Contact info
A monthly service for Australian businesses that hold data they cannot afford to lose. We monitor your endpoints and cloud identities around the clock, and when something is genuine a named Ferres Systems responder owns it end to end.
The people who answer. Hirusha, Sham and George, working from Melbourne. Meet them
“An account was compromised on a Sunday night, and it was contained before any of us woke up.”
Security watched and answered, with patching and Microsoft 365 or Google Workspace backup included. Everything in it, we support. Your IT person or provider keeps the everyday IT.
Every hour of every day, including the ones where nobody is at a desk.
Your own copy, outside the retention window Microsoft and Google give you.
A phishing page can look perfect. It is still the wrong address, so nothing gets typed.
Patched, enrolled and watched, whether it is in the office or on a kitchen table.
As often as you like. The everyday IT stays with your IT person or provider.
The kind of thing you can forward to an insurer without having to explain it.
One monthly price for all of it, for everybody you cover. Onboarding and anything outside the package is quoted separately, and we tell you which is which before you sign.
If a breach would barely register in your week, you probably do not need this yet, and we will say so.
IT support and cybersecurity are not the same service, and they are not the same skill. Your IT person or provider looks after laptops, Microsoft 365, the Wi-Fi, the printer and whoever cannot get into their email this morning. We look after the security of everything they run.
“My laptop is not working.”
“Is somebody trying to get into it?”
We do the second one.
When an attack starts, we are on it straight away and we stop it. Any hour, any day of the year.
We do not replace your IT team. We give them a security team.
Already have an IT provider, or someone in-house? Good, we work alongside them, and plenty of our clients came to us with one. We will take on a specific responsibility if you want us to, whether that is hardware procurement, a new starter or a particular system. What we do not run is a standardised 24/7 IT helpdesk. We are cybersecurity people, so tell us what you need and we will tell you straight whether we are the right ones to do it.
Detection, triage, and owning a confirmed incident end to end. That does not get shared, because a response with two owners has none.
Day-to-day support, new starters, hardware, the printer. We do not run a standard helpdesk, though we will scope and price any of it if you would rather we took it on.
Patching, backup and identity changes. Where your provider also touches them, who does what is written down at onboarding rather than discovered during an incident.
If a split is genuinely going to cause problems we will say so before you sign, not after.
Based on a real engagement, with the identifying details changed. The commitments in it are real.
Seen enough? We will scope it, price it in writing, and tell you straight if you do not need us yet.
Get a written quoteMicrosoft and Google keep your data available. They do not keep it recoverable: a deleted mailbox, an emptied site or a ransomware run through a synced drive is gone once their own retention window closes, which is usually measured in days. This is the copy that sits outside all of that.
For organisations that have to prove their security to somebody on a schedule, whether that is a regulator, an insurer, a contract or a board. The package reports on your security; this module does the governance work around it.
The rest of what we do sits alongside these plans rather than inside them: IT projects and Microsoft 365 work, penetration testing and security assessments, AI and workflow automation, custom software, and governance programs larger than the module covers. Each is scoped with you when you are ready, so none of it pads the monthly service.
See the full range of servicesFinal scope is confirmed before you commit. Monthly, with the minimum term set out in your written quote.
We deploy it, build the vaults, run recovery and take people off it the day they leave. The first 15 people are in the monthly price, and anyone past that is $15 a month for their seat.
1Password Business, deployed, managed and maintained by us.
None of this takes months. The whole sequence is below, access is not requested until step three, and it is scoped to what monitoring needs.
What you run, who currently looks after it, and what would hurt most. No access requested at this stage.
What is covered, what stays with your existing provider, the monthly figure and what it is based on. You approve it before anything is connected.
Delegated administrative access to your Microsoft 365 or Google Workspace tenant, scoped to what monitoring needs. Named accounts, multi-factor enforced, and every action logged and attributable to a person.
We map the environment, deploy monitoring to endpoints and identities, and record the starting posture so the first month has something to be measured against.
Triage runs from the moment the baseline is set. The first posture report goes out at the end of that month.
Everything in the package is listed in full at the top of this page, in six areas. Support for all of it is in the fee: policy and allow-list changes, agent and enrolment problems, compromised accounts and multi-factor trouble, however often you need them. The Governance and Compliance module adds ongoing governance work and further security controls. Managed SIEM and device backup are add-ons you can switch on at any time.
Support for everything we manage is included, as often as you need it and at no extra charge: allow-list and policy changes, browser settings, a security agent or an enrolment that has gone wrong, patching failures, compromised accounts, suspicious email and multi-factor trouble. The everyday helpdesk work is not part of the package, and who owns what is set out further up this page.
Monthly, with the minimum term set out in your written quote. You approve the written scope and quote before anything is connected.
First response, containment, the notifiable breach assessment and the plain-English write-up are in the monthly fee, however long the night turns out to be. Deeper investigation and rebuilds, where an incident needs them, are quoted separately and agreed with you before anybody starts. We will not send you a surprise invoice for the night itself.
Yes, with the identifying details changed. A quiet night like that is the normal one: triage filters that much noise daily and confirmed incidents are rare, which is the part a sales page usually leaves out.
Read the case file it is based onThe Governance and Compliance module is the one add-on to the package, and what is in it is listed above. Larger programs, such as certification work, are scoped separately when you are ready for them.
Your data stays in Australia. Client data is held inside Australian infrastructure for the whole engagement, and that is not something we vary by client or by state.
