Some Key aspects of the service are:

• Provides a proprietary NDR (Network Detection and Response) appliance to threat hunt in your environment.

• MDR (Managed Detection and Response) to monitor the environment and take preventative action.

• Email and Office Protection (prevents threats from entering your user’s inbox)

• Has optional Endpoint, Patch Management & VPN services available.

• Is completely vendor agnostic and does not force a district or municipality to replace their existing network hardware

• Is completely agentless, allowing all network devices to be seen and that traffic analyzed including BYOD devices such as Chromebooks, IPhone, Android, HVAC, and camera systems.

• Provides real time analytics on applications running in the environment and the risk associated with them.

• Operates as a SIEM

• Completes much of the NIST SI-4 sections of the framework.

• All network traffic is run through antibot, antivirus, IPS, and threat emulation engines.

• Blocks threats in real time.

• Integrates and ingests logs from existing district tech such as firewalls, endpoint protection, etc.

• Analyze email systems and prevent malicious content from hitting the user’s inbox.

• Includes incident response hours to assist in mitigation should an incident occur.

• Provides cleanup tools for compromised Windows, Mac, and Linux hosts.

• Provides vulnerability information on hosts within the environment

• Ingest IOC (indicator of compromise feeds) from numerous sources including MSISAC