Inside your environment
Our engineers are badged and provisioned like your own staff. They work in your tenants and on your equipment, and your policies apply to them.
Embedded IT and security operations
Our engineers join your organization as its IT and security team and run the day-to-day work at Tier 1 and Tier 2.
It’s for companies with CMMC, DFARS or FedRAMP obligations and no security team of their own.
Tier 1, Tier 2 and escalation
| Tier | Handles | For example |
|---|---|---|
| Tier 1 | Requests and first response | Account and access requests, MFA resets, device enrollment, and the first look at every alert. |
| Tier 2 | Investigation and change | Alert investigation, identity and endpoint administration, patching, and configuration changes through your change process. |
| Escalation | Decisions and outside help | Risk decisions go to your leadership; incidents that need more go to your incident response provider and to vendor support. |
Where a request goes
Pick a request to see which tier closes it.
- Tier 1Requests and first response (closes here)
- Tier 2Investigation and change
- EscalationDecisions and outside help
MFA reset
Tier 1 verifies the person and resets the factor, and the request closes there.
Day to day with our engineers
We make the fixes
When something needs fixing, our engineers fix it, test it and close the ticket themselves.
Changes on the record
Changes go through your ticketing and change control. That record is the evidence an assessor asks for under configuration change control (CM-3) and audit logging (AU).
Cadence
We hold daily standups and keep the work on a shared board, and you can reach the engineers in between.