Cyber security that fits a small business
Most attacks on small businesses start with a convincing email or a reused password. We put the protections in place that stop those attacks, check them every month and train your staff to spot the rest.
Cyber security for small and medium businesses
Small businesses are attacked because they are easy, not because they are interesting. Criminals send invoice-change emails, fake Microsoft sign-in pages and messages from the boss asking for gift cards, thousands at a time, and wait for someone to click. Once they have one mailbox they read it quietly, learn who pays whom and strike when the money moves.
Good security for a ten-person office is not expensive software. It is a short list of settings applied everywhere and kept that way: multi-factor sign-in on every account, email filtering, up-to-date devices, sensible admin rights, and backups that a criminal cannot delete. Most breaches we see happen because one of those was missing or had quietly been switched off.
We start by finding where you stand. Then we fix the gaps in order of risk, put monitoring in place so changes are noticed, and give you a plain-English report you can hand to your insurer or a client who asks.
What's included
Security review
We check accounts, devices, email, backups and the network against a practical checklist and show you the gaps by risk.
Multi-factor sign-in
Every Microsoft 365 and key business account protected with a second step, set up so staff aren't locked out.
Email protection
Filtering for phishing, impersonation and malicious attachments, plus the domain records that stop others sending as you.
Threat detection
Modern protection on every computer that spots suspicious behaviour, not just known viruses, and alerts us.
Backups criminals can't reach
Copies kept separately with version history, so ransomware can't delete your way back.
Staff training
Short, regular lessons and safe practice phishing emails, so staff learn what a real attack looks like.
Admin rights
Day-to-day accounts without admin power, so one wrong click can't install anything it likes.
Incident help
If something goes wrong we lock accounts, contain the damage, find out what happened and help you notify the right people.
Who is our security service for?
Talk to us about security if:
- You have had a scam email get through or a mailbox taken over
- Your insurer has sent a cyber questionnaire you can't answer
- A client or tender asks about your security controls
- You hold personal information covered by the Privacy Act
- You aren't sure whether multi-factor sign-in is on for everyone
Not sure where to start?
Our free IT health check looks at your devices, accounts, backups, security and network. You get a short written report with what is working, what is at risk and a price to fix it. No obligation.
Book the health checkCyber security questions
We're small. Are we really a target?
Yes. Most attacks are automated and aimed at whoever is easiest to get into. Small offices are attractive because they often lack basic protections.
What should we do first?
Turn on multi-factor sign-in for every account, check your backups can be restored and make sure computers are updating. Those three cover a large share of real-world attacks.
Is security included in managed IT?
The basics are in every plan. Email security, backup and monitoring start at the Managed plan, and staff training and device policies are in Complete.
Can you help with an insurance questionnaire?
Yes. We'll answer the technical questions accurately and fix anything that would otherwise be a 'no'.
What happens if we are hacked?
Contact us straight away. We secure the accounts, stop the spread, preserve evidence and work with you on what to tell clients, your bank and, where required, the Privacy Commissioner.
Do you do penetration testing?
We focus on practical protection for small and medium businesses. If you need a formal penetration test, we can arrange a specialist and fix what they find.
Other ways we help
Managed IT
One monthly price per person for support, security, updates and backups. Your outsourced IT team.
Managed IT
IT support
Remote and onsite help when you need it, billed by the hour. No plan, no contract.
IT support
Microsoft 365
Licences, email, Teams and SharePoint set up properly, moved across safely and managed for you.
Microsoft 365