Security that’s measured, not guessed.
21 layers of cybersecurity and counting, each one chosen to close a gap in a national framework. We measure where you stand, close the gaps that matter most, and watch for trouble so you see it before it costs you.
Who it’s for
Businesses that can’t afford downtime
If a ransomware attack would stop you from operating, this is for you.
Anyone with an insurance renewal
Carriers ask about MFA, endpoint protection and backups. We help you say yes.
Teams handling sensitive data
Client files, health records, payment data or defense information.
Every layer, mapped to NIST CSF
Each layer closes a gap in a national framework. Grouped here by the six NIST CSF 2.0 functions.
Govern
- IT security policy management
- Third-party vendor management
- Change management
- Yearly network security audit
- Tabletop incident drills
Identify
- Complete hardware & software asset inventory, always up to date
- Continuous vulnerability scanning
- Penetration testing
Protect
- MFA everywhere
- Privilege auto-elevation
- Password manager
- Self-service password reset
- User verification
- OS & third-party patching
- Email security & spam filtering
- DMARC monitoring
- Browser security
- Security awareness training
- Simulated phishing
- Email encryption
- Endpoint encryption
- Private cloud file sync & share
Detect
- EDR (endpoint detection & response)
- ITDR for Microsoft 365
- Threat hunting
- SIEM
Respond
- ITDR for Microsoft 365
- MDR (managed detection & response)
- Incident response planning
Recover
- Bit-level server backups
- Microsoft 365 backup
Included in our Complete plan
How it works
Assess
Score your environment against the CIS Controls and NIST CSF.
Prioritize
A plain-English list of gaps, ranked by risk and cost.
Protect
Deploy the layers you’re missing and harden what you have.
Detect & respond
Ongoing monitoring, with a plan for what happens when something fires.
Re-measure
Rescore regularly so you can see resiliency improve.
If your systems were ransomed tomorrow, could you see what happened before, during and after the attack? That visibility is what we build. We make the invisible, visible.
Common questions
Why 21 layers?
No single tool stops every attack. Each layer covers a different way in, mapped to the CIS Controls and NIST CSF, so if one is bypassed the next one catches it. We add layers as threats change.
Isn’t antivirus enough?
Not anymore. Most attacks today use stolen logins and legitimate tools, so you need identity protection, monitoring and tested backups too.
Will this satisfy my cyber insurance questionnaire?
It covers the controls carriers ask about most, and we help you answer the questionnaire accurately.
Where do I start?
With a scorecard. It shows where you stand today and what to fix first.