Service Offerings


EngageOS  - Engage Operational Security 

EngageOS is our premier security engineering managed service, that includes the reporting and insights of EngageREP and expands that with continuous improvement, maintenance and remediation of your Defender XDR capability.

This service does everything an operational security engineering team should be doing, continuously ensuring:

  • New Defender XDR features are enabled in your environment, maximising your protection while minimising impact.

  • All supported devices are onboarded to Defender for Endpoint with all applicable security controls, detections and updates enabled, functioning and not impacting productivity.

  • All Domain Controllers, Entra Id Connect and ADFS servers are onboarded to Defender for Identity with all possible security controls and detections enabled, functioning and not impacting critical service performance.

  • All email security controls are enabled, functioning and not unduly impacting mail-flow and user productivity.

  • All Defender security controls and detections for SharePoint Online, OneDrive and Teams are enabled. 

  • All supported third-party cloud services (SaaS) are onboarded to Defender for Cloud Apps, and all applicable controls and detections are enabled.

  • Comprehensive coverage of Entra Id Conditional Access, securing logons.


EngageREP - Engage Reporting and Insights

EngageREP is our security engineering focused reporting and insights service, that includes continuous monitoring of your Defender XDR security tools, along with expert guidance to help your organisation maintain the security protection provided by these tools.

This service does everything an operational security monitoring team should be doing, continuously: 

  • Advising the status of Defender XDR updates and features in your environment and guiding your teams on how best to enable these safely.

  • Monitoring device coverage in Defender for Endpoint including status of all available security controls on all devices.

  • Monitoring Domain Controller, Entra Id Connect and ADFS server coverage in Defender for Identity including status of all available security controls.

  • Monitoring email security control status and alerting on possible productivity impact (for false positives) and security risk (for false negatives).

  • Monitoring Defender security controls for SharePoint Online, OneDrive and Teams.

  • Monitoring the status of Defender for Cloud Apps integration into observed in-use supported SaaS services and reporting on applicable controls and detections.

  • Advising on coverage of Entra Id Conditional Access.


Both of our service offerings cover the comprehensive Microsoft Defender XDR security suite, which includes:

  • Defender for Endpoint

  • Servers

  • End-user compute

  • Mobile

  • Defender for Identity

  • Active Directory

  • Entra Id Connect

  • ADFS

  • Defender for Office 365

  • Exchange Online email

  • SharePoint Online

  • OneDrive

  • Teams

  • Defender for Cloud Apps

  • Many different enterprise software-as-a-service offerings

  • e.g Docusign, Salesforce, Google Workspace

  • Entra Id P2 controls

  • Advanced Conditional Access

  • User and sign-in risk