The problem
Many breaches go unnoticed for weeks. We review whether your logging and alerts would catch an attack, and whether your people have a plan when they do.
What's included
- Review of logging, monitoring and alerting coverage
- Review of your incident response plan, or help drafting one
- Guidance on what to log and what to alert on
- Optional tabletop exercise to rehearse an incident
How it works
- 1
Scope and authorise
We agree what is in scope, the rules of engagement, and get written authorisation before any testing starts.
- 2
Review and test
We examine your configuration and, where agreed, test it the way an attacker would.
- 3
Report
You get a clear report: what we found, how serious it is, and how to fix it, in plain English.
- 4
Retest
Once you have made fixes, we check they actually worked.
FAQs
We have no incident plan at all. Is that a problem?
It is very common. We can help you draft a simple, practical one that people will actually follow.
Do you offer 24/7 monitoring?
This service is a review and advice, not a 24/7 monitoring service.