Protective services overview
Technology
The deployment of an Anti-ransomware virtual service delivers ongoing threat monitoring, protecting critical data stored across your network and cloud environments from being stolen and potentially held hostage with the encryption of your most valuable data assets.
People
A skilled team of intelligence specialists and analysts ensure round the clock 24x7x365 protection. Real-time ransomware monitoring coupled with incident response means we can shut-down and quarantine any ransomware attack in less than a second.
Process
Alongside 24x7x365 management, ransomware monitoring and incident response, detailed root cause analysis is used to identify the entry method of any malware attacks. Automated quarantine processes are actioned to limit the impact of any breach, and our expert team can also support internal resource with any recovery management processes.
Technology
MDR software agents provide real-time, risk-based prevention of malware and potential network attacks. The MDR service is frequently deployed East-West within a client to support any other complementary North-South IDS/IPS service. Our intuitive Cloud Management Portal enables the management and monitoring of on-premise and mobile users in real-time, as well the granular customisation of alerts and defensive rulesets.
People
Highly-skilled Threat Hunters proactively seek out anomalies in user and software behaviour to discover zero-day threats as part of 24x7x365 threat monitoring and incident response. A Security Assurance Consultant provides guidance on best practice for monitoring and incident response, while a dedicated Service Delivery Manager ensures expectations and obligations are met.
Process
Highly-skilled Threat Hunters proactively seek out anomalies in user and software behaviour to discover zero-day threats as part of 24x7x365 threat monitoring and incident response. A Security Assurance Consultant provides guidance on best practice for monitoring and incident response, while a dedicated Service Delivery Manager ensures expectations and obligations are met.
Technology
The LogSecure SIEM delivers a correlated view of security risks across everything running on your network and in the cloud. A tightly-integrated and extensive Global Threat Intelligence Network (GTIN) and I3 Security Incident Management Portal identify potential compromise and provide real-time security alerts to enhance our detection and auto-remediation capability while expediting root cause analysis.
People
An expert security team underpins our SIEM services with 24x7x365 threat monitoring, internet-based threat hunting and a customised log monitoring approach to support your systems and bespoke applications. A Security Assurance Consultant ensures best practice is enforced at all times, with a dedicated Service Delivery Manager in place to ensure all commitments and expectations are met.
Process
24x7x365 monitoring from a UK-based Security Operations Centre ensures that your business is protected around the clock. Early warning threat intelligence updates help ensure reinforced protections are in-situ ahead of an attack, while ongoing tuning of alert rules see that your service evolves in line with your business. We’ll also provide monthly Key Risk Indicator (KRI) reports, the ‘metrics that matter’, and threat intelligence summaries. When an incident arises, we’ll take the lead in working with your internal teams and relevant 3rd parties to action quick and effective resolutions.
Key benefits
Rapid remote deployment of monitoring and protection software through cloud management.
Protect key data, intellectual property and client data from theft and accidental leakage.
Detect targeted and sophisticated network attacks.
Reduce employee overhead and improve speed of response through automated defence and remediation.
Faster root-cause analysis via multiple security logs including network, firewall, server, active directory, database and cloud systems.
Flexibility to evolve your service using our ‘Roll Out Roll In’ SOC protections.
Key Risk Indicator and security maturity improvements delivered within 4 weeks of SOC deployment.
Harden networks and systems to common network intrusion attacks and malware.
Help protect against zero day malware.
Protect data stores and keep business operations moving with real-time anti-ransomware detection and prevention.
Joined up overview of security incidents in the event of a breach – slashing the time it takes to respond.
Take the next step
Found the SOC for you? Take advantage of our 3-month free pilot and discover the Zepko difference risk-free. Or if you’d simply like to know more about our services, get in touch with our expert team.
Accountancy firm defends against a ransomware attack
37 %
of organisations reported a ransomware attack in 2021£1.3 M
average remediation cost in 202121 %
average amount of IT budget spent on security100 %
of customers protected with sub-second automated defence58 %
of businesses attacked paid a ransom
Liam opens an email attachment from a known client; unfortunately his client’s laptop has been compromised and he opens a document infected with ransomware.
The ransomware starts to encrypt his shared folders, but in a sub-second response his desktop is quarantined by our anti-ransomware system which alerts the SOC team in real-time.
The SOC team notified the client’s IT team and commence incident response processes, using their SIEM they performed root cause analysis which identified the entry method of the malware (via email). The SOC obtained a copy of the malware for analysis in their malware labs, they detonated the malware safely to study its behaviour and identify its spreading mechanism to find it was wormable (able to spread across the network on open ports to vulnerable systems). Armed with this knowledge the SOC guided the IT Team during the recovery process to ensure the malware was not persistent and did not reinfect the systems after recovery or reattempt encryption.
To further protect the client from future attacks, the SOC team deploy real-time vulnerability scanning agents on workstation and servers to ensure the hosts are hardened and patched to the latest level to protect against wormable ransomware.
37% organisations reported a ransomware attack in 2021
One in 6 of those attacked was hit with a ransom and 58% paid up
Average remediation cost in 2021 was £1.36M
The average firm now devotes 21% of its IT budget to cyber security – a jump of 63%
100% customers protected with sub-second automated defence
Our customer pledge
We’re confident in the services we provide, and we want you to be too. That’s why we offer the following pledge to every business considering onboarding us as their managed security service provider:
3-month pilot
free of charge
Put us to the test and let us run your 24×7 Security Operation Centre for free for the first 3 months. You can benchmark our performance against pre-agreed success criteria – and if you’re not convinced after the pilot, it won’t cost you a penny.
Lowest price
guarantee
Our mission is to make high-quality, tailored managed security services affordable to the mid-market – and we stand by our word. If you find another provider who can offer a like-for-like SOC service for a lower cost, we will refund the difference.
No half
measures
When you take part in our pilot you can expect the full Zepko service, not a trimmed down version. We’ll run a full 24×7 SOC operation, providing access to our specialist SOC team, process models and procedures, at the same level as our existing customers.
Deploy this SOC from £8.166 per month
The above cost has been calculated based on an organisation of 250 users. Larger organisation? As our services are scaled up, your SOC solution becomes more cost effective per user. Speak to us for an accurate quote for your business.