91%
of attacks on small businesses start with an email
24/7
alert monitoring on every protected device
5
controls insurers now ask about on every renewal
<30
days from assessment to protected
How attacks actually happen
It is not a hacker in a hoodie. It is an email, a password and a Tuesday.
1
A believable email
A fake invoice or a “shared document” lands in a staff inbox. It looks like it came from a vendor or the boss.
2
A password is reused
The link asks them to sign in. The password is the same one they use for email, so the attacker now has the mailbox.
3
Quiet access for weeks
They read mail, learn who pays invoices, and wait for a large one. Then they change the bank details.
4
Where we stop it
MFA blocks the sign-in, email filtering flags the lookalike, EDR catches the payload, and trained staff report it.
Layered defense
Five controls, each covering for the others.
Endpoint detection & response
Behavior-based protection on every PC and server, with alerts reviewed by a person rather than left in a dashboard.
Devices
Identity & MFA
Multi-factor authentication rolled out department by department, plus rules that block sign-ins from places you don’t do business.
Accounts
Email security
Filtering for phishing, spoofing and malicious attachments, and DMARC so nobody can send mail pretending to be you.
Security awareness training
Short monthly lessons and realistic phishing tests, with a report on who clicked and who reported.
People
Separate, tested backups
Off-site backups protected by different credentials, restored on a schedule, so ransomware is an inconvenience rather than a disaster.
Recovery
Cyber-insurance
Your renewal form will ask about all of this.
Carriers have paid out a lot of ransomware claims and the questionnaire is how they decide whether you are a good risk. Every item on the right is now a standard question, and “no” answers raise your premium or get you declined.
- Multi-factor authentication on email, remote access and admin accounts
- Endpoint detection and response on every computer
- Backups off-site, with separate credentials, tested in the last 12 months
- Staff phishing training at least annually, with simulations
- Email filtering with spoofing protection (DMARC)
- Patching within 30 days of release on all systems
- A written incident response plan and someone to call
- Admin rights removed from day-to-day user accounts
Getting started
From assessment to protected in about 30 days.
Step 1
Security assessment
We review your tools, accounts, backups and email setup and score them against what insurers ask for.
Step 2
Report
A plain-English write-up of what’s exposed, what’s fine, and what to fix first. Yours to keep either way.
Step 3
Rollout
MFA, EDR, email filtering and backups put in place in an order that doesn’t lock anyone out.
Step 4
Ongoing monitoring
Alerts watched daily, training sent monthly, and a quarterly review of what changed.
We’re small. Are we really a target?
Yes, because attacks are automated. Criminals don’t pick you; their software finds an open door and walks in. Small businesses are hit precisely because they tend to have fewer controls.
Will MFA annoy my staff?
Less than you’d think. With the app-based prompt, most people approve one sign-in a day on a trusted device. We roll it out one department at a time with a five-minute walkthrough.
Can you help with our cyber-insurance application?
Yes. We go through the questionnaire line by line, put the missing controls in place, and keep the evidence so next year’s renewal takes an afternoon.
Do we need this if we already have antivirus?
Traditional antivirus matches known viruses. Today’s attacks use stolen passwords and legitimate tools, which antivirus never sees. EDR plus MFA closes that gap, and it’s what insurers now require.
What happens if we do get hit?
You call one number. We isolate affected machines, restore from backups, and handle the notification and insurance paperwork with you. A tested plan is the difference between a bad day and a bad month.
Not sure where you stand?
Book a free security assessment. You’ll get a written report whether or not you hire us.