Managed detection and response for the U.S. and Canada
Someone should be watching your business at 3 a.m. We make sure someone is.
CySecWall is a cybersecurity-first managed service provider for small and mid-sized businesses across the United States and Canada. Your devices are monitored and defended around the clock through our 24/7 security operations partner, and we handle the security assessments, policies and reporting your insurer and auditors ask for.
No long discovery project. The review is a call plus a read-only assessment, and you keep the findings whether or not you hire us.
Illustrative example of the endpoint events handled 24/7. Not live customer data.
Who this is for
Most businesses your size are not targeted by name. They are found by a scanner, phished with a template, and hit on a long weekend. The defense does not need to be exotic, but it does need to be running, monitored, and provable. That is usually the part that falls off the plate of a busy office manager or a two-person IT team.
Your IT person keeps the business running. Security is the thing that gets pushed to next quarter, every quarter.
Licenses for antivirus, backup, and email filtering exist. Nobody reads the alerts they generate at 2 a.m. on a Saturday.
Insurers, enterprise clients, and lenders now ask for MFA coverage, tested restores, and an incident response plan in writing.
Downtime, forensics, legal notification, and lost trust land on the owner. Prevention is the cheapest line item in that story.
What we do
Everything below is included in a managed agreement. 24/7 endpoint monitoring and response is delivered by our security operations partner, a specialist managed detection and response (MDR) team; assessments, policies and reporting come directly from CySecWall. Pick the whole program or the parts your current IT team does not cover.
Around the clock on every device, with a human who can act, not just email you a ticket.
Our 24/7 security operations partner monitors your endpoints and servers continuously, investigates every detection, and removes threats rather than just alerting you to them.
Deployed on every laptop, desktop and server (Windows, macOS and Linux) and kept healthy as people and devices come and go.
Security alerts from Microsoft 365 and Google Workspace for risky sign-ins, new forwarding rules, app consent grants and admin changes, configured and routed straight to us so a person reviews each one.
Our 24/7 partner contains threats on your devices as they happen. We then run the response plan we wrote with you and coordinate with your insurer and legal counsel.
The unglamorous work that removes most of the risk before an alert ever fires.
Baselines for identity, mail flow, sharing, and admin roles, rechecked monthly so configuration drift does not undo the work.
Phishing-resistant MFA rollout, conditional access (sign-in rules based on user, device, and location), removal of standing admin rights, and clean-up of accounts nobody has used in a year.
An enterprise-grade email security gateway checks every message before it reaches an inbox: spam and malware filtering, impersonation protection, and scanning of links and attachments. We also set up SPF, DKIM and DMARC (the standards that stop others sending mail as your domain) to actually reject rather than politely observe.
Scheduled patch windows for operating systems, browsers, and the third-party applications that usually get missed, with anything still outstanding called out in your monthly report.
Microsoft 365 (email, OneDrive and SharePoint) and Google Workspace (Gmail, Drive and shared drives) backed up automatically, with restores tested on a schedule instead of during an outage.
Short monthly lessons and phishing simulations, with reporting that shows who is improving and who needs a hand.
Turning the work into something you can hand to an insurer, a client, or your board.
Quarterly planning, budget guidance, vendor review, and a risk register written in language your leadership team will read.
Acceptable use, access control, incident response, backup and vendor policies written for your business and kept current: the documents insurers and clients ask to see.
Controls and evidence mapped to CIS, NIST CSF, SOC 2, HIPAA or PCI DSS, so audits stop being a fire drill.
We complete the technical sections of your renewal questionnaire and close the gaps that drive premiums or void coverage.
One page you can actually use: what we saw, what we did, what changed, and what needs a decision from you.
How an engagement runs
A 30-minute call, then a read-only assessment of identity, endpoints, email, and backups. You get a findings report, a prioritized list, and a fixed monthly price.
Week 1
We close the gaps that matter first: multi-factor authentication (MFA) everywhere, admin rights trimmed, endpoint detection and response (EDR) on every device, backups running and restoring.
Weeks 2 to 6
Our security operations partner monitors and responds 24/7. We handle patching, training and your monthly report, and your team has one number to call when something looks wrong.
Ongoing
A quarterly working session on risk, roadmap, and budget, plus a tabletop exercise once a year so the plan is not theoretical.
Every quarter
Outcomes
Security that is operated every day, documented as it happens, and explained in plain language.
Threats on your laptops and servers are investigated and remediated around the clock by our 24/7 security operations partner, not left in an inbox until Monday.
MFA coverage, tested restores, and a written incident response plan you can show an underwriter, not just tick a box for.
Backups restored on a schedule and a tabletop exercise each year, so the plan works before you need it.
One page each month: what we saw, what we did, what changed, and what needs a decision from you.
Insurance and audits
Cyber insurers and enterprise clients now ask for specifics, and a wrong answer can cost you a claim. These are the controls they ask about most. We implement them, keep them running, and give you the documentation that shows it.
Check your gaps in 30 minutesControls insurers ask about10 items
We map controls and evidence to
Industries
Regulated data, tight margins, and no room for a week of downtime. We work most often with organizations between 20 and 500 people in:
Plans
Every plan includes onboarding, tooling licenses, and unlimited security support for covered users. Your flat monthly, per-user price is fixed in writing after the free security review.
For teams with capable IT who need the security layer covered.
Fixed quote after your free reviewFlat monthly, per user
Most companies start here
The full program for a business without a dedicated security person.
Fixed quote after your free reviewFlat monthly, per user
For regulated work, enterprise clients, or an audit on the calendar.
Fixed quote after your free reviewFlat monthly, per user
Minimum 15 users. Servers, network devices, and site coverage are quoted separately. Co-managed arrangements with an existing IT provider are welcome.
| What is included | Essentials | Managed | Managed plus compliance |
|---|---|---|---|
| Enterprise-grade EDR on every endpoint and server | Included | Included | Included |
| 24/7 managed detection and response | Included | Included | Included |
| Enterprise-grade email security and DMARC enforcement | Included | Included | Included |
| Monthly security report | Included | Included | Included |
| Microsoft 365 hardening and drift checks | Not included | Included | Included |
| Patch management | Not included | Included | Included |
| Microsoft 365 and Google Workspace backup with scheduled restore tests | Not included | Included | Included |
| Awareness training and phishing simulations | Not included | Included | Included |
| Incident response included | Not included | Included | Included |
| Virtual CISO and quarterly planning | Not included | Not included | Included |
| Security policies drafted and maintained | Not included | Not included | Included |
| Framework mapping and evidence collection | Not included | Not included | Included |
| Client security questionnaires handled | Not included | Not included | Included |
| Annual tabletop exercise | Not included | Not included | Included |
Our approach
We are not a help desk that added a security package. Every engagement is built around detection, response, and evidence.
Endpoint monitoring, threat hunting and remediation by a specialist managed detection and response (MDR) team, day and night. You get the coverage without building a security operations center.
Co-managed by default. Your internal team or existing MSP keeps the business running while we cover the security layer.
Your assessment, security policies and monthly report are prepared by CySecWall’s founder, in language an owner can read.
Questions we get
Have a question that is not answered here? Ask us directly.
hello@cysecwall.comStart here
Tell us a little about your business and we will come back within one business day with a time. If it turns out you do not need us, we will say so.
A few details about your business. We reply within one business day.
The ten controls insurers ask about, with how to check each one yourself. No form required.