Contact

Scoped access is required for assessments and lightweight agents are deployed for managed detection — both defined in the statement of work and revocable at any time. We document all access grants and review them at each renewal. No remote access is maintained between engagements without your explicit authorisation.

Premium tiers include after-hours alert triage with defined response time commitments. Standard tiers define business-hours SLAs clearly in the service agreement — there are no undisclosed exclusions for evenings or weekends. Retainer clients in any tier receive an after-hours emergency contact for confirmed active incidents.

Identity, email, and SharePoint hardening are core offerings because that is where most mid-market organisations have the highest exposure. We also cover cloud workloads in AWS and Azure and on-premises infrastructure. Scope is defined in assessment so recommendations reflect your actual environment.

Alert volume, true positive and false positive rates, mean time to triage, open vulnerability status, and any new threat intelligence relevant to your industry. Reports are reviewed with your team on a scheduled call so the numbers have context rather than sitting in a portal you have to interpret alone.