Home / Managed security
Detection and response around the clock, and fewer ways in to begin with.
Most breaches start with a phished password, an unpatched device or an account without multi-factor sign-in. We close those doors first, then watch everything else 24 hours a day.
What's included
Available on its own or with managed IT. Mapped to NIST CSF 2.0 and the CIS Controls so every service shows up in your compliance evidence.
24/7 detection and response
Endpoint detection and response on every device, monitored by a security operations centre that can isolate a machine within minutes.
Email security
Filtering for phishing, malware and impersonation, plus domain protection with SPF, DKIM and DMARC.
Identity protection
Multi-factor sign-in, conditional access and alerts for risky logins across Microsoft 365 and other cloud apps.
Vulnerability management
Regular scanning of devices and internet-facing systems, with fixes tracked to closure.
Security awareness training
Short monthly training and simulated phishing, with reporting by department.
Hardening
Baseline configurations for devices, servers, firewalls and cloud tenants based on CIS Benchmarks.
Incident response
A written response plan, and hands-on help to contain, investigate and recover when an incident happens.
Security reporting
Monthly reports your board, insurer or auditor can read, not just raw alerts.
Why it matters for insurance
Canadian cyber insurers now ask detailed questions about multi-factor sign-in, endpoint detection, backups and training before they will quote or renew. Our managed security service is designed to let you answer yes to those questions, with evidence.
We can review your insurer's questionnaire with you as part of the readiness assessment.
Common questions
Do you replace our antivirus?
Yes. Endpoint detection and response replaces traditional antivirus and adds 24/7 monitoring and the ability to respond remotely.
Where is our data monitored from?
We choose security platforms that keep data in Canada wherever the vendor offers it, and tell you plainly where it does not.
What happens if we are hit by ransomware?
We contain affected machines, preserve evidence, work with your insurer's breach coach if you have one, restore from backup and help you meet any privacy breach reporting duties.
Can you support our internal security team?
Yes. For larger organizations we provide co-managed monitoring, assessments and project delivery alongside your team.
See how exposed you are today.
The assessment includes an external scan, a Microsoft 365 security review and a phishing-readiness check.