What we actually watch
An agent on every laptop, desktop and server, and a sensor on the network edge. Between them they see sign-ins, new processes, new services, outbound connections and changes to the accounts that matter. That stream comes to us, not to a dashboard you are expected to check.
- Endpoint detection and response on every managed device
- Sign-in and mailbox-rule monitoring for Microsoft 365 or Google Workspace
- Firewall and DNS logs, kept for twelve months
- Dark-web monitoring for your domains and staff addresses
- A monthly summary written for humans, one page long
What happens when something moves
- We look first. Every alert is reviewed by an analyst before anyone is woken up. Around nineteen in twenty are nothing, and you never hear about them.
- We contain it. If it is real, the affected machine is isolated from the network within minutes. We have your standing permission to do this, agreed in advance.
- We call you. A person, by phone, on the number you gave us for exactly this. Not a ticket, not an email at 3am that you will read at nine.
- We write it up. What happened, what we did, what we recommend. Usually the same day.
An alert is not an incident
Most monitoring services forward you everything and call it transparency. We think the service you are paying for is the judgment about what to ignore.
Questions we get asked
Will the agent slow our computers down?
Not noticeably. On a machine from the last five years it uses about as much as a chat application. If a particular device struggles, we tune it or exclude the workload that is causing it.
Can you see our files or read our email?
No. We see metadata: which process started, which address it connected to, which account signed in from where. We do not see document contents or message bodies, and the agreement says so.
What about devices staff own themselves?
We do not put agents on personal devices. We do make sure those devices can only reach company data through routes we can watch, which amounts to the same protection without being in anyone's personal phone.