Managed Cybersecurity
We run your day-to-day security, with SOC and MDR available for round-the-clock cover, backed by engineers who remediate threats and strengthen Microsoft 365, identity and endpoint controls.
Discuss Managed CybersecurityManaged Cybersecurity
We manage security across your devices, identities, email and Microsoft 365, and our engineers fix the cause when something is found. Where you need round-the-clock cover, our SOC and MDR option monitors and contains threats day and night.
- Identity · suspicious sign-in Contained
- Endpoints Covered
- Email and impersonation Filtered
- Backup alerts Visible
SOC and MDR option Engineers fix the cause
Endpoint protection Visibility across devices, suspicious activity and protection gaps
Identity and Microsoft 365 Access controls, administrator permissions and tenant configuration
Email and BEC protection Mailbox security, impersonation and payment-change verification
Recovery coordination Backup visibility and the dependencies recovery relies on
Operate across
Microsoft 365 · Entra ID · Conditional Access · Phishing-resistant MFA · Endpoint and EDR · SOC · MDR · Essential Eight · Business email compromise · SPF, DKIM and DMARC
Common triggers
Where managed security makes the most difference
From after-hours alerts to a procurement questionnaire, these are the moments that usually put managed security on the agenda.
After-hours alerts Monitoring and containment that doesn't stop at 5pm
Insurance or customer enquiries Records of how your controls actually operate
A stretched IT team Time and capability for security operations
An incident or near miss Unresolved findings and gaps in response
Essential Eight improvements A practical plan to close control gaps
Microsoft 365 changes Permissions and exceptions that build up over time
Key-person dependence Security knowledge held by one person
Procurement requirements Documented responsibilities and security practices
With or without Managed IT
Work with us alongside your IT team
You can buy managed security on its own or with our Managed IT. If you have an internal team or another provider, we settle who manages configurations, investigates alerts, approves containment and completes remediation before the service starts.
- Configuration changes Our engineers or your team
- Alert investigation Our engineers, with our SOC when selected
- Containment Our engineers or SOC, within the response arrangements set with you
- Remediation Our engineers
How you can work with us Ongoing protection Focused project
Shaped around what you need
You can have us run your security day to day or deliver a specific improvement, and we shape the scope around that.
Microsoft 365 and Essential Eight uplift
We deliver targeted Microsoft 365 security improvements and Essential Eight gap review and uplift as defined projects. You receive a prioritised plan, implemented controls and a record of the changes, without an ongoing managed service.
See the Essential Eight work How a threat is handled
Know who will act when it matters
One suspicious sign-in at a client with our SOC and MDR option, followed from the first signal to the report they receive.
- Our SOC Monitoring
Our SOC investigates the sign-in as soon as it's flagged, even overnight.
- Our SOC Threat containment
Compromised devices are isolated and compromised accounts disabled.
- Our engineers Engineer remediation
The underlying cause is addressed and the controls involved are tightened.
- You Clear reporting
What happened, the action taken and the improvements made.
What we cover
Protection across Microsoft 365, email and devices
Microsoft 365 and identity security
We review MFA, Conditional Access, administrator roles, service accounts, application consent and external sharing. We close off legacy authentication and use phishing-resistant MFA where it fits, testing policy changes before rollout and keeping emergency access in place.
Email and business email compromise
We review SPF, DKIM and DMARC alongside anti-impersonation settings, mailbox forwarding and suspicious sign-ins. With your finance team, we tighten how payment changes are verified, using an independent channel and contact details confirmed in advance.
Endpoint protection
We check protection coverage and use supported endpoint tools to investigate suspicious processes, connections and persistence, including devices whose security agents have stopped reporting.
Monitoring and response
Our engineers investigate alerts and remediate the cause as part of the service. With the SOC and MDR option, our SOC also investigates suspicious activity around the clock and can isolate a device or disable a compromised account, and you get a clear account of what happened.
- EDR
- Endpoint detection and response technology
- SIEM
- A platform that collects and correlates security logs
- SOC
- The team and processes running security operations
- MDR
- A managed service for threat detection, investigation and response
Recovery and reporting
Our reporting brings together incidents, control changes and outstanding actions. We connect security response with backup alerts and restore evidence, while backup, recovery planning and testing sit within our Backup and Disaster Recovery service.
Explore Backup and Disaster Recovery → Essential Eight
Essential Eight gap review and uplift
We review your controls against ASD's published maturity model and a target level suited to your business. You receive the recorded gaps, supporting findings and prioritised improvements, and we can implement the changes ourselves or work with your IT team, documenting exceptions and checking the controls after uplift.
What changes between maturity levels
- 01 Application control
Unapproved programs blocked from running in user profile and temporary folders on workstations.
Extended to internet-facing servers, with Microsoft's recommended block rules and logging of blocked attempts.
- 02 Patch applications
Internet-facing services and common applications patched within set timeframes, faster where an exploit exists.
Extends vulnerability scanning and patching to other applications, which are patched within a month.
- 03 Office macros
Macros disabled for users without a business need and blocked in files from the internet.
Adds blocking of macros that make Win32 API calls.
- 04 User application hardening
Browsers stop processing Java and web ads, and Internet Explorer 11 is disabled.
Adds hardening of Office and PDF software and tighter control of scripting tools such as PowerShell.
- 05 Restrict admin privileges
Privileged requests validated, and admin accounts kept away from email and web browsing.
Adds removal of unused or long-standing privileged access and logging of admin activity.
- 06 Patch operating systems
Operating systems patched within set timeframes, and unsupported versions replaced.
The same scanning and patching requirements as Level 1, applied consistently across the environment.
- 07 Multi-factor authentication
MFA for users of internet-facing services and online services that hold sensitive data.
Extends MFA to standard users as well as administrators, using phishing-resistant methods.
- 08 Regular backups
Important data backed up and retained to suit your continuity needs, with restores tested.
Restricts privileged accounts, other than backup administrators, from accessing, changing or deleting other accounts' backups.
A short summary for orientation. The full requirements sit in ASD's Essential Eight maturity model.
Moving to ASD Essentials
ASD published its Essentials series in October 2026, starting with Essentials for enterprise IT and Essentials for cloud, and both frameworks run side by side during the transition. Existing Essential Eight controls and evidence support the move, but maturity ratings don’t carry across, so we review your environment against the new requirements and plan the changes that apply.
Monitored, improved and reported, by people who know your systems
Discuss your security priorities How we work
How the service runs month to month
01
Understand your setup
We review your systems, licences and existing controls, and confirm who handles access and response.
02
Address priority gaps
We bring devices and identities into coverage, tune alerts and implement the priority improvements.
03
Monitor and respond
We investigate alerts and contain threats, with our SOC adding round-the-clock cover where you choose it, and our engineers handle the remediation.
04
Review and improve
We report findings, track remediation and adjust controls as your business changes.
Why Inlight IT
Why businesses choose us for managed security
01
Security run by engineers who know your IT
We can run your IT and security together, or work alongside your existing IT team. Either way, the engineers making security decisions understand the systems they're protecting.
02
We start with what your licences already include
We check what your Microsoft 365 licences already include, such as Defender, Intune and Entra ID features, before recommending anything new.
03
Security issues raised where your team already works
Support is raised and tracked in Microsoft Teams, so reporting a suspicious email or sign-in is as simple as sending a message.
04
Engineers in Sydney and Newcastle
Our engineers work with your team and providers, and attend on site when the situation calls for it.
05
Reporting you can use
We explain what happened, what changed and what still needs attention, in terms your management can act on.
06
Recovery considered alongside security
We plan containment and recovery around the systems your business depends on.
Recent work
All case studiesSee what we’ve delivered for our clients
Heavy machinery & mining equipment · Managed cybersecurity
VLI
From security alert to engineering fix
We review sign-ins, endpoint alerts and Microsoft 365 activity for VLI, assess what matters and carry the fix into policies, access and configuration.
Financial services · Email and payment security
OYA Financial Services
Protecting the payment decision
After responding to a BEC incident, we hardened OYA's Microsoft 365 and identity controls and strengthened verification before high-risk payment details could change.
Common questions
Common questions about managed security
Will we need different tools or Microsoft licences?
We check your existing products, licences and integrations first. Recommendations depend on the controls and monitoring you need, because Microsoft security features vary by licence.
Do we need MDR as well as endpoint protection?
Endpoint protection provides the technology, while managed detection and response adds the people who investigate and contain threats. Our SOC and MDR option adds that layer to the managed service, with our engineers handling the remediation.
Who monitors and responds to threats?
Our engineers handle alerts and remediation as part of the managed service. Add the SOC and MDR option and threats are also investigated and contained around the clock across the devices and identities covered, with our engineers remediating the cause.
Can this help with insurance and customer requirements?
Yes. We document the controls we've reviewed, the gaps and the improvements completed, giving you a clear record to share with your insurer or customers.
Is Microsoft 365 backup included?
Microsoft 365 backup sits within Backup and Disaster Recovery and can be purchased on its own. We connect it with managed security so recovery is ready if an incident affects your data.
How do pricing and onboarding work?
We look at your users, devices, systems, existing tools and the coverage you need, then set out the initial work, ongoing charges, access requirements and onboarding plan.
Is an Essential Eight gap review the same as an audit?
No. A gap review compares your controls with ASD's maturity model and an agreed target level, then records the gaps and the improvements in priority order. It isn't a formal assessment or certification. A formal maturity assessment needs a defined scope and evidence that each control is implemented and working, and we'll tell you if a contract calls for one.
Can you work with our internal IT team or another provider?
In most cases, yes. You don't need to move your IT support to us. Before the service starts we agree access, incident escalation and who manages configuration changes, approves containment and completes remediation. If an arrangement would leave those responsibilities unclear, we'll say so before we start.
Next step
Know your security is being looked after
Talk to us about your devices, Microsoft 365 and security priorities, and we’ll put the protection you need in place and keep it working.