Frequently asked questions
Answers to the questions we hear most. Don't see yours? Get in touch.
What is an MSSP, and how is it different from hiring IT staff?
A managed security services provider (MSSP) delivers cybersecurity as an ongoing service — monitoring, detection, and response — without you having to recruit, train, and retain a full in-house security team. Your IT staff keep systems running; we focus specifically on defending against threats, around the clock.
Do you replace our existing IT team or security tools?
No. We work alongside your team and, wherever possible, with the tools you already own. We're vendor-agnostic — if something you have works well, we use it; if there's a genuine gap, we'll tell you.
How long does onboarding take?
Most businesses are fully onboarded within two to four weeks, depending on the size and complexity of your environment. We begin monitoring critical systems early in that window so you are protected as quickly as possible.
What size of business do you work with?
We focus on small and mid-sized Canadian organizations — typically from around 10 to 500 employees — that need enterprise-grade security without an enterprise-sized team.
Is our data kept in Canada?
Yes. Our analysts are based in Canada and your security data stays in Canada, which helps you meet PIPEDA and provincial privacy requirements.
What happens when you detect a security incident?
Our analysts investigate immediately, confirm whether it's a real threat, and move to contain it — for example, isolating an affected device. We then notify your designated contacts, guide remediation, and follow up with a root-cause review so it does not happen again.
How is your service priced?
Pricing is based on the number of users and systems we protect and the plan you choose, rather than a fixed package. Our pricing page shows what each plan includes — from there you can request a quote tailored to your environment.
Do you help with compliance and audits?
Yes. Our compliance and risk advisory service helps you assess gaps against frameworks like PIPEDA and SOC 2, build the necessary policies, and produce audit-ready evidence.