Managed Security Services
Most small and mid-sized organizations cannot justify a full-time security professional, but they still run firewalls, EDR, Microsoft Entra ID, Intune and other security tools that need someone to configure, watch and update them. We become your security team: we manage those solutions remotely, keep them tuned, and give you a specialist to call when something does not look right.
Starting at $1,500 per month for up to 20 users. Final price depends on scope.
What we manage
Identity and privileged access
Microsoft Entra ID (Conditional Access, MFA, admin roles) and your privileged access management (PAM) solution, including privileged accounts and access reviews.
Azure and Intune
Azure security settings and policies, and Intune device compliance, configuration and app protection policies.
EDR/XDR
Deployment, policies and follow-up of detections, including Microsoft Defender XDR.
Firewalls and IDS
Firewall rules, firmware updates, remote access VPNs, intrusion detection tuning and configuration backups.
SIEM
Log sources, detection rules and alert tuning, with alerts reviewed during US business hours.
We work with the tools you already have and tell you when a gap needs a different product or license.
What a month with us looks like
-
Ongoing administration: configuration changes, updates and policy tuning, documented in a change log.
-
Alert review: we review security alerts from your tools during US business hours and act on them or escalate to you.
-
Monthly report: what we changed, what we found, and the next priorities, in plain language.
-
Advice when you need it: a security specialist to consult on new projects, vendors, customer security questionnaires and policies.
Who it's for
Small and mid-sized businesses without a dedicated security person, IT teams that are stretched thin and want a security specialist alongside them, and companies whose customers or insurers now ask how security is managed.
What this is not: a 24/7 security operations center (SOC). Alerts are reviewed during business hours. If you need round-the-clock monitoring and response, we will tell you so and help you choose a provider.
How we start
01
Onboarding assessment: we review your current tools and settings and agree on what we will manage.
02
Stabilization: we fix the most important gaps first, such as MFA, admin accounts and exposed services.
03
Ongoing management: regular administration, alert review and monthly reporting.
FAQ
Do we need to replace our IT provider?
No. We can work alongside your internal IT team or MSP and focus on the security side.
Do you need administrator access?
We use named accounts with only the permissions the agreed tasks require, protected by MFA, and every change is logged.
Is there a long-term contract?
Terms are agreed in each proposal.