITDR?
EDR is the software on each endpoint that detects and contains threats. MDR is the 24/7 team of people who review what EDR and your tenant report, and act on it. ITDR watches the identities and the Microsoft 365 or Google Workspace tenant itself, where most business email compromise starts. Every managed client gets all three.
Do you support Google Workspace?
Yes. Identity, email security, backup and tenant monitoring for Google Workspace, to the same standard as Microsoft 365.
Do you offer penetration testing?
We coordinate independent third-party penetration tests. That keeps testing separate from the team that built the controls, which is what auditors and insurers prefer.
How is security priced?
The security baseline (MFA, EDR with 24/7 managed detection and response, identity threat detection for your tenant, email filtering, DNS protection, SIEM and awareness training) is included in every managed plan, per user. Third-party penetration tests are quoted separately, and so is endpoint detection and response for organizations on a retainer rather than a managed plan. See how pricing works.
How quickly do you respond to a security alert?
Alerts are triaged around the clock and a confirmed threat is contained first, then investigated. Security incidents are the highest priority in your agreement, with the response target written down and reported against.
Related services
Security Evidence & Questionnaires
The technical safeguards your insurer, auditor or client asks about.
Cloud, Devices & Workplace
Microsoft 365, Google Workspace, Apple and Windows, networks, phones.
Start with a conversation.
Thirty minutes with a support specialist, not a salesperson. We’ll ask about your environment, tell you what we’d look at first, and say so if we’re not the right fit. No cost, no obligation, and nobody will call you seven times.