Security watch for your business cloud.
A 24×7×365 cyber security operations centre built specifically for New Zealand small businesses. Always on, it learns how your business normally works and raises the alarm when something isn't right. It is the paid add-on on top of the free DNS protection included with ICT Hub Business Fibre: malicious website blocking, with nothing for you to configure.
Join the waitlist How it works// What an alert sounds like. Plain English. No log dumps. Only when it matters.
The threats that matter no longer arrive at the front door.
Sophisticated attackers don't bother breaking your office WiFi. They buy a stolen session and walk into an inbox with no password and no MFA challenge. They plant a silent forwarding rule and read your correspondence for months before quietly altering one invoice. They land in the cloud tenancy an IT company set up years ago and nobody has looked at since.
Enterprise-grade exposure. Consumer-grade defences. No one watching. Until now.
A full security operations centre, sized to your business.
Your business is watched, ring-fenced to you alone. Every signal is kept. Anything of interest is checked against weeks of history, not seconds. The watch learns your patterns of life: who runs the company, who handles the invoices, where your people sign in from and when. That memory belongs to your business and nobody else.
No rules engine. Everything observed, everything retained, judgement before noise.Traditional security tools fire on preset rules and bury you in false alarms. Ours read the story.
What we watch.
Identity and email
Sign-ins from places your people are not. Mailbox rules quietly forwarding mail out. Second factors added by someone who should never have added them. Privilege changes nobody asked for.
Cloud and workspace
Configuration drift across Microsoft 365 and Google Workspace, storage left open to the internet, and new applications granted access to your data.
Dark web and criminal channels
Criminal forums and marketplaces, watched for your domain, your people's credentials and your stolen sessions. A session for sale is an immediate threat, and we treat it as one.
Silent tripwires
Decoy documents placed through your file stores that exist only to be stolen. A tripwire has no innocent explanation, which is why one firing is the highest-fidelity alarm there is.
We watch your cloud, not your keyboards. No software on your machines, no agents, no slowdowns.
Four movements. You are only asked for something at the fourth.
Signal
Security telemetry from your Microsoft 365 or Google Workspace streams in continuously. Nothing depends on someone remembering to check a dashboard.
Triage
Detections are correlated. The routine noise is closed out at our end, which is how you only ever hear about the things that matter.
Alert
We reach you in plain English with what happened, what it touches, and what we recommend doing about it. An urgent alert comes to you in the chat, in plain English. It is not a phone call, and it is not an email you have to find on Monday.
Contain
On your say-so we kill the session, revoke the token or reverse the change, in minutes, and we stay with it until it is resolved.
Your authorisation gates everything past this line. The watch is read-only until you say otherwise.
A watch is only as good as what it knows to look for.
- Daily deep research. This morning's threats on this afternoon's watch-list, researched fresh every day, not bought as a stale feed.
- Criminal marketplace intelligence. Stolen sessions and infostealer logs surfaced in hours, not months.
- New Zealand threat intelligence. NZ-focused indicators on the watch-list as we bring additional commercial and community sources on stream.
- A memory measured in weeks. The slow, patient intrusion still forms a visible pattern to a watch that never forgets what it saw last Tuesday.
Always watching. Never in the way.
- Ring-fenced per client, isolated at the database layer. Your data and your patterns are never pooled.
- Read-only access. Nothing acts in your environment without your authorisation.
- A one-page monthly briefing in plain English. Everything else waits unless it is urgent.
- Operated under the NZ Privacy Act 2020.
Thirty minutes to begin. A fortnight to know you.
Day one
Consent and connection. Read-only, no software installed, and the watch begins the same day.
Week one
A relaxed conversation about how your business runs: who does what, where people work, what normal looks like.
Weeks one and two
Quiet learning. The watch baselines your rhythms before it raises its voice.
Onward
Full watch, monthly briefings, and monitoring that does not wait for a person to notice.
Join the waitlist.
Places are limited so every client gets a genuinely dedicated watch. Tell us what your business runs on. We do not call you back, and we do not send a follow-up.