Skip to content
ONECOMET
Menu
Get in touchor call 04 555 1500

Security

Cyber security

Sensible protection, without the scare tactics.

Talk to us about Cyber security

Endpoint protection with Malwarebytes ThreatDown or Bitdefender, business password management with 1Password Enterprise, plus the backups and multi-factor authentication that stop most attacks before they start.

What you get

  • Protection on every machine, with the alerts coming to us
  • Passwords out of spreadsheets and shared inboxes
  • Access removed the day someone leaves, not weeks later
  • Backups that have actually been tested by restoring something
  • A plain-language picture of where you're exposed

What we deploy

Endpoint protection from Malwarebytes ThreatDown or Bitdefender, and 1Password Enterprise for passwords.

Plans and pricing

Priced per endpoint and per seat, so five people cost five people — there's no enterprise minimum to clear before it makes sense. Servers are covered at the same rate as workstations.

Prices exclude GST

  • Essential

    Per endpoint

    Malwarebytes Endpoint Protection

    $6 /month$6.90 incl. GST

    Protection on every machine, watched by us rather than by your staff.

    • Malwarebytes Endpoint Protection
    • Application blocking
    • Ransomware and malware protection
    • Alerts come to us, not to whoever is at the desk
    • No fixed term
    Enquire
  • Most popular

    Advanced

    Per endpoint

    Endpoint Detection & Response

    $9 /month$10.35 incl. GST

    Adds detection and response, and closes the holes attackers actually use.

    • Everything in Essential
    • Endpoint Detection and Response (EDR)
    • Vulnerability and patch management
    • Ransomware rollback
    • Servers covered at the same rate
    • No fixed term
    Enquire

  • Managed

    Per endpoint

    Managed Detection & Response

    $29 /month$33.35 incl. GST

    A security team watching your endpoints around the clock, without hiring one.

    • Everything in Advanced
    • Managed Detection and Response — analysts, 24/7
    • DNS filtering
    • Threats investigated and contained for you
    • No fixed term
    Enquire

  • 1Password Enterprise

    Per seat

    Business password management

    $15 /month$17.25 incl. GST

    Stop passwords living in a spreadsheet, a notebook, or one person's head.

    • Shared vaults for teams
    • Access removed the day someone leaves
    • Breach alerts for reused or exposed passwords
    • Works on every device your staff use
    • No fixed term
    Enquire

Optional extras

Available on any plan.

  • DNS filtering

    Blocks known-bad domains before a browser ever reaches them. Already included in Managed.

    $6.50 /month

  • Email security

    Filtering aimed at the invoice and impersonation scams that actually cost money.

    $5 /month

  • Mobile security

    Extends protection to the phones and tablets your team works from.

    $3 /month

  • Managed threat hunting

    Analysts actively looking for what automated detection misses.

    $6 /month

Prices exclude GST and assume a standard installation. Where a yearly figure is shown you can pay either way, with no commitment on the monthly option. What's available at a given address depends on the network in your street — send us the address and we'll confirm.

How it works

  • Managed endpoint protection

    Malwarebytes ThreatDown or Bitdefender on every machine, managed by us. The important part is the second half: an alert nobody sees is the same as no protection at all, so alerts come to us rather than to whoever happens to be at that desk.

  • 1Password Enterprise

    Shared vaults instead of a spreadsheet called passwords.xlsx. It also tells you which credentials have turned up in a breach — and when someone leaves, their access goes with them the same day.

  • Email and invoice fraud

    The most expensive thing that happens to NZ businesses is rarely a dramatic hack. It is a changed bank account number on an invoice that looked completely normal.

  • People pretending to be you

    We're a Red Sift partner, so alongside locking down who can send mail as your domain we can watch for lookalike domains registered to impersonate your business. The convincing version of invoice fraud does not come from your domain — it comes from one that is a character different.

  • Backup and recovery

    A backup nobody has restored from is a hope, not a plan. We test them.

  • Two products, on purpose

    We work with both ThreatDown and Bitdefender rather than betting your business on one vendor. Which suits you depends on what you run and what you already have.

  • Managed detection, if you want analysts

    Our top tier is Managed Detection and Response — real people watching your endpoints around the clock and containing threats for you. It is the closest thing to having a security team without hiring one.

  • Straight answers

    We'll tell you what's worth doing and what's being sold on fear. Not everything needs the enterprise product.

Common questions

We're small. Are we really a target?
Most attacks aren't targeted at anyone in particular — they're automated and indiscriminate. Being small doesn't make you invisible, it usually just means less is in the way.
Do we need cyber insurance?
Many insurers now expect certain controls, like MFA, before they'll pay out. If you have a policy, it's worth checking what it assumes you've already done.
Someone sent our customers a fake invoice from a domain that looks like ours. Can that be stopped?
Partly, and it is worth doing both halves. Locking down SPF, DKIM and DMARC stops people sending as your actual domain, which is the easy win. The harder problem is a domain that merely looks like yours — a swapped letter, a different ending — and for that we can monitor for lookalikes being registered so you find out early rather than when a customer rings about a payment they already made.
What would you look at first?
Whether MFA is on everywhere it should be, whether your backups actually restore, and whether email filtering is doing anything. That covers a lot of ground quickly.
ThreatDown or Bitdefender — which one do we get?
Whichever suits your setup. We work with both rather than tying every customer to one vendor, and the right answer depends on what you run and what you already have licensed. We'll recommend one and explain why.
Why does a password manager need to be a business product?
Because the problem is not one person's passwords, it is what happens to shared ones. 1Password Enterprise gives you vaults a team can share properly, tells you which credentials have appeared in a breach, and lets you cut off access the day someone leaves rather than hoping nobody wrote the wifi password on a whiteboard.
We're a small team. Is this priced for us?
It is per endpoint and per seat, so five people cost five people. There is no enterprise minimum to clear before it makes sense.

Often taken together

Managed IT

We look after the computers, network, servers and accounts your business runs on — monitoring them, patching them, and answering the phone when something stops working.

Learn moreRead more about Managed IT

Cloud & SaaS

Licensing, migration, backup and ongoing management for Microsoft 365 — plus filtering on the mail that arrives, and hosting for the servers and applications that do not belong in a SaaS product.

Learn moreRead more about Cloud & SaaS

Hardware

Laptops, desktops, phones, networking and the licences that go with them — sourced, configured and delivered ready to use, not in a box for someone else to figure out.

Learn moreRead more about Hardware

Want to know where you actually stand?

We'll run through the basics with you and be straight about the gaps.

Get in touchor call 04 555 1500