secureIT · Included in every plan

Quiet defense. Around the clock.

Attackers test your defenses every day, so secureIT is built in six named layers, each configured, monitored and reviewed by a person.

Or call 844-625-5925 — a human picks up.

ILLUSTRATIVE EXAMPLE · DEFENDED LAYERS
L1 Perimeter / firewall✕ port scan
L2 Email security✕ fake invoice
L3 Identity / MFA✕ stolen password
L4 Endpoint / EDR✕ ransomware
Attackers try every layer. Every layer is defended, and every attempt is logged.
100%
Satisfaction guaranteed, in writing
72h
From signed agreement to fully onboarded
24h
Every backup screenshot-verified, daily
24/7
Help desk, included on every plan
What's included

Everything secureIT includes, itemized.

Perimeter, email, endpoint with EDR, identity, patching, and managed detection and response. Not bundled, not automated through, not "set and forget."

✓

Perimeter / NGFW

Firewall and next-gen firewall at the edge, configured per tenant, monitored continuously, and reviewed quarterly.

✓

Email security & anti-phishing

Filtering plus URL and attachment defense, and a Direct Send check — the Microsoft 365 gap most tenants leave open.

✓

Endpoint & EDR

Managed antivirus with EDR switched on and triaged by Huntress's security operations team 24/7 — not a brand-name AV with the hard part turned off.

✓

Identity & access

SSO, MFA, and conditional access, with OAuth consent grants and MFA registration drift audited monthly.

✓

Patching cadence

OS, third-party, and appliance patching through NinjaOne, on a schedule, across every endpoint.

secureIT commitments

What you can hold us to.

Five things we do on every account, written down so you can check them.

✓ Six named security layers, each configured and monitored by people.
✓ SPF, DKIM and DMARC re-checked quarterly as your tenant changes.
✓ EDR set to respond, with a person on the other end of every alert.
✓ MFA and app consents reviewed regularly; sessions revoked when something looks wrong.
✓ Firewalls and network gear patched alongside Windows.
Pricing

secureIT. is in every plan.

secureIT is included in every wedoIT plan at our published flat rate. No per-incident fees.

✓ Co-Managed $120/user ✓ Complete $225/user ✓ Remote $180/user
  • Co-Managed EDR + antivirus with ransomware protection · 24/7 human-powered threat hunting · Email security, attachment + URL defense · SSO + MFA, password management · Managed patching — OS, 3rd-party, appliances
  • Complete EDR + antivirus with ransomware protection · 24/7 human-powered threat hunting · Email security, attachment + URL defense · SSO + MFA, password management · Managed patching — OS, 3rd-party, appliances
  • Remote EDR + antivirus with ransomware protection · 24/7 human-powered threat hunting · Email security, attachment + URL defense · SSO + MFA, password management · Managed patching — OS, 3rd-party, appliances

secureIT. asked and answered.

What does "every layer attackers actually use" actually cover?
Six layers — perimeter (firewall, NGFW), email (filter + URL/attachment defense), endpoint (managed AV with EDR), identity (SSO, MFA, conditional access), patching (OS + 3rd party + appliance), and managed detection and response (24/7 human-monitored threat hunting). Each is configured per tenant, monitored continuously, and reviewed quarterly.
What's the difference between EDR and antivirus?
Antivirus matches signatures to known malware. EDR (Endpoint Detection and Response) watches behavior — what processes are running, what they're doing, what they're reaching out to — and responds to suspicious activity even when no signature matches. EDR only helps if someone acts on its alerts. Ours is on, monitored, and triaged by Huntress's security operations team 24/7.
What is Direct Send abuse and why do you check for it?
Direct Send is a Microsoft 365 feature that lets devices in your tenant send email through Microsoft's servers without authenticating. Useful for printers and scanners. Abused by attackers to send phishing email that appears to come from your domain, bypassing your spam filter. Most M365 tenants have Direct Send enabled and unfortified. We check for it during onboarding and again on the monthly tenant audit, and the fix is a configuration change.
How fast does wedoIT respond to a security incident?
For sev-1 incidents — active intrusion, ransomware, mass phishing — Huntress MDR's response team isolates affected hosts within minutes of detection. wedoIT engineers are notified and engaged simultaneously. Containment, root cause, and remediation are documented per incident and shared with the affected client at the speakIT call following the incident.
Do you do compliance work — HIPAA, SOC 2, PCI?
We don't run audits or issue compliance certifications. We do run security stacks that pass compliance audits, document changes against compliance frameworks, and prepare clients for the technical portions of HIPAA Security Rule, SOC 2 Type II, and PCI DSS audits. If you have an active compliance need, we'll tell you what we cover, what we don't, and what additional work or vendor relationships will be required.
Will switching to wedoIT mean replacing security tools we already have?
Sometimes, sometimes not. We use a defined stack because consistency is what makes 24/7 monitoring possible — but we don't rip out tools that work. Onboarding includes a security assessment that maps your existing tools against the six layers we cover; gaps get filled, redundancies get retired, and anything we keep gets folded into our monitoring and documentation.

A 15-minute call. Straight answers.

Tell us what isn't working with your IT today. We'll tell you honestly whether we're the right fit, and if we're not, we'll point you somewhere that is.

And it's guaranteed: if there is ever anything you are not completely happy with, we will do whatever it takes to make it right.

Prefer scheduled? Book a 15-minute call