Threat Monitoring

Monitoring means somebody is watching your systems for signs of an attack, and you hear about it early rather than from a customer. What matters is what is watched, who watches it and when.

What we do

• Agree what is monitored, and what counts as an alert worth waking someone for
• Collect the logs and signals that show something is wrong
• Review what comes in, so you get findings rather than a feed
• Tell you what needs action, and what it means
• Agree in advance what happens when something serious is found, and who does it

Who it's for

Companies running systems that customers depend on, and companies who have had an audit or a test done and want the problems found next time before they matter.

Related security work

• Software Security — code review, hardening and keeping updates applied.
• Security Audits — a structured review and a prioritized report.
• Penetration Testing — an authorized attempt to break in.