Security Add-ons

Advanced endpoint detection and response powered by human threat hunters. 24/7 monitoring with real-time alerts.

Secure password vault and MFA enforcement for your entire team. Prevent credential-based breaches.

Advanced email filtering against phishing, ransomware, and business email compromise (BEC) attacks.

Security awareness training, simulated phishing campaigns, and compliance modules for every staff member.

Continuous dark web surveillance. Get instant alerts when your organization's credentials are exposed.

Simulated external attack on your public perimeter — websites, email servers, cloud services, and exposed ports. Full findings report with CVSS scores + remediation roadmap.

On-site assessment of internal network, lateral movement, privilege escalation, and Active Directory vulnerabilities.

Controlled EN/FR phishing campaign — click-rate tracking, per-department breakdown, teachable-moment landing page, and training recommendations.

External + internal + phishing simulation combined. Comprehensive findings report, executive summary, and remediation priority matrix.

Instant SMS for high-severity events — ransomware detection, account compromise, critical device failures. Up to 5 recipients with escalation logic.

Plain-language weekly security summary: top threats blocked, devices needing attention, action items. Available in English or French.

Named CyberShield analyst assigned to your organization. Proactive threat hunting (10 hrs/mo), monthly 30-min debrief call, priority business-hours response.

Named analyst + backup, 24/7 active alert triage, incident containment first 4 hours, weekly briefing report, direct analyst hotline for your leadership.

Custom PIPEDA-aligned Information Security Policy tailored to your NPO's structure, tools, and risk profile. Board-ready executive summary included.

Step-by-step breach playbook — role checklists, regulatory notification procedures (OPC, funders), communication templates, and recovery priorities.

Tailored procedures for a specific domain — remote work, volunteer onboarding, data retention, or third-party vendor access. Plain language, EN/FR.

Security-first network topology — VLAN segmentation, firewall rule strategy, wireless architecture. Delivered as documented diagrams + hardware recommendations.

Full system landscape mapping — identity & SSO, RBAC, cloud vs. on-prem placement, data flows, and migration roadmap.

15-point security assessment, 1-page findings report, top 5 risks with impact ratings, and quick-win recommendations. In person or virtual. EN/FR.

Full privacy audit — data flow mapping, gap analysis against PIPEDA principles, consent & retention policy review, and remediation plan with timelines.

Threat identification workshop, likelihood × impact risk matrix, top 10 risks, control mapping, and a living risk register document.

20-point in-person walkthrough — backup test, patch status, access rights audit, policy currency check. Written findings delivered same day.

Remote or on-site help for device issues, account lockouts, software problems, and general IT troubleshooting. Bilingual technician. Per hour or monthly block.

Full disk encryption, MDM enrollment, antivirus/EDR deployment, OS patch baseline, and configuration documentation. Priced per device.

User provisioning, MFA + conditional access, email security (SPF/DKIM/DMARC), shared drives, and bilingual staff onboarding guide.

Automated backup — cloud + local, 3-2-1 strategy, test restore with documented proof, and recovery time estimate (RTO) report.

Enterprise wireless — site survey, staff/guest/IoT SSIDs, WPA3 + VLAN segmentation, access point installation and network diagram.

Hardware or virtual next-gen firewall — custom rule set, IDS/IPS, DNS filtering, integrated with ConnectWise monitoring stack.

Zero-trust remote access — solution selection, user provisioning, certificates, split-tunneling config, and staff setup guide (EN/FR).

End-to-end redesign — structured cabling, switches, firewall, access points, full VLAN segmentation, and as-built documentation package.

On-premises server setup, OS hardening, Active Directory configuration, Group Policy security baseline, workstation imaging, and domain join.

MDM setup — device enrollment (BYOD & corporate), security policy enforcement, remote wipe, app allowlist/blocklist management.

Migration from local drives or legacy servers to secure cloud file storage — permission mapping, phased migration, governance rules, staff training.

Half-day or full-day security awareness workshop — scenario-based, phishing + ransomware focus, staff certificates. Available in English or French.