Cybersecurity
Security that runs whether or not anyone is watching
Endpoint protection on every machine on every plan, and on Secure and Full Suite a security operations team watching around the clock.
A reply from Keaton or Kurt, usually the same working day.
Small businesses tend to assume they're too small to be worth attacking. The opposite is true, and it's a numbers game rather than a grudge: attacks are automated, they sweep for whatever is reachable and unpatched, and a fifteen-person office with an out-of-date server is easier than a bank.
Almost none of it looks like the films. The overwhelming majority of what actually happens to businesses your size arrives through one of two doors: a gap the manufacturer fixed months ago on a machine where nobody installed the fix, or a password that was reused somewhere it shouldn't have been.
Which is why the boring half matters more
Software that spots an attack in progress is worth having, and we put SentinelOne on every machine we look after. It is still the second line. The first is daily patching, protection that's actually installed everywhere rather than on most things, and accounts closed the day someone leaves.
That unglamorous list closes the doors the automated sweeps are looking for. It's included on the entry plan rather than sold as a security upgrade, because a plan that leaves it out isn't really managing anything. On Secure and Full Suite, a security operations team watches on top of it, all day and all night, including the hours when nobody at your end is awake to notice.
What's covered
- Endpoint protection installed and monitored on every machine
- Operating systems and approved applications patched daily
- A 24/7/365 security operations team on Secure and Full Suite
- Active threat hunting on Secure and Full Suite, rather than waiting for an alert
- User accounts closed the day someone leaves
- Backups restored as a test every month on Full Suite, so ransomware has an answer
Endpoint protection and daily patching are on every plan, including Essential. The 24/7/365 security operations team and active threat hunting come in on Secure.
Compare the three plans, or read what the monthly fee covers.
Questions we get asked
- We already have antivirus. Isn't that the same thing?
- It's part of it. The difference is whether anything is watching the alerts and whether the rest of the doors are shut. Protection nobody monitors, on a machine that hasn't been patched since last year, is a box ticked rather than a defence.
- What actually happens if we get hit?
- Critical issues carry a 30-minute response commitment on every plan during business hours, and in practice one of us usually answers well inside it. After that, it comes down to backups. Full Suite restores every covered machine as a test each month, and the backup add-on does the same on any plan. A business with tested backups has a bad week. A business without them sometimes doesn't come back.
- Can you guarantee we won't be breached?
- No, and treat anyone who does with suspicion. What's on offer is closing the doors that are actually used, watching for the ones that open anyway, and being able to get you back when something gets through.
- Does this make us compliant?
- That isn't ours to declare. We can describe exactly what's in place, in writing, which is usually what your insurer or your auditor is asking for. Whether it satisfies a particular rule is a judgement for you and your advisers.
Related
Find out where you actually stand
Tell us roughly how many machines you have and what's protecting them today. We'll tell you honestly what's missing, even if the answer is not much.