Managed security · Recurring
Know what needs attention, with monitoring scoped to your business.
Most small Australian businesses cannot justify a security hire, so nobody owns the job and it quietly goes undone. We take it on month to month: we run the detection, we watch the infrastructure and review alerts within the coverage agreed for your engagement. You get clear priorities, reporting and escalation arrangements rather than an undefined promise.
Endpoint detection and alerting
We deploy and manage detection agents across your workstations and servers, keep them healthy and current, and watch what they report. Alert review, notification and escalation follow the scope, coverage hours and response targets agreed with you.
Included
- Agent deployment, enrolment and health monitoring
- Continuous detection across endpoints and servers
- Alert review and tuning within your agreed service coverage
- Notification to you with context and a recommended action
- Monthly summary of what fired and what it turned out to be
Worth knowing
- Detection quality depends on a known baseline, so we review before we enrol
- Coverage is what we enrol. Anything outside the fleet is not watched
- Response beyond triage is a separate authorisation, never assumed
Domain, DNS and certificate monitoring
Your domains are the part of your estate an attacker can see without touching you, and the part that breaks silently. We monitor every record, catch changes you did not make, and flag approaching expiry so you can plan the renewal. We choose the tooling to suit your estate, and we watch it rather than leaving it to you.
Included
- DNS record change detection across every domain and subdomain
- TLS certificate expiry, chain and protocol validation
- Email authentication monitoring for SPF, DKIM and DMARC drift
- Domain health grading, tracked over time rather than one off
- Subdomain discovery, so new exposure gets noticed
Why it matters
- An unnoticed DNS change is how mail gets silently redirected
- A lapsed certificate takes you offline and costs you trust
- A weak DMARC policy lets anyone send invoices as you
Patching and Essential Eight uplift
Detection tells you when something got in. Posture is what stops it. We track your patch state, hardening and control maturity against the ASD Essential Eight, work the gaps in a sensible order, and keep a record you can show an insurer, an auditor or a customer doing vendor due diligence.
Included
- Patch and update status across the managed fleet
- Essential Eight maturity tracking, scored and dated
- A prioritised uplift plan, worked steadily rather than in a panic
- Evidence kept as we go, so audits are not a scramble
Maps to
- ASD Essential Eight maturity levels
- Insurer and broker security questionnaires
- Customer vendor risk assessments
Security advice for decisions that matter
A retainer gives you someone to ask before you sign the contract, buy the tool, approve the integration or answer the questionnaire. You talk to the person who does the work, not an account manager.
Typical use
- Reviewing a vendor or a new integration before you commit
- Completing insurer and customer security questionnaires
- Second opinions on advice you have been given
- Policy and procedure review as you grow
Not included
- General IT help desk. We will tell you honestly if that is what you need
- Unlimited project work. Larger pieces get their own written scope
The boundary, stated plainly
Coverage hours, alert review, response targets and escalation contacts are agreed in writing for each engagement. Continuous monitoring does not imply continuous staffed response. Your agreement sets the service commitments.
A lot of managed security is sold as though the provider will quietly handle everything. We do not work that way, and you should be wary of anyone who says they do without telling you what they will change on your systems.
We detect, we triage, and we advise. Anything that changes state on your estate, isolating a machine, disabling an account, rolling a credential, pushing a configuration, happens only with your written authorisation, and is billed separately at agreed rates. You always know who changed what and when.
Getting started
Scoping call
We work out what you have, who looks after it now, and whether managed security is even the right answer for you yet.
Baseline review
Before we monitor anything we establish what normal looks like. Detection against an unknown baseline is guesswork, so this step is not optional.
Deploy and tune
Agents go on, monitors go up, and we spend the first weeks tuning out the noise so your alerts stay worth reading.
Run and report
Monitoring, alert review and reporting against your agreed scope, coverage hours and response targets. Scope is reviewed as your estate changes.