Managed security for accounting and professional firms
We run the security controls your clients and your cyber insurer expect: managed detection and response on every computer, protection for your Microsoft 365 or Google Workspace accounts, and backups kept in Canada.
For firms of 5 to 100 people, anywhere in Canada. We don't support home computers or residential clients.
Your next cyber insurance renewal
Questions that appear on most applications, and how we answer them
- Is multi-factor authentication enforced on email and remote access?Set up and monitored for account takeover with Protect Identity
- Is endpoint detection and response (EDR) running on every computer and server?Huntress managed EDR, part of Protect Essentials
- Are security logs collected and kept?Huntress SIEM, part of Protect Essentials
- Are backups protected from deletion, kept off-site and tested?Axcient backup stored in Canada, with logged test restores, in Protect Recover
- Is your email domain protected against spoofing with DMARC?Managed SPF, DKIM and DMARC with Protect Domain
- Are operating systems and software patched on a schedule?Scheduled patching and monitoring, part of Protect Essentials
Wording and requirements vary by insurer. Send us yours and we'll map it for you.
Who we work with
Accounting firms, law firms and other professional practices with 5 to 100 staff. Most run Microsoft 365, some run Google Workspace, and plenty still have a server in the back room. All of them hold client information they can't afford to lose or leak.
Accounting firms
Tax season uptime, client financial records, and the CRA-themed phishing that arrives every spring.
IT security for accounting firmsLaw and professional services
Law firms, engineering and design practices, financial advisors and consultants who answer to clients and regulators.
IT security for professional servicesWe're not the right fit for home users, home-office setups or anyone shopping for the lowest hourly rate. Our work is managed security on a monthly subscription, with support at $165 an hour or included in a managed plan.
One stack, four layers, priced per unit
Every client runs the same short list of tools. Each layer answers questions your insurer asks, and each is billed by what you actually have, adjusted every month.
Protect Essentials
Computers and serversManaged detection and response from Huntress, backed by its security operations centre around the clock. Security logs collected for investigations, and patching on a schedule.
- Huntress managed EDR on every computer and server
- Huntress SIEM log collection
- Windows and application patching
- Remote monitoring and management
Protect Identity
Microsoft 365 and Google Workspace accountsAccount takeover detection from Huntress, plus a separate backup of mail, files and Teams that does not depend on Microsoft or Google.
- Huntress ITDR for suspicious sign-ins, inbox rules and session theft
- Axcient x360Cloud backup of mail, OneDrive, SharePoint and Teams, or Gmail and Drive
Protect Domain
Your email domainSPF, DKIM and DMARC set up and managed through EasyDMARC, so mail that pretends to come from your firm gets rejected instead of delivered.
- DMARC moved to enforcement in planned stages
- Monthly review of who is sending as your domain
Protect Recover
Servers and key computersImage-based backup with Axcient x360Recover, stored in Canada and protected against deletion. A failed server can be started in the cloud while the hardware is replaced.
- Canadian-hosted backup storage
- Deletion protection for backup copies
- Test restores on a schedule, logged
Prices in Canadian dollars, plus applicable taxes. Minimum 5 devices. Full pricing and terms
How a new client starts
Nobody signs up blind, including us. Every new client is reviewed before anything is quoted or billed.
Tell us about your firm
A short form: size, platform, and what your insurer or clients are asking for.
We review it
Our team reads every request. If we're not the right fit, we'll say so and point you somewhere useful.
Assessment and quote
A call, a look at your current setup, and a written quote with per-unit pricing.
Onboarding
We deploy the stack, close the gaps we found, and start monthly billing.
Two free checks
Both are useful whether or not you ever become a client.
Cyber insurance policy review
Send us your policy and your renewal application. We'll tell you in plain language which security controls your insurer requires, which ones your firm already has, and what it would take to close the gaps.
Start a reviewEmail domain check
See in a few seconds whether your domain is protected against spoofing. No email address required.
Why firms stay with us
In business since 2010
Most of our clients have been with us for the better part of a decade, and much of our new work comes by referral from accounting firms we already look after.
We run what we sell
Our own systems use the same Huntress, Axcient and EasyDMARC stack, with multi-factor authentication on every tool we touch.
Canadian by default
We operate only in Canada. Backup storage is hosted in Canada, and we'll tell you plainly when a service routes data through the U.S.
Insured, with terms on the record
We carry technology errors and omissions and cyber liability insurance, and our Master Services Agreement is published for anyone to read.
Ready when your firm is.
Tell us about your firm and what your insurer is asking for. Every request is reviewed by our team, usually within one business day.