Cyber security

Detection and response, 24 hours a day

Every client receives Huntress managed endpoint detection and response, identity threat detection and response for Microsoft 365, and a managed SIEM. Huntress analysts in the 24x7 security operations centre investigate alerts, isolate compromised devices and lock compromised accounts, then hand the incident to our engineers to clean up and report.

• Managed EDR on every Windows and macOS device, working with Microsoft Defender
• Identity threat detection for Microsoft 365: suspicious sign-ins, mailbox rule abuse, token theft
• Centralised log collection and alerting through a managed SIEM
• Human analysts on watch at nights, weekends and bank holidays

Zero trust network design

Most homes and many offices run on one flat network. The CCTV system, the guest Wi-Fi, the smart thermostat and the finance director share it. One weak device then gives an attacker a route to everything else.

We separate your network into zones, apply least-privilege access, and verify every user and device each time they connect. If something is compromised, the damage stays contained.

Email security

Email is still how most attacks start. We filter inbound mail for phishing, impersonation and malicious attachments, add continuity so you can keep working if Microsoft 365 has an outage, and train your staff to recognise what gets through.

Vulnerability management and testing

• Continuous vulnerability scanning across devices, servers and internet-facing services
• Microsoft 365 and CIS benchmark checks, with a prioritised remediation plan
• Penetration testing and attack simulation through accredited partners
• Dark web monitoring for your domains, so we can reset exposed credentials before they are used

Policies, people and process

Technology covers part of the risk. We write the policies your regulator and insurer expect to see, run phishing simulations and short training for staff, and test your incident response plan with you before you need it.