Cybersecurity
Layered protection sized for a small business — Microsoft Defender managed with Huntress EDR, email security matched to your budget, and around-the-clock threat monitoring.
- Microsoft Defender managed and monitored on every workstation and server
- Huntress EDR on top of it, with a 24/7 security operations center behind the alerts
- Email security matched to your budget — from built-in Microsoft 365 filtering up to Defender for Office 365 or Proofpoint
- Huntress ITDR for Microsoft 365 account takeover, malicious inbox rules, and business email compromise
- Security awareness training with simulated phishing, available when you want it
- Network scans and multi-factor authentication on email and remote access
The realistic threat
Small businesses are not targeted because they are valuable. They are targeted because they are reachable. The overwhelming majority of incidents we see start in one of three places: a password reused somewhere else, an email that looked legitimate, or a system that missed a patch.
Everything we deploy addresses those three, in that order, before anything more exotic.
Endpoint: Defender, plus a second set of eyes
Every workstation and server runs Microsoft Defender — already licensed with your operating system, and genuinely good antivirus, which is why we would rather manage it properly than sell you a replacement for it.
On top of it we run Huntress EDR. Antivirus blocks known bad software. Huntress looks for the part antivirus misses: an attacker who is already inside and using legitimate tools to stay there — a scheduled task that reinstalls itself, a new local account, a foothold left behind for later. When it finds something, a Huntress security operations center staffed around the clock reviews the alert before it reaches us, so you are not paying for a dashboard nobody watches.
Huntress is included in your monthly rate. It is not an upsell.
Most incidents arrive by email, and the right amount of email security depends on what you are protecting and what you can spend. We are direct about that rather than selling everyone the same tier:
- Built-in Microsoft 365 filtering is included with your existing licenses and stops spam and known phishing. For some businesses that is genuinely enough.
- Defender for Office 365 adds link and attachment scanning at the moment someone clicks, at a per-user cost on top of your base licensing.
- Proofpoint where the requirement or the risk justifies it.
If you already have something in place that works, we will maintain it rather than rip it out to move you onto our preferred vendor.
Behind whichever filter you use, Huntress ITDR watches the Microsoft 365 accounts themselves — catching the attacker who already has a valid password, the inbox rule quietly forwarding your invoices elsewhere, and the sign-in that should not be possible from where it came from. Available to any client who wants it.
Identity
Multi-factor authentication on email, VPN, and remote desktop. Admin accounts kept separate from daily-use accounts. SPF, DKIM, and DMARC configured properly so your domain cannot be trivially spoofed and your legitimate mail still lands.
Sign-ins to your Microsoft 365 get watched, and unusual ones do not go unanswered. A login from outside your normal area, or through a VPN when nobody there uses one, is flagged to us for a decision — you know your business, so if your office manager is in Colorado this week we are not going to lock them out over it. A login from a country where this kind of thing routinely originates does not wait for us. It is locked immediately.
Stolen credentials are the most common way a small business gets hit. A password on its own is not supposed to be enough, and here it is not.
Network
Firewall firmware and rules maintained, and periodic network scans so we know what is actually connected — including the things nobody remembers plugging in.
People
Security awareness training with simulated phishing is available whenever you want it. Not to shame anyone — to make reporting a suspicious message routine rather than embarrassing. Ask and we will turn it on.
Compliance
If you handle regulated data — patient records, card payments, criminal justice information, controlled defense information — tell us early. The controls themselves are often similar to what any well-run business should have. What differs is the evidence: what you must document, how long you must keep it, and what you have to be able to show an auditor. Retrofitting that onto an existing environment costs considerably more than building it in.
We have worked in regulated environments and can scope an engagement around the requirements you are actually under. What we will not do is claim a certification we do not hold, or tell you a product purchase makes you compliant. Ask us what we have done and we will tell you plainly.
Need help with cybersecurity?
Tell us what you are dealing with. We will tell you plainly whether we can help, what it takes, and what it costs.