Products

Protection for your computers, accounts and email.

Start with protection for your computers. Add protection for your accounts and email if you use Google Workspace or Microsoft 365. Add extras when you need them. Everything starts with a free call, so we can match it to how your business works.

Managed security

Managed security for your devices and your people.

Set up once, then working quietly in the background on Windows and Mac. Each part has a plain summary first. Open the tech specs under it for the detail.

For every computer

Endpoint protection

Your laptops and desktops, watched and kept healthy by our security team.

24/7 monitored threat detection and response (EDR). A security operations team investigates and contains threats.
Remote management that keeps our tooling up to date automatically.
DNS and web filtering that blocks malicious and phishing sites.
Patching of popular apps and your operating system.
Security posture checks, such as encryption and key settings.

Tech specs

What is covered

Windows and Mac computers that our partners support. A covered device is a computer with our agent installed and working. Devices without a working agent are not covered.

What you get

Endpoint detection and response (EDR). Security software on each covered device, watched 24/7 by a security operations center that investigates threats and can take response actions such as isolating a device.
Remote management. An agent that shows us device health and software, and lets us help remotely, on request, with security matters.
DNS and web filtering. Blocks known malicious and risky sites on covered devices.
Patching. Operating system and common software updates applied on a schedule.
Reporting and review. A monthly report and a yearly review meeting, as described under Included for every customer.

How it runs

We and our partners may install, update and remove agents and run scripts on covered devices.
A device may be contained automatically, or on our instruction, to stop a threat. Containment can interrupt your work.
Patching may restart devices. We use maintenance windows where we can, but some updates cannot wait.

What we ask of you

Install the agents and keep them installed and running.
Tell us about new, replaced, lost or retired devices within 5 business days.
Keep devices powered on and online regularly, so they can be patched and monitored.
Approve containment or other actions when we ask.
Act on, or decline, our written recommendations.

Not included

Phones and tablets.
Servers, network equipment, printers and other devices, unless your agreement lists them.
Operating systems and software versions our partners do not support.
Backups of your data. Backup is a separate add-on.
Password reuse and password management.
Device repair or rebuild, data recovery and general helpdesk. These are available on request and billed under your agreement.
Perfect protection. No service can promise to prevent or find every threat.

For every person

Identity and email protection

For businesses on Google Workspace or Microsoft 365.

Account takeover detection and response on your business accounts: suspicious sign-ins, impossible travel, malicious inbox rules and hijacked sessions.
Email security that catches phishing, impersonation and malware that get past built-in filters. It connects by API, so your mail is never rerouted.
Security awareness training with short lessons and phishing simulations.

Tech specs

What is covered

A Google Workspace or Microsoft 365 business tenant. Protection is per user: each active user account we protect in your tenant.

What you get

Identity threat detection and response. We watch your tenant for signs of account takeover, such as suspicious sign-ins and mailbox rule changes, and respond by disabling access or ending sessions. When a threat is active this can happen automatically, or on our instruction, before we reach you. We tell you right after.
Email security. Inbound phishing and malware filtering, connected to your tenant through its programming interface (API), with no change to your mail routing.
Security awareness training. Training content and simulated phishing for your users on a schedule. We report completion to you.
Reporting and review. A monthly report and a yearly review meeting, as described under Included for every customer.

How it runs

You can remove our permissions at any time, but protection stops when you do.
Our partners process message content and sign-in data to filter email and detect threats.
Filtering can wrongly flag a good message or miss a bad one, so people should still be careful with links, attachments and payment requests.
We don't install anything on phones or tablets, so the devices themselves are not protected. We still watch sign-ins to your business account made from them.

What we ask of you

Grant the administrator permissions we need.
Keep multi-factor sign-in on for every user.
Tell us about new and departing users within 5 business days.
Keep at least one administrator who can approve changes and respond to us.
Make sure people take the training assigned to them.

Not included

Free personal mailboxes (Gmail, Yahoo, iCloud) and mailboxes controlled by another company.
Turning on or monitoring multi-factor sign-in on accounts we cannot manage.
Password reuse and password management.
Protecting phones and tablets as devices.
Outbound email filtering, email backup, archiving and data recovery.
Perfect protection. No service can promise to stop every attack.

Add-ons

Cloud app log monitoring

We watch the activity logs of the cloud apps your business runs on and flag unusual behavior.

Tech specs

What you get

We collect activity logs from each app you list, through the connection the app offers.
Our partners' tools and our team review the logs for suspicious activity, such as account misuse, data theft or risky changes.
We look into what we find, tell you, and handle it. Activity is included in your monthly report.

What we ask of you

Connect each app, grant the access it needs and keep the connection working.
Keep any app subscription level that log access requires.
Tell us when apps are added or removed.

Good to know

Available with Endpoint protection or Identity and email protection.
Detection depends on what each app records and makes available. Some apps only offer logs on higher subscription levels.
How long logs are kept is set by our partner and may change.

Not included

Apps and log types you have not listed, and data an app does not make available.
A long-term log archive, or keeping logs to meet a legal or compliance retention rule.
Setting up or administering the apps themselves. Ask us and we can quote it.

Network and firewall log monitoring

We watch the logs from your office network and firewall for signs of trouble.

Tech specs

What you get

We receive logs sent from each firewall or network device you list.
Our partners' tools and our team review the logs for suspicious activity.
We tell you what we find and handle it. Activity is included in your monthly report.

What we ask of you

Configure each device to send logs to us, as we direct. We tell you how.
Keep each device online, supported and with current firmware.
Tell us about device changes or replacements.

Good to know

Available with Endpoint protection or Identity and email protection.
We monitor and alert. We do not change your network devices.
Detection depends on what each device logs. How long logs are kept is set by our partner and may change.

Not included

Devices you have not listed, or that cannot send compatible logs.
Configuring, managing, repairing or replacing your network equipment. Ask us and we can quote it.
A long-term log archive, or keeping logs to meet a legal or compliance retention rule.

Device backup

Copies of your computer's files kept safe, so a lost or locked laptop is not a lost business.

Tech specs

What you get

Backups you add are encrypted.
If something happens, we can restore your files from them.
If you cancel, we help you take your backups with you.

Good to know

Backup is a safety net. Prevention comes first, and backup is not part of Endpoint protection.

Included for every customer

A monthly report

A plain-language summary of the activity in your environment.

Tech specs

It covers the activity we saw in your environment, good or bad, including activity from any add-ons you have.
The format and contents may change over time, and are not a promise of any particular detail.

A yearly review

Once a year we go over it all with you and plan what comes next.

Tech specs

A yearly review meeting, along with account administration and an account review.
We also send written security recommendations. You choose whether to act on them.

Help when something happens

Call or email us. We help you through it, and can connect to your computer, with your permission, to sort it out.

Tech specs

We monitor your covered devices and accounts and handle the alerts.
We contain active threats, for example by isolating a device or ending a session, and we ask you to approve other actions.
Time beyond the first hour on a security event is billed at the incident response rate in your agreement.
Device repair or rebuild, data recovery and general helpdesk are available on request and billed under your agreement.

We are built to reduce your risk and stop threats early, and a real person is there if one gets through. No service can promise to stop every attack.

Secure the way forward.

Tell us a little about your business and we will recommend the right protection. No pressure, no jargon.