Learn how our assessments, remediation projects, and managed monitoring and response work, including scope, access, pricing, and coordination with your IT provider.
A structured review of the systems covered by your assessment: Microsoft 365 or on-premises Active Directory. You receive documented findings, prioritized risks, and practical recommendations.
Remediation is scoped and priced explicitly. It can be included in a combined proposal or purchased as a separate project; an assessment does not automatically include every fix.
The timeline depends on the systems in scope, available access, licensing, change approvals, and the work required. We establish project milestones with you before work begins.
The process covers scoping and access, assessment, findings review, remediation, and validation. Some focused projects can fit a 30-day window; broader or more complex work needs a different schedule.
Our primary specialties are Microsoft 365 and on-premises Active Directory. This includes Microsoft Entra ID, Exchange Online, Microsoft 365 sharing and access controls, and the configuration of your Windows domain.
We also assess perimeter and internet-facing security, including firewalls, remote access, and public-facing websites and servers.
Our services are designed for businesses with at least 5 users. We typically work with 5–150 users, with larger environments considered based on scope and complexity. We work alongside an existing IT provider or internal team and coordinate the access and assistance needed to complete the work.
Managed Security Monitoring & Response includes ongoing threat detection and response for the identities and endpoints in your plan, monthly security configuration reviews, and coordination with your IT provider on alerts and follow-up. Monitoring coverage is defined in your plan; an assessment does not automatically place every website, server, or firewall under ongoing monitoring.
Managed threat detection and response includes 24/7 coverage from a security operations team. Klevr does not provide a 24/7 helpdesk or around-the-clock consultant availability. Your plan defines the services included, Klevr’s service hours, and who handles alerts and follow-up work.
Yes. Our Perimeter & Internet-Facing Security Assessment reviews business-class firewall configurations, site-to-site VPNs, remote VPN access, and port forwarding. We also evaluate public-facing websites, web servers, and administrative interfaces, including those hosted by external providers.
We identify open ports and exposed services, assess the risks they present, and recommend remediation. We can review findings raised by an insurer and coordinate improvements with your IT or hosting provider. This is an external exposure and configuration assessment; application penetration testing and source-code review are separate scopes.
Yes. We can assess the technical controls within our scope, identify gaps, implement improvements, and document the work completed. This helps you provide evidence for relevant questions.
Your insurer determines coverage and eligibility. We do not guarantee approval or certify controls we have not verified. Information for insurance agents and client referrals.
MFA is an important control, but we also need to consider its coverage, authentication methods, policy exclusions, application access, and privileged accounts. Registration alone does not establish that every relevant sign-in requires MFA.
We review the controls in use and recommend improvements suited to your environment, including stronger authentication where appropriate. MFA reduces risk but does not eliminate every route to account compromise.
Microsoft 365 and Entra ID manage cloud identities, email, and application access. On-premises Active Directory manages your Windows domain, including domain accounts, privileged groups, and Group Policy.
They require distinct reviews, even when identities are synchronized. We scope each environment and the connections between them so that cloud security improvements do not leave domain risks unaddressed.
Microsoft Secure Score provides recommendations and implementation guidance. It is a useful input when assessing your Microsoft 365 environment.
Our assessment adds business context, a closer look at your systems and how they can be accessed, prioritized findings, and a discussion with your team. Separately scoped remediation includes implementing and validating approved changes.
Some changes affect how people sign in, access systems, or connect remotely. We discuss the expected impact, coordinate approvals and change windows, and plan validation and recovery steps with your IT team.
The goal is to manage disruption, not promise that every change is invisible. We coordinate user communications and any local IT assistance with your team.
We document the permissions and information required for the assessment before access is granted. We use read-only access where practical and keep elevated access limited to the tasks that require it.
For remediation, changes and administrative access are approved and documented. Project access is removed when no longer required; access for ongoing services is authorized separately.
Assessments and remediation projects are quoted at a fixed fee based on the systems assessed and the work required. Managed Security Monitoring & Response has a defined recurring fee and service scope.
The introductory call is for discussing your needs and confirming fit. A technical assessment is a separate paid engagement. Let's Talk Security.
We distinguish configuration gaps from controls that need additional licensing. Microsoft 365 Business Premium includes Entra ID P1 and Conditional Access; risk-based access policies require Entra ID P2 entitlement.
We review your existing licenses and explain the options before recommending an upgrade. Assessment scope and remediation plans reflect the controls available to your business.
Yes. We work alongside your provider, sharing findings and coordinating approved changes with your permission. Your provider retains its existing operational responsibilities.
We clarify who handles security changes, escalation, and ongoing maintenance. Our service is specialist cybersecurity, not a replacement for general IT support.
Start a conversation about your security needs. We will discuss your priorities, current IT arrangements, and whether our Microsoft 365 and Active Directory security services are a fit.
If the work is a fit, we confirm the information needed and prepare a proposal with scope, fees, deliverables, and timing. No tenant access is needed for the introductory conversation.
Tell us about your security needs. We'll discuss whether Klevr is a fit and outline the next steps.
Let's Talk SecurityA conversation about your needs and next steps.