24/7 managed detection & response (MDR) - included on Secure+

Someone watching for attacks, even at 3am.

Attackers don't keep office hours. Many strike overnight or at weekends, when nobody is watching. On Secure+, your managed devices and Microsoft 365 accounts are monitored 24 hours a day, 7 days a week by our security operations partner. If they see an attack, they can isolate a device or lock an account straight away, and we follow up.

What you get
✓24/7 monitoring of managed devices
✓24/7 monitoring of Microsoft 365 accounts for suspicious sign-ins and activity
✓Alerts reviewed by security analysts, not just automated rules
✓Threats contained day or night: devices isolated, accounts locked
✓Follow-up investigation and recovery by us in support hours
✓Up to 8 hours a year of incident recovery work included

How it works

01

Detect

Suspicious activity on devices and in Microsoft 365 accounts is picked up around the clock.

02

Analyse

Security analysts check what's happening, so real threats aren't lost in a flood of alerts.

03

Contain

They isolate the device or lock the account to stop the attack spreading - without waiting for approval at 3am.

04

Recover

We investigate and put things right in support hours, and work alongside your cyber insurer if you have one.

Where it helps

Real situations this covers for businesses like yours.

A director's account is phished on a Friday night

Suspicious sign-in activity is spotted and the account locked before it can be used for fraud over the weekend.

Ransomware starts in the early hours

The device is isolated before the attack can spread across the network.

You handle sensitive client data

Law firms, accountants and healthcare practices increasingly need round-the-clock detection to satisfy clients and insurers.

Nobody in-house watches security

You get a security operations team without hiring one.

Which plans include it

EssentialsNot included
£45 per user/month
CompleteNot included
£55 per user/month
Secure+✓ Included
£75 per user/month

Prices exclude VAT. Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price - we manage and right-size your licences. See full pricing.

Common questions

How is MDR different from antivirus and EDR?+

EDR is the technology that detects suspicious activity. MDR adds people: a security operations team watching those alerts around the clock and acting on them. Every plan includes EDR, monitored in support hours. Secure+ adds 24/7 MDR.

Will they lock accounts without asking us first?+

Yes, when it's needed to stop an attack. Waiting for approval at 3am would defeat the point. You're told promptly, and we follow up in support hours.

What happens after a threat is contained?+

We investigate and recover in support hours. Secure+ includes up to 8 hours a year of investigation and recovery work. Beyond that it's charged at the hourly rate or quoted. If you have cyber insurance, we work alongside your insurer's response team.

Which plans include 24/7 MDR?+

Secure+ only (minimum 10 users). Essentials and Complete include EDR, with alerts handled in support hours.

Do we still need cyber insurance?+

We recommend every client has it. MDR greatly reduces the risk, but nothing removes it completely. If you're insured, we work alongside your insurer's response team.

Want this looked after for you?

Free Microsoft 365 security audit - Cancel anytime in your first 3 months