One Coalescent Security
Services
Seven ways we keep small and medium-sized businesses out of the news for the wrong reasons.
Managed Security Services
We watch your systems around the clock and respond the moment an attack starts.
Our team monitors your devices, servers, cloud accounts and email day and night. When something looks wrong we check it, contain it and help you recover, so an attack is stopped before it becomes a breach.
Included
- 24/7 monitoring of devices, servers, cloud and email
- Threat detection with alerts checked by people, not just software
- Incident response: contain, clean up and recover
- A plain-English report every month
Penetration Testing
With your written permission, we attack your systems the way a criminal would, then help you close every gap.
A simulated attack, agreed and scoped with you in writing beforehand, on your website, apps, network or staff. You get every weakness we found, ranked by risk, with the fix for each.
Included
- Website, app and API testing
- External and internal network testing
- Phishing simulations, on request
- A report ranked by risk, with fixes
- A free retest once you have fixed what we found
Security Consulting
Know your real risks and have a plan for them.
We assess where your business is exposed, what it would cost if it went wrong, and what to do first. Then we write the strategy and the policies with you, in language your team will use.
Included
- Risk assessments
- Security strategy and a roadmap
- Policies your staff can follow
- Reporting for boards, investors and insurers
- Staff security training
Endpoint Security
Protection against malware and ransomware on every laptop, desktop, server and phone.
Every device is a door. We protect each one against malware and ransomware, keep it patched and encrypted, and can cut an infected device off from the rest of your network in seconds.
Included
- Malware and ransomware protection
- Patching and update management
- Disk encryption
- Isolation of an infected device
- Lost or stolen device response
Cloud Security
Hardening for AWS, Azure and Google Cloud.
Most cloud breaches come from settings, not from the cloud provider. We review and harden your accounts against recognised benchmarks and keep watching for changes that open you up again.
Included
- Configuration review for AWS, Azure and Google Cloud
- Identity and access: least privilege, strong sign-in
- Exposed storage and services found and closed
- Logging and alerting switched on
- Infrastructure-as-code review
Compliance & Risk Management
Readiness for GDPR, HIPAA and PCI-DSS.
We find the gaps between how you work today and what the rules require, help you close them, and gather the evidence an auditor will ask for. We prepare you for certification; the certificate itself comes from an accredited auditor.
Included
- GDPR, HIPAA and PCI-DSS gap assessments
- Policies, records and evidence
- Supplier and data-flow mapping
- Audit preparation
- A risk register kept up to date
AI-Driven Threat Detection
Real-time anomaly detection that learns what normal looks like for your business.
Models learn how your people, devices and network normally behave, then flag what does not fit as it happens: a sign-in from an unusual place, a device talking to a server it never has, data leaving at three in the morning.
Included
- Behaviour baselines for users, devices and network
- Real-time alerts on anomalies
- Fewer false alarms as it learns your business
- Feeds straight into our 24/7 response