SERVICES
Six disciplines on the perimeter
ShieldWith AI delivers managed defensive security from our Vancouver SOC. Each service is scoped in writing, priced in CAD and integrated with the tooling you already operate — we are a professional services firm, not a licence reseller or training vendor.
OVERVIEW
What we operate for clients
Our practice centres on managed detection and response with human-verified escalations. Supporting capabilities — intelligence, response retainers, cloud identity monitoring and awareness — wrap around the SOC so your team receives context, not just tickets.
Monitoring review — tuning detection before alerts reach your inbox.
Managed Detection & Response
Our core offering: continuous ingestion of endpoint, network and identity telemetry into the ShieldWith correlation pipeline. Detection content is tuned to your environment — not copied from a generic template — and every high-priority signal is reviewed by a qualified analyst before escalation. MDR includes monthly posture reporting, playbook documentation and a named liaison for Pacific-time business hours. We integrate with major SIEM and EDR platforms rather than forcing a rip-and-replace. Engagements begin with a scoping workshop and data-processing addendum aligned to PIPEDA expectations.
24/7 Monitoring
Overnight and weekend coverage for organizations that cannot staff a follow-the-sun SOC internally. Our Vancouver team monitors queued alerts around the clock; AI ranking reduces noise so analysts focus on plausible threats. Business-hour liaison remains Pacific time, with documented handoffs when events span shifts. Monitoring covers log sources defined in your scope document — typically EDR, firewall, identity provider, email gateway and selected cloud audit streams. We do not monitor personal devices or residential networks unless explicitly authorized as part of a corporate estate.
Threat Intelligence
Curated intelligence translated into detection logic your SOC can act on. We track campaigns relevant to Canadian sectors — finance, logistics, professional services, healthcare adjacent — and map indicators to your existing rulesets. Intelligence deliverables include briefings, updated IoC feeds where appropriate and plain-language summaries for executives who need context without raw STIX files. Intelligence work complements MDR; it is not sold as a standalone news feed. We cite sources and distinguish confirmed activity from speculation.
Incident Response
Retained and ad-hoc response when a verified threat requires containment. Our analysts guide isolation steps, evidence preservation and communication templates — always within the authority granted in your engagement letter. We support — not replace — your legal counsel, insurer and internal IT during an event. Response retainers include defined SLAs for initial contact; ad-hoc engagements are scoped hourly with a written authorization before remote access. Post-incident reviews feed back into detection tuning so repeat patterns are caught earlier.
Cloud & Identity Security
Azure, Microsoft 365 and IAM-focused monitoring integrated into the same SOC pipeline as on-premise sources. We watch for risky sign-ins, privilege escalation, misconfigured storage and anomalous API activity. Cloud coverage assumes you retain admin ownership; we operate under least-privilege reader or security-operator roles defined in your tenant. Identity is often the perimeter now — this discipline ensures your MDR programme sees credentials and sessions, not just endpoints behind the firewall.
Security Awareness
Phishing simulations and role-appropriate briefings aligned to campaigns targeting your industry. Awareness complements technical controls; it does not replace them. Programmes include baseline testing, targeted follow-up for repeat clickers and quarterly executive summaries. Content is written for Canadian workplaces — realistic scenarios, plain language, no fear-mongering stock photography. We coordinate timing with your HR and communications teams so simulations do not collide with legitimate internal mailings.
Response workflow — documented steps, not improvised panic.
Evening shift — 24/7 coverage from Hamilton Street.
INDICATIVE PRICING
CAD ranges — final scope in writing
MDR retainers typically run C$7,500–C$19,000 per month depending on log volume and coverage hours. Fixed projects — awareness programmes, cloud identity reviews, detection tuning sprints — range from C$5,000 to C$22,000. Incident response retainers are quoted individually. All figures exclude applicable taxes and are not binding until a scope document is signed.