Your devices are much better protected against ransomware, phishing and zero-day attacks
Microsoft Defender for Business
Detection of and response to attacks on workstations and servers (endpoint detection and response). We enable the standard policies, and the Netsource service desk reviews the alerts.
Your Benefits
Suspicious activity goes to the Netsource service desk as an alert, not to you
A web filter blocks known phishing and malware domains
You see the device inventory in one place and the compliance status at a glance
Defender investigates and resolves many incidents automatically, which takes load off your IT administrators
We manage the policies centrally via Microsoft Intune
Service scope
Defender for Business licence per user, up to 5 devices per user
Set-up scripts for Windows 10/11, Server 2016+ and macOS
Standard policies for antivirus, attack surface reduction (ASR) and web protection
We configure the cloud protection level and sample submission
Netsource assesses alerts Mon–Fri
Monthly security report with detected threats and trends
Once a year we review the policies and adapt them to the current threat landscape
Requirements and exclusions
→ Prerequisites
- For businesses with up to 300 users: included in Microsoft 365 Business Premium, and available as a standalone licence with other plans (e.g. Business Basic or Standard)
- For Microsoft 365 E3/E5, Defender for Endpoint is the intended product, not Defender for Business
- Devices are managed by Intune or provisioned via GPO
- A maintenance contract, if you need a guaranteed response time
- An internet connection for the cloud-based protection features
✗ Not included
- Defender for Cloud Apps (CASB) and Defender for Identity are separate licences
- Servers need a licence of their own (Defender for Business servers)
- In-depth forensic analysis of individual incidents is charged by the hour (NDS-OP-KON25)
- Custom detection rules are handled in Wazuh (NDS-SEC-WAZUH), not in Defender
- Compliance audits (ISO 27001, BSI IT-Grundschutz) are a consulting service (NDS-PRJ-COMPL)
- We clean up complex infections manually as an additional service
Related Services
Intune endpoint management
We manage your Windows, macOS, iOS and Android devices with Microsoft Intune. This includes compliance policies, central app deployment and integration with Conditional Access.
Wazuh SIEM Managed
We collect and assess security events from your devices, servers and cloud services in one place. We run the platform and read the alerts, and critical incidents reach you as tickets.
Microsoft 365 Business Premium
Microsoft 365 Business Premium for businesses with up to 300 users. We supply the licence as a Microsoft CSP partner and set up your tenant with mandatory MFA and Defender.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.