Every control. Who does the work.

That is us. Platinum raises this to a service agreement with key incident response staff reachable within 8 working hours, which we write into your agreement.

Guardz checks every device firewall is on. We supply and configure the network firewall: UniFi, Fortinet, Check Point, Meraki or Cato.

Guardz managed anti-malware, or Microsoft Defender, Bitdefender or Sophos on our management stack. Mobile devices are covered through official app stores and device management.

Guardz lists third-party apps with known vulnerabilities. We install the patches through our remote management tooling.

Guardz external scanning checks certificates on verified domains. We fix anything flagged with your web host or Cloudflare.

Guardz shows vulnerable software on servers. We patch servers on a documented schedule with critical patches applied within 14 days of release.

Guardz managed EDR, or CrowdStrike, SentinelOne, Huntress or Microsoft Defender, monitoring workstations, laptops and servers with automatic isolation. Diamond adds 24/7 managed detection and response under SLA, which we deliver through our monitoring service.

Guardz external scans run weekly on assets linked to verified domains. We remediate findings, and cover any WAN IPs or VPN portals not on a domain with another scanner.

Guardz reports BitLocker and FileVault status on every device. We turn encryption on through endpoint policy across servers, workstations, laptops, external drives and cloud storage.

Only approved applications may run on workstations and laptops. We build and maintain the approved list and enforce it with ThreatLocker hash, publisher or path rules through endpoint policy.

We enforce macro restrictions across workstations, laptops and servers through Microsoft 365 and endpoint policy. Enable all macros is never selected.

Guardz phishing simulations cover the social engineering element and external scanning covers vulnerability testing. We arrange an external specialist for the annual penetration test.

Guardz dark web monitoring flags leaked credentials tied to your users. We set the password policy in your directory and reset exposed accounts.

We remove local admin rights through directory and endpoint configuration, for local and domain accounts, and keep a record of exceptions.

We audit your directory for shared accounts and replace them with named accounts, so activity can be traced and access revoked on departure.

We deploy and configure 1Password or Keeper for privileged users, with MFA, role-based access and audit logging. Gold extends it to all staff.

Guardz identity threat detection verifies MFA on Microsoft 365 and Google Workspace and detects MFA bypass. We enable MFA in your directory. Platinum restricts it to phishing-resistant methods: authenticator apps or hardware keys, not SMS or email codes.

Guardz flags gaps and blocks spoofing inbound. We configure SPF on every sending domain. Gold steps up to DKIM and an enforced DMARC policy with EasyDMARC or Sendmarc.

Guardz flags connected apps without MFA. We enable it app by app across every cloud business application and social account. Diamond restricts it to phishing-resistant methods.

We configure the firewall and VPN, on UniFi, Fortinet or Cato, so remote desktop is never exposed to the internet and only reachable through a managed VPN or proxy.

We configure least-privilege access across cloud accounts including admins, store SSH keys and remote credentials centrally rather than on laptops, and federate cloud identity with your directory.

Guardz flags data stores without MFA. We enable it on every system holding critical, sensitive or operational data, not just email.

We configure MFA on the VPN for connections from the internet and the corporate network, with Cisco Duo or Okta.

We configure MFA at the remote desktop and network layer with Cisco Duo, covering both internet-facing and internal connections.

We design and test your backups on Veeam, Acronis, Axcient, Synology or Keepit, for the data that matters. Guardz does not cover backup, so this one is ours and the backup vendor. Platinum raises it to weekly or better backups, at least 6 months of retention, a restore tested at least yearly and an offline, isolated copy.

You buy the cover, including ransomware recovery, incident response costs and business interruption. Guardz posture and evidence reports support the application, and we help answer the security questions.

A human resources and legal process binding staff, contractors and third parties before they access your data. We give you a checklist and confirm the evidence is in place.

We draft the policy with you around how your business actually pays and approves invoices, including dual verification for bank account changes.

An on-premises process run by your business, recording name, organisation and check-in and out times. We supply a simple register and the evidence format.

We draft one policy covering security requirements, staff responsibilities and acceptable use, every employee reads and signs it, and we help you review it annually.

Guardz managed detection and response provides live detection, containment and reporting. We write the plan with you: who to call, containment steps and communications. Diamond adds breach notification playbooks for customers, staff, media and authorities.

An operational process: contracts, financial records and HR files shredded or destroyed through a secure service. We help you choose a method and record the evidence.

The Guardz device inventory shows what to retire. We wipe, record and dispose of devices beyond recovery before resale or donation.

Guardz device, user, application and external asset inventories export to seed the register of where sensitive data lives. We add external media and offline hardware. Diamond extends it to map every asset holding personal data, audited annually.

We write rules for which AI tools staff may use with company and client data, how risks are managed and how privacy compliance is kept.

We help you set up a risk-based supplier program: minimum cyber hygiene for suppliers without an equivalent certification, contractual incident notification and an annual review of the certifications they hold.

Carried out through a background checking provider for employees and contractors with administrative privileges or after-hours access, including cleaning and maintenance contractors. We tell you which staff need it.

Guardz adaptive training and phishing simulations with per-user records and grades. We enrol your team and report results. Gold raises this to a continuous campaign with an annual policy review.

The plan must be tested live at least once a year, not just reviewed. We run the red, blue or purple team exercise with your incident response staff, using real detection and response reports as source material.