SecureIT · Cybersecurity

Someone’s watching, day and night. So you don’t have to.

Owning IT is in our nature.

Your email, laptops and accounts are watched around the clock. When something looks wrong, a person handles it. And when your insurer asks, you have the answers.

Find out if you’re covered → See what it costs

Technical specs & details ↓ Or start with a free IT health check →

On every ManageIT plan: a live expert in 5 minutes, or a $100 credit · See your price before you call

Behind: RITIS Users, the reporting included with SecureIT — sample environment shown.

In short

SecureIT is DivergeIT’s managed security service: a 24/7 security operations center with MXDR and identity threat detection (ITDR) in every tier, automated containment, and 30 days to a year of searchable logs. Plans start from $450 a month. SecureIT is included with every ManageIT plan (SecureIT Core with ManageIT Core and Plus, SecureIT Plus with ManageIT Pro), and every SecureIT plan comes with a free annual cybersecurity assessment. Full specs · Pricing

The problem

It’s not just you. Security got bigger than one antivirus can handle.

Email, laptops, accounts and the cloud all need watching now, and most growing businesses don’t have anyone whose job that is.

Antivirus isn’t a security program

It catches known threats on one device. It doesn’t watch email or accounts, and it doesn’t call anyone at 2am.

One click away

A fake invoice or a convincing login page only has to fool one person on your team, once.

Nobody watching overnight

Attacks don’t wait for business hours. If nobody is watching, you find out in the morning.

Insurance forms you can’t verify

The renewal asks about MFA, endpoint detection and tested backups. Signing when you’re not sure is its own risk.

Heard on first calls

“I honestly don’t know if my business is protected.”
“The insurance form asked about things I’ve never heard of.”
“I worry that one wrong click from someone on my team could shut us down.”
“I bought antivirus. Is that enough?”

The real issue

The problem isn’t a missing tool. It’s that nobody is watching.

Most businesses already own some security products. What they don’t have is a person whose job is to watch them, act when something looks wrong, and tell you what happened.

SecureIT is that person, around the clock, and it comes with every ManageIT plan. On ManageIT Plus and Pro with DivergeIT immutable backup, if ransomware gets through, you’re restored to your pre-attack state at no DivergeIT charge.

Find out where you stand →

A business owner reading a one-page report at his kitchen table in morning light, looking satisfied

So where do you start?

Red to green, in three steps.

First — Assessment

We find the gaps

We review your email, laptops, accounts and backups, and give you one plain-English page: what’s covered, and what to fix first.

Next — Hardening

We close them

Email security, endpoint detection, DNS filtering and identity monitoring go in, in priority order, without stopping work.

Ongoing — Watch

We watch and respond

A person watches around the clock, stops what looks wrong and calls you with what happened. Insurance questionnaires come back filled in.

Find out if you’re covered →

Before & after

What changes for you

Before: You don’t know what’s protected and what isn’t.

With DivergeIT: You get one plain-English page showing what’s covered, and what’s getting fixed next.

Before: Fake invoices and scam emails target your team.

With DivergeIT: Most never reach an inbox. On SecureIT Plus and Pro, your team is trained to spot the rest.

Before: Overnight, nobody is watching.

With DivergeIT: A person is watching at 2am. They stop it and call you with what happened.

Before: Insurance questionnaires take you weeks.

With DivergeIT: Forward it. You get it back with the technical parts answered.

Before: The cost of recovering from an attack is hard to plan for.

With DivergeIT: On ManageIT Plus and Pro with DivergeIT immutable backup, your covered data and servers are restored to their pre-attack state at no DivergeIT charge. It’s in your agreement.

What’s included: Email security, endpoint detection and response, 24/7 managed detection and response, identity threat detection, DNS filtering, searchable logs and automated containment.

What's included

Inside SecureIT

Attackers can use stolen logins to gain access. Cybersecurity is not a product you buy; it is a program you run. Most providers hand you a tool and walk away. With SecureIT, a 24/7 security operations center watches your endpoints, identities, network, and cloud in every tier, and you get monthly reporting and recommendations from a named SOC account manager.

SecureIT covers endpoint and email protection, managed detection and response, identity threat detection, secure access, and automated containment in three tiers, delivered on the Todyl platform. Every ManageIT plan includes it: SecureIT Core with ManageIT Core and Plus, and SecureIT Plus with ManageIT Pro.

Email security & hygiene

Anti-spam, anti-phishing, and anti-malware policies for Microsoft Defender for Office 365 or Google Workspace, plus SPF, DKIM, and DMARC, in every tier.

Endpoint detection & response (EDR)

Next-generation antivirus and EDR with machine-learning and behavioral analysis, memory and ransomware protection, and real-time response on every device.

24/7 managed SOC (MXDR)

A 24/7 security operations center watches your endpoints, SIEM, cloud, and SaaS in every tier. Humans — not just software — investigate, hunt threats, and respond, and you get 24/7 Teams or Slack access to the SOC.

DNS-layer filtering

Blocks malicious websites before a connection is ever made, protecting users on and off the network.

Zero Trust segmentation

LAN zero-trust segmentation on Pro limits how far an attacker can move through your network. Entra ID conditional access support comes with it.

SIEM & SOAR

Searchable logs for 30 days on Core, 90 days on Plus, and 1 year on Pro, with a cold archive on every tier, plus automated response playbooks: 5 on Core, 10 on Plus, unlimited on Pro.

Identity threat detection (ITDR)

Watches your Microsoft 365, Entra ID, and Google sign-ins and mailboxes for account takeover, including AiTM and device-code phishing that walks around MFA, and locks compromised accounts.

Automated containment

Playbook-driven response locks compromised accounts and isolates endpoints before a threat spreads, in every tier. Full incident response is available to you as a separate retainer.

RITIS · Users

Security posture, scored per person

SecureIT reports through the same RITIS platform. MFA coverage, dormant accounts, credential-breach exposure and training compliance are measured per account rather than sampled — so a 67% training figure resolves to 29 named people with a campaign already assigned.

The Users module. One row per person, four compliance states each. Sample environment shown.

What the Users screen scores

MFA compliance 99%

93 protected · 1 no MFA
Active accounts 98%

92 active · 2 inactive
No breach exposure 100%

94 safe · 0 at risk
Training current 67%

59 compliant · 29 pending

See the Users module → Try it on your data

Also reported here: Devices. All five domains roll into one RITIS Score.

Technical specs & details

SecureIT, line by line

What each SecureIT tier protects, how long your logs are searchable, and what you need in place. Every tier includes both MXDR (a 24/7 SOC watching endpoints, network, cloud and SaaS) and ITDR (identity threat detection that catches account takeover in Microsoft 365 and Google, including MFA-bypass phishing).

Platforms · Todyl security platform · Microsoft Defender for Office 365 · Google Workspace security · KnowBe4 · Microsoft Entra ID

Tiers at a glance

SecureIT Core

Strong locks, alarms and a guard watching the building 24/7.

Minimum: 15-device minimum

Next-gen antivirus + EDR, email security, DNS filtering
24/7 managed SOC (MXDR), identity (ITDR) and network (NDR) detection
Automated containment and endpoint isolation
30 days of searchable logs · 5 custom SOAR playbooks
Secure DNS proxy, web filtering, cloud firewall, agent SSO + MFA

Small teams building a solid baseline. Included in ManageIT Core and Plus.

SecureIT Plus

All of Core, plus training your team not to open the door to strangers.

Minimum: 25-device minimum

Everything in Core, plus —
90 days of searchable logs · SYSLOG ingestion · 10 playbooks
Always-on VPN, SSL inspection, dedicated static IP
1 site-to-site IPsec tunnel
Mobile protection (2 devices per user)
Security awareness training & phishing simulations

Growing teams and remote workers targeted by scams. Included in ManageIT Pro.

SecureIT Pro

All of Plus, plus a vault door between every room and an ID check at each one.

Minimum: 25-device minimum

Everything in Plus, plus —
1 full year of searchable logs · unlimited playbooks
Unlimited site-to-site tunnels
Multi-engine download scanning
Mobile protection (4 devices per user)
LAN zero-trust segmentation · conditional access policy support

Compliance-driven or high-risk businesses.

Feature matrix

Capability	Core	Plus	Pro
Foundation: endpoint & email
Next-gen antivirus + EDR (malware, memory, ransomware, behavior) Todyl EDR	Included	Included	Included
Email security & hygiene management (SPF, DKIM, DMARC) Defender for O365 / Google	Included	Included	Included
DNS-layer filtering Todyl SDNS	Included	Included	Included
Managed detection & 24/7 SOC (MXDR)
Managed detection & response + extended detection (SIEM, cloud, SaaS) Todyl MXDR	Included	Included	Included
Identity threat detection for Microsoft 365 & Google (ITDR) Todyl ITDR	Included	Included	Included
Network detection & response (NDR) Todyl NDR	Included	Included	Included
Automated threat containment & endpoint isolation Todyl SOAR	Included	Included	Included
ML anomaly detection & integrated threat intelligence Todyl	Included	Included	Included
Named SOC account manager + 24/7 Teams or Slack SOC access Todyl SOC	Included	Included	Included
Log retention & analytics (SIEM)
Searchable log retention Todyl SIEM	30 days	90 days	1 year
Cold archive (1–7 yr) with rehydration; 4,000+ managed rules; 50+ sources Todyl SIEM	Included	Included	Included
Generic SYSLOG ingestion Todyl SIEM	Not included	Included	Included
Custom SOAR playbooks Todyl SOAR	5	10	Unlimited
Secure access (SASE)
Secure DNS proxy, web filtering, cloud NGFW, agent SSO + MFA Todyl SASE	Included	Included	Included
Always-on VPN, SSL inspection, dedicated static IP Todyl SASE	Not included	Included	Included
Site-to-site IPsec tunnels Todyl SASE	Not included	1 included	Unlimited
Multi-engine download scanning Todyl SASE	Not included	Add-on	Included
Workforce protection
Mobile device protection (phones & tablets) Todyl	Not included	2 per user	4 per user
Security awareness training, phishing simulations & automated phish investigations KnowBe4	Not included	Included	Included
Zero trust & access control
LAN zero-trust segmentation Todyl LZT	Not included	Not included	Included
Conditional access policy support Microsoft Entra ID	Not included	Not included	Included
Packaging
Included with ManageIT	Core & Plus	Pro	Upgrade

Requirements & what’s not included

What you need in place

DivergeIT administrative access; devices must allow the Todyl agent to be deployed.
SPF, DKIM and DMARC hosted on an eligible DivergeIT DNS platform.
Email security on Microsoft Defender for Office 365 or Google Workspace security; cloud on Azure or GCP.
Full alerting may need additional licensing on your side; policy exceptions need written approval.

Not included

Automated containment is not full incident response: remediation, recovery and rebuilds are billable, and an incident response retainer is available.
Pre-existing compromise, third-party or personal devices, unsupported logging systems, retention beyond your tier and custom correlation rules are billable.
Devices DivergeIT doesn’t manage and unsupported software or OS versions are excluded.

Want this as a document for your team? Book a call and get the full service definitions →

Pricing

Every rate we charge is published in one place

SecureIT tiers, what each one includes, and the assumptions behind the numbers — on the pricing page, not scattered across the site. On ManageIT, call or chat and you reach a live expert within 5 minutes, or you get a $100 credit.

See pricing →

The guarantees

Promises with consequences, not fine print.

Eligibility & limits → Read the agreements →

Response

On any ManageIT plan, wait more than 5 minutes for a live expert and you get a $100 credit on your next invoice.

All ManageIT plans

Ransomware recovery

Hit by ransomware anyway? Your covered data and servers are restored to their pre-attack state at no DivergeIT charge.

ManageIT Plus & Pro, with DivergeIT immutable backup

Switching

If switching disrupts your operations, your first 30 days of service are credited in full.

New ManageIT agreements

Satisfaction

If your concern still isn’t resolved, you get a $50 gift of your choice.

All ManageIT plans

Annual assessment

Your assessment and prioritized recommendations are free, every year. Any fixes are quoted separately.

Any SecureIT plan (included in every ManageIT plan)

AI payback

Not on track to pay for itself after the first two weeks? You get your Forward Deployed Engineering fees back.

Forward Deployed Engineering with an AI Success Desk plan

“DivergeIT has been our IT partner for over 15 years. They are exceptional managers.”

Suzanne L. · Co-Founder, Michael Stars All testimonials →

FAQ

Cybersecurity questions, answered

How is SecureIT different from ManageIT?

ManageIT covers IT operations — help desk, device management, servers, and cloud. SecureIT focuses specifically on threat protection and response. Every ManageIT plan includes SecureIT at no extra cost: SecureIT Core with ManageIT Core and Plus, and SecureIT Plus with ManageIT Pro. You can also buy SecureIT on its own.

Does SecureIT include 24/7 monitoring?

Yes, in every tier. SecureIT Core, Plus, and Pro all include a 24/7 managed SOC with managed detection and response, identity threat detection, network detection, and automated containment. The tiers differ in log retention (30 days, 90 days, or 1 year), awareness training, secure access, and zero-trust controls.

Do I need cybersecurity if I already have antivirus?

Traditional antivirus catches a fraction of modern threats. Attacks today bypass basic tools through phishing, credential theft, and living-off-the-land techniques — layered, monitored defense is required.

What does managed detection and response mean?

A dedicated security team actively watches your environment around the clock. When suspicious activity appears, humans investigate and respond — not just software — and automated playbooks lock compromised accounts or isolate endpoints before a threat spreads.

What size organization is SecureIT designed for?

Small and mid-sized organizations across all industries, with the ability to scale as you grow. As a certified MSSP, we support environments from a few dozen devices to enterprise scale.

How we run it