Antivirus solutions have traditionally relied very heavily on something called ‘signature matching’ to determine threats to the device. AV software compares files against a known database of “bad” files.

Secure IT™ EDR includes monitoring and detection of threats, including those that may not be easily recognized or defined by standard antivirus. Secure IT™ EDR is behavior-based, so it can detect unknown threats based on a behavior that isn’t normal.

ActiveEDR intelligently automates EDR by providing Storyline context (shown in MITRE ATT&CK Phase 2 testing) and a full range of automated and manual remediation actions. Devices defend themselves autonomously by terminating and quarantining unauthorized processes and files in real-time. Devices also heal themselves with surgical, automated remediation and rollback to help reduce Mean Time to Remediate (MTTR). Threat hunters and incident responders can also use these functions to mark identified suspicious situations as threats for automatic, estate-wide remediation which greatly increases responder efficiency.

Any kind! Administrators can create highly granular control for any type of USB device as defined by the USB standard. Policy can be defined by vendor ID, product ID, serial number or by class of device which includes things like audio, printers, mass storage, smart cards, video devices, USB-C devices, personal healthcare devices, and more.

Our solution offers native OS firewall control for Windows, Mac, and Linux. Your security policies may require different local OS firewall policies applied based on the device’s location. For example… perhaps a more restrictive policy is used outside the organization’s network vs. a more open policy inside the network. Administrators craft network location tests that help the endpoint automatically determine what network it’s connected to then applies the correct firewall policy accordingly.

We provide an in-depth report detailing the current state of the environment from a security perspective along with a prioritized list of vulnerabilities based on risk for rapid analysis of critical activities to be performed.

A list of supported OS/Technologies can be found through the following URL link :

https://success.qualys.com/support/s/article/000006627

We will present the found remote vulnerabilities with a remediation plan on a bi-monthly schedule. This will outline vulnerabilities in order of severity, to help provide direction in which items to address in order toto address detected vulnerabilities in the systems. 

Ransomware has increased 443 percent over the last year during the pandemic so there is a good chance that even a small company would experience cyber security event.

All engagements are orchestrated through an Incident Response manager that is dedicated to your organization along with a team of incident responders.