Finally sleep at night. Someone accountable for your cyber security.

No. That is the whole point of this offer. You keep running your systems exactly as you do now, and we take responsibility for the security layer only. We are not going to use this as a way in to quoting you for managed IT.

That is fine and it is common. We coexist with your existing provider and handle security only. We will work with them where something we detect needs a change on their side, and we do not need to displace them to do our job.

Your endpoints, the laptops and servers your people work on, and your Microsoft 365 identities, which is where most attacks against Australian businesses now start. Monitoring is backed by a Huntress-powered security operations centre, so there are human analysts reviewing what the tooling flags rather than an alert landing in your inbox at 2am.

The SOC investigates it immediately rather than waiting for business hours. Where the right response is containment, isolating a device or disabling a compromised account, that happens straight away to stop the spread. You get told what happened and what was done about it, without needing to have been awake for it.

Huntress is a security platform built around human-led threat hunting rather than alerts alone. We use it because the failure mode we see most often is not the absence of security tooling, it is nobody actually watching what the tooling says. Huntress pairs detection with a staffed SOC, which is what turns monitoring into a response.

Yes, and it is one of the main reasons this offer exists. Identity attacks against Microsoft 365, where an attacker gets a legitimate login rather than deploying malware, are now the most common way Australian SMBs are breached. We monitor for the signals that indicate a takeover, including MFA bypass techniques and suspicious mailbox rules.

Usually, yes. The controls in this offer map to what insurers and customer security questionnaires ask about: managed detection and response, MFA and identity hardening, staff training, and a documented review cycle. Where you are certifying to an SMB1001 tier, you also end up with a certification you can put in front of whoever is asking.

SMB1001 is an Australian tiered cyber security standard for small and medium businesses, running Bronze, Silver, Gold, Platinum and Diamond. This offer is built around it: each tier is the security stack and ongoing management needed to reach and hold that certification level, and maintaining your certification is part of what you pay for. Our SMB1001 page explains the tiers in more detail.

The monthly per person price is ongoing management: the monitoring, the hardening, the training, the quarterly reviews, and maintaining your certification once you hold it. Getting certified in the first place is separate. That is a one-off program to close whatever gaps you have today, plus the certification fees themselves, and both are scoped on your call once we know your starting position. We say this up front because finding it out at quote stage would be a rotten surprise.

Certification is independent, and deliberately so. The body that issues an SMB1001 certificate is never the party managing security for that customer. We implement and maintain the controls; an independent certifier assesses them. That separation is what makes the certificate worth anything to your customers and your insurer, and it is the same arrangement under which DJC itself is certified at Diamond.

Managed SMB1001 runs on a 12 month commitment. Certification is not a one-off exercise: the controls have to be deployed, held and evidenced over time, and a shorter term would mean charging you for the setup work without either of us getting the benefit of it. You will know the term before you sign, not after.

Typically 4 to 6 weeks, depending on how much there is to work through in your environment. Agent deployment and Microsoft 365 hardening are low disruption and largely happen in the background. The part that needs you is policy and procedure: we tell you exactly what has to be adopted, but it has to land inside your organisation, so you will need a project champion on your side to drive it.

We do security, not system administration. The clearest line is rebuild work: if you suffer a major breach we will tell your IT person exactly what needs to happen, but we do not re-image machines. Business as usual configuration of your systems stays with whoever supports them today, which in these engagements is you or your existing provider. That is deliberate, and it is what keeps this a fixed price you can rely on.