Our promise
You are 30 days away from improving your cybersecurity posture
A fully managed cybersecurity solution — security operations centre or incident response team — delivered in 30 days.
30 days
A fully managed solution, sized for your business
Through experienced advice and mitigation focused on what matters most, small and medium-sized businesses can meaningfully improve their security in the context of a rapidly evolving threat landscape. Leveraging more than 100 years of combined experience, SDA provides SMBs with a fully functioning security operations centre or incident response team within 30 days through its unique dual- and multi-shoring support model.
Through a combination of local and remote capabilities, we give you peace of mind and a single point of contact for your security challenges.
-
Give your leaders the awareness they need
Build a shared understanding of cybersecurity risk at the executive level.
-
Assess your current security position
Establish a realistic, prioritized view of exposures and gaps.
-
Agree a right-sized mitigation program
Focus effort where it improves your security posture the most.
-
Deploy intelligence probes
Roll out agents manually or by GPO across endpoints — on-premises, cloud, data centre and network — and connect your SIEM, or stand up a new one.
-
Monitor 24/7 with expert analysts
Your security posture is watched around the clock by level 1 to 4 experts.
Our approach
CYREBRO-X and OSQuery
Using CYREBRO-X, organizations do not need to deploy complex and expensive SIEM solutions to gain visibility, nor rely on proprietary EDR tools that are limited to network vectors and designed for large enterprises. CYREBRO-X leverages the power of the most reliable and proven agent query system: OSQuery, an open-source data aggregation tool built to help security experts ask the right questions of the operating system and identify threats.
Unlike a SIEM deployment topology, where a single appliance collects logs from multiple sources, CYREBRO-X collects logs and critical information from every workstation, laptop and cloud service on which it is deployed — creating better visibility and helping detect threats in real time, wherever they are.
Once deployed, the agent begins querying technical data and Windows event logs defined by CYREBRO’s monitoring and threat-hunting experts. Our teams work continuously to develop new methods of detecting and identifying threats on endpoints, in the network and from cloud services. Whenever a new threat is published and identified by our teams anywhere in the world, CYREBRO uses the information gathered to identify and alert on compromised hosts. The endpoint agent continuously updates its database over a secure connection to CYREBRO-X lab servers.
No monitoring solution is complete without cloud coverage. CYREBRO-X provides monitoring across Office 365 and G Suite to identify suspicious or malicious activity in those services. Additional IaaS and PaaS cloud services will be supported in CYREBRO-X V2. Once collected, CYREBRO Cloud applies threat-intelligence enrichment and detection techniques, from a basic correlation engine to advanced anomaly detection based on intelligent learning. CYREBRO-X retains data for 90 days to identify threats retrospectively using new intelligence and to let CYREBRO analysts conduct deeper investigations and root-cause analysis of the most complex security incidents.
SDA partners will sit with you to understand your business and the security challenges you face. SDA will propose a cost-effective approach that provides value immediately — not 18 months from now. Whether you lead a small or medium-sized enterprise, our know-how and capabilities will meet and most probably exceed your expectations.
The human layer
A single point of contact, backed by a team
Monitoring technology is only part of the answer. Your service is backed by analysts, threat hunters and partners who understand your environment and can act when it matters. Meet the people behind SDA.
30 days
Let’s map your path to managed security
Tell us about your environment and current coverage. We will come back with a practical, right-sized proposal.