Taking stock
An inventory showing every machine's current agent, which machines are unprotected and which subscriptions have expired.
Service · Cybersecurity
Antivirus and EDR
Ask how a typical small company protects its computers and the honest answer is often “by accident”. Finance runs one vendor's product, recently bought laptops another, the server is on a trial licence that ran out last spring, and a couple of machines have only what Windows provides. Each tool reports to its own dashboard, and warnings collect in an inbox no one checks. When ransomware finally detonates, investigators frequently discover that the criminals' toolkit had triggered warnings several days earlier. No one responded. EDR focuses on behaviour, not just file fingerprints: a spreadsheet spawning PowerShell, say, or a user account that starts scrambling hundreds of files in a few minutes. Yet that visibility is wasted unless a human sees the warning and decides. Our service collapses your protection into a single product managed centrally, fits its settings around the software you depend on, and spells out exactly where warnings go and who picks them up.
One dashboard
for Windows, Mac, servers and mobiles
EDR
catching suspicious behaviour as well as known malware
Quarantine
pull a compromised machine off the network instantly
Named responders
a written answer to “who handles this?”
Scope of the service
Often you already hold the licence, for instance Defender for Business inside Business Premium. We are equally happy working with other reputable vendors.
Consolidation
Legacy products uninstalled properly and one solution deployed everywhere. Running two engines at once slows machines down and leaves gaps between them.
Hardening the agent
Tamper protection switched on, rules that stop Office from launching child processes or running emailed scripts, and protected folders that ransomware cannot write to.
Servers and core software
Exclusions for Pantheon, Minimax, practice management systems and similar, matched precisely to the vendor's guidance. Generous exclusions are where intruders like to hide.
When something fires
Warnings flow to a watched inbox or directly into our ticket queue. Serious ones lead to quarantine of the machine, sign-out of active sessions and a message to you.
Monthly snapshot
A brief overview of coverage, machines behind on updates, events and the actions taken.
How the work runs
Changing products is the easy part; sustained attention is what makes the difference.
01
Audit
We list every endpoint and every security product on it, then confirm whether your current subscriptions are sufficient.
02
Trial
A couple of machines per department go first, revealing clashes with line-of-business apps, label printers or document scanners.
03
Deployment
Legacy agents come off and the replacement is deployed remotely group by group, with coverage verified between batches.
04
Escalation plan
We write down who triages warnings, how they are escalated and what happens after hours, according to the plan you have chosen.
A warning that lands in an unread inbox achieves nothing. There is typically a gap of hours or days between the first EDR flag and real harm. Using that gap requires a human response, which is why a deployment only counts as finished once the escalation plan exists on paper.
Your questions answered
The Defender Antivirus built into Windows provides solid baseline protection. The business editions, Defender for Business and Defender for Endpoint, layer on EDR, central control, machine quarantine and attack surface reduction. The big win is oversight of all endpoints together and the ability to act remotely.
The fix is normally the specific exclusions the software vendor publishes for its folders and processes. Disabling scanning or exempting an entire disk creates a dangerous blind spot. Such conflicts surface during the trial, and the proper exclusions are recorded.
Standard cover is Monday to Friday, 9:00-17:00 Central European Time. Night and weekend response is a contractual option, available with Premium or our 24/7 support service. Without it, we configure automatic responses such as instant quarantine on critical detections, which narrows the gap considerably.
Yes, even with five PCs, since attackers do not skip small firms. Pricing follows device count and plan; the Start plan covers up to 10 users from €450 per month plus VAT.
More services in this area
Service
GDPR and data protection
Processing records, processor contracts, safeguards and a ready plan for when a breach happens
Service
Security policies and documentation
A policy, risk register and procedures that match daily reality
Service
Security tooling roll-out
Choosing, trialling and deploying protection remotely
Service
Infrastructure security
Perimeter clean-up, network zoning and controlled outside access
All your endpoints, one view
Share your device numbers and the protection you run today. We will tell you how far your existing licences can take you.
When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome
Video meetings, Teams and Meet both welcome
Enquiry received
An engineer will write back no later than the following working day. Faults that leave your staff unable to work are always looked at first.
- Questions first. If something is missing before we can estimate, we email you or set up a brief video chat.
- A written quote. It spells out the work, a euro figure excluding VAT and a sensible start date. No fine print, no surprise line items down the road.
- You choose. It lands in your mailbox. Read it at your own pace, query anything that seems vague, and only then make up your mind.