Step 01 · Baseline
Security Baseline
Know exactly where you stand — and what to do first. The free baseline that starts every engagement.
Evidence & Insurance Readiness
Pass the cyber-insurance questionnaire — and mean it.
A supporting part of your security program, not a separate headache. We help you meet the controls insurers ask about, keep the paperwork current, and stay ready when a renewal or audit lands — backed by security we actually run for you.
Book a discovery callInsurers keep raising the bar — and the questionnaire keeps getting longer.
Cyber-insurance carriers now ask for specific controls before they’ll write a policy, and they’ll push back on a claim if your security didn’t match what was on the application. For a small business with no security team, that’s a lot to keep straight.
You don’t need a binder on a shelf. You need controls that actually work — and the proof, ready when someone asks.
Where it fits
The evidence layer of the program — not a separate project.
A supporting capability, not the headline. We help you meet the controls cyber-insurance carriers ask about, keep the documentation current, and stay ready when an audit or renewal lands — built on top of the security we already run for you.
- 01BaselineWe find out where you actually stand and what matters first — a clear picture and a prioritized plan, not a 200-page audit.
- 02ProtectWe harden the things attackers go for: identities, email, devices, backups, and the common ways in.
- 03MonitorWe watch for real threats across your security signals and escalate the ones that matter — managed detection and response coverage with our team handling the response.
- 04RecoverWe keep you ready for the bad day: ransomware and outage preparation, tested backups, and a clear path back to running.
- 05ImproveWe keep raising the bar — a recurring roadmap, an honest record of what’s accepted, and reporting you can actually read.
A real managed security program — five plain-English steps, run for you.
Insurance readiness
The controls carriers ask about — covered, and documented.
These are the controls cyber-insurance carriers expect to see. We set them up, keep them working, and hold the evidence — so getting approved and renewing is calm, not a scramble.
Get insurance-ready →Coverage
8 / 8 carrier-required controls-
Multi-factor authentication
Stop stolen passwords from becoming break-ins.
-
Around-the-clock endpoint detection & response
Catch and contain threats on every laptop and server.
-
Email & phishing protection
Block the #1 way attackers get in the door.
-
Tested, recoverable backups
Backups you’ve actually proven you can restore from.
-
Incident response plan
A clear plan for the bad day — before the bad day.
-
Security awareness training
Turn your team from the soft spot into a first line.
-
Privileged access management
Tight control over the accounts that can do the most damage.
-
Patching & vulnerability management
Close known holes before they’re found and used.
What you get
A real program — built, documented, and kept current.
Aligned to recognized security frameworks behind the scenes, delivered in plain English up front.
A simple security baseline
A plain-English picture of where you stand and what to fix first — the foundation everything else builds on.
A written security plan
A documented program that reflects how your business actually operates — not a generic template that sits in a drawer.
Access controls & encryption
The technical controls that limit who can get to your data and keep it protected in transit and at rest.
A vendor check
A straightforward process for keeping an eye on the third parties who touch your data.
An incident response plan
Clear steps for spotting, handling, and recovering from a security incident — tested, not theoretical.
Team training
Security-awareness training that covers phishing, social engineering, and safe data handling, in language your team gets.
Ongoing monitoring & reporting
Continuous checks with regular reviews and the evidence you’ll want at renewal time — kept current automatically.
A yearly review
Your program evolves with your business. We revisit it each year so your controls stay current as things change.
Evidence, ready
When someone asks for proof, it’s already there.
Our security platform quietly gathers the evidence from your environment as it goes — so when an insurer needs documentation at renewal, you’re not starting from scratch.
- Controls checked continuously, not just at renewal time
- Drift flagged automatically when something slips
- Documentation generated on demand, in plain English
How we work
-
Assess
We check your current controls against what carriers expect and find the gaps.
-
Build
We put the policies and technical controls in place and document everything.
-
Maintain
Regular reviews and evidence collection keep your program current as things change.
Honest scope
What the evidence layer covers — and what stays yours.
What’s included
- Meet the controls carriers require for cyber insurance
- Questionnaire and renewal support, ready when you need it
- Documentation kept current as your business changes
- Aligned to recognized security frameworks
- Evidence drawn from the security we actually run
Not included by default
- Compliance-certification ownership
- Legal or regulatory program ownership
- General IT help desk support
- On-site support
- Incident-response retainers
If we’re not the right fit, we’ll point you to someone who is.
On a deadline?
Need evidence for an audit or insurance renewal?
We can move fast on documentation and evidence for an upcoming deadline. Even if you’re not a managed-security client yet, we can help you get ready.
The rest of the program
The security the evidence comes from.
Steps 02–03 · Protect + Monitor
Managed Security
We run the day-to-day protection so you don’t have to — the security the evidence is drawn from.
Be ready before anyone asks.
Let us handle the complexity so you can focus on your clients. Book a discovery call and we’ll walk through exactly what your business needs.