IT security consulting
For organizations deciding where to focus security effort. Review vulnerabilities and business priorities with a consultant, then discuss a security strategy suited to your environment.
CapabilitiesProtection, from
Protection, from
every perspective.
Explore the support your organization needs, from an initial security review to ongoing monitoring and employee awareness.
Network security
For teams managing connected systems and infrastructure. Identify network vulnerabilities and discuss measures to detect threats and limit unauthorized access.
Cyber defense
For organizations strengthening their defenses. Assess current protection and discuss security protocols that address the risks facing your operations.
Data protection
For businesses handling sensitive information. Review how data is protected and discuss safeguards that support confidentiality and your regulatory requirements.
Threat assessment & response
For teams seeking a clearer picture of their security posture. Assess threats, prioritize vulnerabilities, and develop a response plan to guide action.
Monitoring & support
For organizations that need ongoing oversight. Discuss monitoring, threat detection, and support requirements for the systems your team relies on.
Employee training
For teams building security awareness. Discuss training that helps employees recognize cyber risks and understand their role in protecting the organization.
Security that grows
with your organization.
Choose a starting point for your security needs. Select a plan to explore its included services. Tap an information icon for what each service does, why it matters, and how it fits your business.
ESSENTIAL
5–15 users / small business
$795/moSecurity foundations for small organizations.
View included servicesHide included services
Endpoint security — service details
What it does
Protects business laptops, desktops, and supported servers against malicious activity.
Why it matters
Devices are common entry points into business systems.
How we integrate it
Inventory supported devices, agree protection policies, and deploy or configure endpoint protection with your IT team.
Email security — service details
What it does
Helps identify malicious messages, suspicious links, and harmful attachments.
Why it matters
Email attacks can expose accounts, data, and business payments.
How we integrate it
Review your email environment and configure supported filtering and protection policies around employee workflows.
Security configuration review — service details
What it does
Examines security settings across the systems included in your engagement.
Why it matters
Default or inconsistent settings can leave avoidable gaps.
How we integrate it
Compare existing settings with agreed security baselines and provide prioritized changes for your IT team.
Basic vulnerability monitoring — service details
What it does
Watches agreed sources for known weaknesses affecting covered systems.
Why it matters
Newly disclosed weaknesses can affect software already in use.
How we integrate it
Identify covered assets, review relevant findings, and flag issues for remediation planning.
Security event monitoring — service details
What it does
Reviews security events from connected systems for signs of suspicious activity.
Why it matters
Unusual activity is easier to investigate when events are visible.
How we integrate it
Connect agreed event sources, tune monitoring rules, and establish a process for reviewing and escalating findings.
Monthly security report — service details
What it does
Summarizes the month’s monitoring findings and security activities.
Why it matters
A regular record helps you understand progress and outstanding concerns.
How we integrate it
Compile findings for covered systems, highlight priorities, and share the report with designated business contacts.
Business-hours support — service details
What it does
Provides help with covered security questions during agreed business hours.
Why it matters
Employees and IT teams need a clear route to security assistance.
How we integrate it
Confirm support hours, contacts, and covered requests during onboarding and establish a request process.
Security awareness guidance — service details
What it does
Gives employees practical guidance on recognizing and reporting common threats.
Why it matters
Everyday decisions influence the security of business information.
How we integrate it
Tailor guidance to employee roles, common workflows, and your internal reporting procedures.
Quarterly security review — service details
What it does
Reviews security activity, open issues, and changing needs every quarter.
Why it matters
Business changes can make earlier security decisions outdated.
How we integrate it
Meet with designated stakeholders to review findings and agree the next quarter’s priorities.
PROFESSIONAL
10–50 users
$1,495/moManaged cybersecurity for growing organizations.
View included servicesHide included services
Everything in Essential — service details
What it does
Includes the services listed in the Essential plan.
Why it matters
A consistent foundation supports more advanced security operations.
How we integrate it
Carry the Essential controls, guidance, reporting, and reviews into the Professional engagement’s agreed scope.
24/7 security monitoring — service details
What it does
Monitors covered security signals around the clock.
Why it matters
Suspicious activity can occur outside normal business hours.
How we integrate it
Connect agreed systems and define monitoring coverage, alert routing, and escalation procedures; response commitments are agreed separately.
Advanced threat detection — service details
What it does
Uses correlated signals and detection rules to identify more complex suspicious activity.
Why it matters
Some attacks may not be apparent from a single alert.
How we integrate it
Identify available telemetry, configure supported detections, and tune them to your environment and normal business activity.
EDR/XDR — service details
What it does
Endpoint Detection and Response investigates device activity; Extended Detection and Response combines signals across supported security tools.
Why it matters
Connecting evidence helps teams understand an attack’s scope.
How we integrate it
Assess compatible tools, onboard covered devices and integrations, and agree investigation and response permissions.
Microsoft 365 security monitoring — service details
What it does
Reviews security signals from the Microsoft 365 services included in scope.
Why it matters
Compromised cloud accounts can expose email and shared business data.
How we integrate it
Connect supported tenant logs and alerts using approved access, then configure monitoring for agreed account and service risks.
Vulnerability management — service details
What it does
Organizes the identification, prioritization, and tracking of security weaknesses.
Why it matters
A prioritized process helps teams address the most consequential issues first.
How we integrate it
Maintain an agreed asset scope, rank findings, assign remediation owners, and track progress with your IT team.
Phishing/security-awareness training — service details
What it does
Teaches employees to recognize deceptive messages and practice safer security habits.
Why it matters
Training helps staff respond thoughtfully to realistic threats.
How we integrate it
Plan role-appropriate learning and, where agreed, phishing exercises aligned with your policies and reporting channels.
Malware investigation/remediation — service details
What it does
Investigates suspected malicious software and supports its removal from covered systems.
Why it matters
Malware can disrupt operations and compromise information.
How we integrate it
Collect relevant evidence, agree containment steps, and coordinate cleanup and validation with authorized system owners.
Priority phone support — service details
What it does
Provides a prioritized phone channel for covered security support requests.
Why it matters
Direct contact helps communicate urgent concerns clearly.
How we integrate it
Designate authorized callers, establish contact procedures, and agree priority handling and availability during onboarding.
Monthly executive security report — service details
What it does
Translates monthly security findings into business-level priorities.
Why it matters
Leaders need understandable information to guide decisions.
How we integrate it
Summarize significant findings, trends, and recommended actions for your designated leadership audience.
Quarterly security assessment — service details
What it does
Evaluates the covered security environment and controls each quarter.
Why it matters
Periodic assessment helps uncover gaps as systems and risks change.
How we integrate it
Agree assessment boundaries, review evidence and configurations, and present prioritized recommendations.
Incident-response planning — service details
What it does
Documents how your organization will coordinate a security incident.
Why it matters
Clear roles and procedures reduce confusion under pressure.
How we integrate it
Work with business and IT stakeholders to define contacts, decision authority, communication steps, and response procedures.
ENTERPRISE
25–100+ users / organizations with higher security requirements
Starts at$2,495/mo*Advanced security for organizations with greater risk and compliance requirements.
View included servicesHide included services
Everything in Professional — service details
What it does
Includes the services listed in the Professional plan, including its Essential foundation.
Why it matters
Advanced services work best with established monitoring and operational processes.
How we integrate it
Extend the Professional service scope with the Enterprise capabilities selected for your environment.
Dedicated security account manager — service details
What it does
Provides a designated point of coordination for the security engagement.
Why it matters
Consistent ownership helps keep business priorities and security work aligned.
How we integrate it
Establish stakeholder contacts, review cadence, and a process for coordinating service needs and follow-up actions.
SIEM/security-log monitoring — service details
What it does
Collects and correlates agreed security logs using a Security Information and Event Management approach.
Why it matters
Related events across systems can reveal risks that isolated logs miss.
How we integrate it
Select log sources, agree retention and access requirements, and configure supported collection, detection, and review workflows.
Advanced threat hunting — service details
What it does
Proactively searches covered security data for signs of threats that may evade routine alerts.
Why it matters
Some suspicious behavior warrants investigation before an alert is triggered.
How we integrate it
Define hunting objectives, examine available telemetry, and document findings and recommended follow-up.
Real-time security alerts — service details
What it does
Routes relevant alerts as connected security systems detect events.
Why it matters
Timely notification supports faster assessment of potential issues.
How we integrate it
Configure supported alert integrations, severity thresholds, and designated recipients; delivery depends on source systems and connectivity.
Vulnerability scanning — service details
What it does
Checks authorized assets for detectable known security weaknesses.
Why it matters
Scanning provides evidence of exposures that need attention.
How we integrate it
Agree asset boundaries and safe scanning windows, run supported scans, and review results with your technical team.
Security configuration management — service details
What it does
Helps maintain agreed security settings as systems evolve.
Why it matters
Configuration drift can reopen previously addressed weaknesses.
How we integrate it
Define baselines, review proposed changes, and coordinate approved adjustments through your change-management process.
Incident-response assistance — service details
What it does
Supports your team in assessing and responding to a security incident.
Why it matters
Coordinated action helps limit disruption and guide recovery decisions.
How we integrate it
Work within agreed authority to assess evidence and assist with containment, remediation, and recovery planning.
Comprehensive security assessment — service details
What it does
Examines the people, processes, and technology included in a broader security review.
Why it matters
A wider view helps reveal connected risks across the organization.
How we integrate it
Define assessment objectives, interview stakeholders, review controls and evidence, and deliver a prioritized improvement plan.
Compliance support — service details
What it does
Helps organize security controls and evidence around applicable requirements.
Why it matters
Documented controls make it easier to identify gaps and demonstrate progress.
How we integrate it
Agree the relevant framework or requirements, map existing controls, and help track evidence and remediation; certification is not guaranteed.
Executive reporting — service details
What it does
Presents security posture, significant findings, and priorities for leadership.
Why it matters
Business leaders need context for risk and investment decisions.
How we integrate it
Agree reporting audiences and cadence, then translate technical findings into actionable business summaries.
Quarterly risk review — service details
What it does
Revisits key security risks and treatment priorities each quarter.
Why it matters
Risk priorities change as your business, systems, and dependencies evolve.
How we integrate it
Review significant changes with stakeholders, update agreed risk records, and assign follow-up owners.
Vendor/security-risk assessment — service details
What it does
Reviews security risks associated with selected vendors and external dependencies.
Why it matters
Third-party access and services can affect your own security posture.
How we integrate it
Identify important vendors, review available security evidence and access arrangements, and recommend proportionate follow-up.
Security policy review — service details
What it does
Examines the clarity and suitability of your written security policies.
Why it matters
Policies guide consistent decisions and employee responsibilities.
How we integrate it
Review agreed policies with business owners and recommend updates that fit your systems, roles, and operating practices.
Priority escalation — service details
What it does
Routes significant security concerns through an agreed higher-priority escalation path.
Why it matters
Clear escalation helps urgent issues reach the appropriate decision-makers.
How we integrate it
Define severity criteria, responsible contacts, and escalation steps; confirm service commitments in the engagement scope.
*Customizable based on number of users, endpoints, infrastructure, compliance requirements and service scope.
Implementation approaches are tailored during onboarding. Covered systems, tools, licensing, support hours, response commitments, and authorized actions are defined in your agreed service scope.
Procurement information · NAICS codes
Codes listed on the current company website. Confirm applicable codes and registration details directly with the team.
| NAICS code | Description |
|---|---|
| 541511 | Custom Computer Programming Services |
| 541512 | Computer Systems Design Services |
| 541513 | Computer Facilities Management Services |
| 541519 | Other Computer Related Services |
| 541611 | Administrative Management and General Management Consulting Services |
| 541613 | Marketing Consulting Services |
| 541614 | Process, Physical Distribution, and Logistics Consulting Services |
| 541618 | Other Management Consulting Services |
| 541690 | Other Scientific and Technical Consulting Services |
| 541820 | Public Relations Agencies |
| 541910 | Marketing Research and Public Opinion Polling |
| 561110 | Office Administrative Services |
| 561210 | Facilities Support Services |
| 561320 | Temporary Help Services |
| 561410 | Document Preparation Services |
| 561499 | All Other Business Support Services |
| 561990 | All Other Support Services |
| 611420 | Computer Training |
| 611430 | Professional and Management Development Training |