Managed cybersecurity
Managed Cybersecurity for U.S. Small and Mid-Size Businesses
Managed detection (M-XDR), support for SOC 2, HIPAA and CMMC requirements, and help when an incident happens, for businesses across 48 states and DC.
What the scan looks at, from the open internet:
- Exposed services
- Leaked credentials
- Expiring certificates
- Misconfigured DNS
- Known CVEs on your perimeter
Get your cybersecurity risk assessment
Custom MDR pricing + external attack-surface scan. We'll be in touch.
Three lanes. One contract. Pricing you can send to the CFO.
The tiers differ in how much compliance work is taken off your plate and how incident response is handled.
MDR Essentials
The baseline every business under 250 seats should have in 2026.
Annual agreement · 50-endpoint minimum
- Managed detection (M-XDR) on every endpoint
- Security monitoring and alert review
- Threat hunting on Windows and Microsoft 365
- Monthly executive report + quarterly posture review
- Phishing training for all staff
MDR + Compliance
Built for the cyber-insurance renewal, the HIPAA audit, or the CMMC contract.
Annual agreement · 50-endpoint minimum
- Everything in Essentials
- Evidence collection mapped to SOC 2, HIPAA, PCI-DSS, or CMMC L2
- Quarterly evidence packet for your CPA or assessor
- Policy templates: IR plan, AUP, data classification, BCP/DR
- Cyber insurance questionnaire completed on your behalf
MDR + IR Retainer
For firms where "everyone stopped working" costs $10k+ per hour.
Scoped by endpoint count & on-site radius
- Everything in Compliance
- Annual tabletop exercise with your executive team
- Dark-web credential monitoring for your domain + exec aliases
- Quarterly external penetration test
We don't sell "compliance." We deliver the packet your auditor actually wants.
Every quarter an evidence package lands in your portal: control mapping, log samples, policy attestations, tested backups, and user-access reviews. Your staff stops fighting spreadsheets.
Security, availability, and confidentiality trust criteria. Most-requested by your B2B customers during procurement.
Healthcare PHI safeguards, support for BAA requirements, annual risk analysis and workforce training records.
Cardholder data environment scoping, quarterly ASV scans, segmentation validation.
110 NIST 800-171 controls for DoD subcontractors. Our partners are registered RPOs.
Criminal Justice Information Services for agencies handling FBI-sourced data.
The framework your cyber-insurance carrier is actually scoring you against.
ISMS controls for clients doing business in the EU or with multinationals.
For financial services, including the 2023 FTC Safeguards Rule for tax preparers and auto dealers.
Five questions. Honest answers.
Do you replace our internal IT team, or work with them?
Whichever you prefer. If you don't have internal IT we can be both, but the two pricing tiers above are security-only.
Can we leave without getting hostage'd on our data?
Yes. Every contract includes a data exit clause: within 30 days of termination we export your logs, configs, and compliance evidence to a format you choose (S3 bucket, encrypted drive, or API handoff to your next MDR). We keep nothing after day 60. This is in writing. Ask for a sample contract and check section 8.
What happens during a breach if we're over our retainer hours?
On the IR Retainer tier, the first 40 hours of any single incident are included. Beyond that we continue working at a pre-agreed $285/hr rate, invoiced monthly. We don't pause the response mid-incident to negotiate. On Essentials and Compliance tiers there's a flat $5,000 IR activation fee when an incident moves to P1, which covers the first 20 hours. Full rate card is in every proposal.
Can we see a sample report before signing?
Yes, email sales@1800officesolutions.com and ask for the redacted quarterly report. It includes the executive summary, alert and incident trends, top threats observed, and quarterly compliance posture. You'll get it back under an NDA we'll send first.
Do you carry cyber liability insurance?
Yes, cyber liability and E&O, both through an A+ rated carrier. We name our clients as additional insureds on request. Certificate of insurance available for procurement.
Managed cybersecurity
Find out what's exposed before someone else does.
Our free external risk scan looks at everything an attacker can see from the open internet: exposed services, leaked credentials, expiring certificates, misconfigured DNS, and known CVEs on your perimeter.
Run my free external risk scan ↑or call (888) 574-5120