Services
Expert help when you do not have a security team.
You do not need to hire a team to be protected. Our services cover the leadership, watching, testing and training that a small business cannot easily staff, using the CyberGrape platform and trusted partners.
The problem
Most small businesses cannot staff security.
No one owns it
Security falls to whoever has time. Nobody has the job of knowing where you stand.
Nobody is watching
Tools raise alerts, but nobody sees them at night or at weekends.
Hard to prove
Clients and insurers ask for evidence, and there is nobody to pull it together.
What changes
From doing it alone to having help.
First
The free readiness assessment shows where you stand and which services, if any, make sense.
Then
You choose what you need. Services start small and can grow.
Ongoing
The work happens in the platform, so you can see what is done and what is next.
How it works
How it works.
Start with where you standThe free assessment comes first.How this works underneath
The shows where you stand and what to fix first. We use it to suggest services, and we will say if you do not need any.Choose what you needOne service or several.How this works underneath
Services are separate. You can take a security leader without monitoring, or testing without training. Where a partner delivers part of a service, we say so on the page.We work in your platformEverything we do is visible to you.How this works underneath
Our people work from the CyberGrape platform, so risks, fixes, policies and evidence sit in one place you can see.
What it connects to
Delivered with trusted partners.
Where a partner delivers part of a service, the service page names them.
A small example
What this can look like.
- Situation
- A client asks for proof of security and the business has no one in charge of it.
- What it chooses
- A security leader at the Active tier and awareness training for all staff.
- What happens next
- The leader sets the plan and runs it in the platform. Training records flow into the proof pack.
- What the owner can say
- "We have a named leader, trained staff and a record of both."
This is an invented example to show how the service works. The names and figures are not a real customer's.
Services
The five services.
CSO as a service
A security leader on call, without the full-time salary
A senior security leader for a set number of hours each month.
Read moreManaged security
Protection on every device, watched around the clock
Someone watching your devices and cloud around the clock.
Read moreThird-party risk
See supplier risks before they land on you
A ranked view of your risks and your suppliers' risks.
Read morePenetration testing
Find the weak spots before an attacker does
Testing that finds weak spots and gives you something to show clients.
Read moreAwareness training
Training and phishing tests that change habits
Short training and phishing tests, managed for you.
Read moreQuestions
Common questions.
CSO as a service (a security leader for a set number of hours each month), managed security (monitoring and protection around the clock, with partners), third-party risk (your risks and your suppliers' risks), penetration testing (delivered with Blacklock Security) and awareness training (through usecure). SMB1001 certification support is covered on its own pages.
A senior security leader for a set number of hours each month. The tiers are 16, 32 or 64 hours a month. They own your plan, report to your board or owner and lead if something goes wrong.
Monitored detection and response is required for SMB1001 Diamond (control 1.12.1.0) and recommended for Platinum. For Bronze to Gold, endpoint protection and awareness training are the main measures.
Start with the free readiness assessment. It shows where you stand, and we will tell you which services, if any, make sense.
Find out where you stand.
Start with the free readiness assessment. It shows you where you stand, and we will tell you which service, if any, makes sense.