Security, operated.

Detection-and-response runs 24/7 on a specialist MDR platform. The platform’s SOC analysts handle monitoring and triage around the clock, and when a threat is confirmed they phone Symsafe directly under formal SLAs, so out-of-hours alerts get genuine analyst eyes rather than a queued ticket. Investigation, containment and client communication are handled by Symsafe engineers. We name the platform, and share its certifications, under NDA on the discovery call. Detection telemetry is reviewed by the platform’s SOC analysts in the United States; the full cross-border disclosure is in our privacy policy. The Sydney service desk covers general IT support during business hours, with our India NOC extending coverage out of hours so support is genuinely 24/7.

Quoted per engagement based on scope: user count, device count, and the security inclusion level. Everything in the Secure MSA plan is bundled into the monthly fee, with no additional charges for after-hours incidents, no per-ticket fees, and no “extras” for the quarterly review. Vulnerability scanning and any partner-delivered pen-testing engagements are scoped separately and quoted up-front.

The incident-response playbook engages: Symsafe engineers take containment actions within the contracted MTTR, you get an executive briefing within the hour, forensics start, and we support your OAIC and ACSC notification obligations where they apply. The full response is included in the MSA, with no emergency billing. One thing we deliberately don’t publish is a breach statistic. Any “zero breaches” claim quoted without a definition of breach, a client count and a time window is marketing, not measurement. Ask on the discovery call and we’ll walk through our actual incident history and how we measure it.

Yes. Every client gets a monthly report: detections by category, MTTR vs SLA, training completion rates, and the next 30-day priority. Plus access to a live dashboard.