SMB Full Stack Managed Security — $1,500/month

Every layer covered, one retainer

Endpoint, identity, email, network and backup — managed together under one monthly retainer, so the gaps between tools stop being where things get through.

The five layers

• Endpoint — managed next-generation protection with monitoring, health verification and policy management across your estate.
• Identity — conditional access review, MFA enforcement, privileged access controls and continuous monitoring of identity events.
• Email — filtering, impersonation and spoofing protection, sending-domain authentication maintained, phishing report handling.
• Network — perimeter and remote access configuration review, segmentation guidance, and monitoring of edge device logs where they can be collected.
• Backup posture — verification that backups exist, run and can be restored, including immutability and offsite checks. Restores stay yours to execute.

The 90-day roadmap

Every Full Stack engagement produces a sequenced roadmap at day 30 rather than a flat findings list. Items are ordered by the two questions that actually matter:

1. If this were exploited tomorrow, how bad is it?
2. How much effort and disruption does fixing it cost?

High-impact, low-effort items go first, always. The roadmap is re-sequenced at each quarterly review as the environment changes.

What is not included

• 24/7 staffed detection and response. Stack coverage without an MDR tier is management, not monitoring — pair this with MDR Essentials or Complete if you want eyes on it around the clock. We would rather you knew that before buying than after.
• General IT helpdesk and end-user support.
• Hardware, licences and third-party subscription costs, passed through at cost or bought by you directly.
• Executing restores, rebuilds or change-controlled remediation.
• OT/ICS environments, and cloud workload protection beyond standard SaaS tenancy hardening.

Your first 30 days

1. Day 0–3 — kickoff and full-stack discovery. Existing tooling documented before anything changes.
2. Day 4–10 — endpoint and identity deployment and configuration.
3. Day 11–17 — email and network configuration review against a recorded baseline.
4. Day 18–24 — backup verification including a test restore of a sample workload.
5. Day 25–30 — baseline report and the sequenced 90-day roadmap.

Billed monthly. No minimum term. Cancel any time before your next renewal date.