01
Managed IT Services
Proactive, end-to-end IT management that keeps your business secure, stable, and scalable.
58 services · 10 domains · one accountable team
Everything we do,
and exactly how we do it.
Not a list of buzzwords. For every service: what is included, how it is delivered, the platforms behind it, and the outcome you can measure, plus the operating standard, the response targets, and the playbooks we run when something goes wrong.
58
Services, each with scope and measures
24/7
Security monitoring and service desk coverage
15 min
Response to a critical (P1) incident
10
Baseline controls every client gets
Our approach
Engineered, documented, measured.
Managed IT is only as good as the standard it is run to. Every client gets the same baseline, the same operating rhythm, and the same numbers in the monthly report, so you can see the work, not just trust it.
The Zero Day IT Standard
Ten controls every managed client gets on day one. Select one to see how it is implemented and how we prove it is working.
How: Number-matching MFA for users, phishing-resistant keys or passkeys for administrators, legacy authentication blocked, Conditional Access instead of security defaults.
How we prove it: The monthly identity report lists accounts without MFA. The target is zero, and it is usually zero.
What happens, and when
The operating rhythm behind a managed estate. Nothing on this list depends on someone remembering.
- SOC triage of every alert, around the clock, with analyst validation before you are contacted
- Backup jobs and verification results reviewed; failures ticketed the same day
- Patch deployment status checked; failed installs retried or escalated
- Service-desk tickets worked to priority targets; SLA breaches flagged to the delivery manager
- Joiner and leaver requests processed; leavers lose access within one business day
Response targets and escalation
Our standard targets. The figures that bind us are in your service agreement, and the numbers we actually hit are in your monthly service report. How we hold ourselves to the same standard is on the Trust Centre. On-site response in the Lower Mainland is under four hours.
| Priority | Examples | Acknowledge | Updates | Escalation |
|---|---|---|---|---|
| P1: Business down or security critical | Site offline, ransomware, domain compromise, revenue system unavailable | 15 min, 24/7 | Every 30 min | On-call engineer + SOC immediately; delivery manager informed |
| P2: Major degradation | Many users affected, key application degraded, confirmed malware on an endpoint | 1 hour | Every 2 hours | Tier 2 → Tier 3 engineering within the hour |
| P3: Single user or minor impact | One person blocked, non-critical system issue, workaround exists | 4 business hours | Daily | Tier 1 → Tier 2 as needed |
| P4: Request or change | New starter, access request, scheduled change, question | Next business day | On completion | Workflow-driven; changes go through review |
Tier 1: service deskTier 2: systems specialistsTier 3: senior engineeringSecurity operations (SOC) and incident responseService delivery managerLeadership
The platforms behind the service
Certified on what we run. We use the tools you already own where they are fit for purpose, and tell you when they are not.
Endpoint
SentinelOne SingularityMicrosoft DefenderMicrosoft Intune
Identity
Microsoft Entra IDConditional AccessPrivileged Identity Management
Network
FortinetPalo Alto NetworksCisco & MerakiSophosStarlink
Cloud
Microsoft AzureAWSGoogle CloudMicrosoft 365
Operations
Remote monitoring and management (RMM)Ticketing and service management (PSA)Documentation & password vaultGrafana / Loki telemetry pipeline
Resilience & compliance
Immutable object storageMicrosoft 365 backupMicrosoft PurviewCompliance evidence library
The terms on this page, in plain English
Industry shorthand you will see in the catalogue below. Ask ZeroBot if anything else is unclear.
- SOC (Security Operations Centre)
- Our analysts watching your systems around the clock, investigating alerts and acting on real threats.
- NOC (Network Operations Centre)
- The team that watches network health and connectivity, and works with carriers when a link fails.
- MDR (Managed Detection and Response)
- The service the SOC delivers: detect an attack, confirm it, and contain it, 24/7.
- EDR (Endpoint Detection and Response)
- Security software on every computer and server that spots attacker behaviour and can isolate the device.
- MFA (Multi-factor authentication)
- A second proof of identity, such as an app prompt or a security key, so a stolen password alone is not enough.
- DNS and web filtering
- Blocking known malicious and look-alike websites before a browser ever reaches them.
- RMM (Remote monitoring and management)
- The agent on each device that lets us patch, monitor, and fix issues remotely.
- PSA (Professional services automation)
- Our ticketing and service-management system, where every request is tracked to closure.
- SLA (Service level agreement)
- The written response and resolution targets we commit to in your contract.
- P1 to P4
- Ticket priority. P1 is business down or a security emergency; P4 is a routine request.
- Tier 1, 2, 3
- Escalation levels: the service desk, then systems specialists, then senior engineers.
- RTO and RPO
- How quickly a system must be back (Recovery Time Objective) and how much data you can afford to lose (Recovery Point Objective).
- vCISO (Virtual Chief Information Security Officer)
- A senior security leader on retainer instead of a full-time hire.
- SD-WAN
- Software that manages several internet links at once and moves traffic to the healthiest one automatically.
- NIST CSF (Cybersecurity Framework)
- The framework we map every service to: Govern, Identify, Protect, Detect, Respond, Recover.
- PIPEDA and PIPA
- Canada's federal privacy law and British Columbia's provincial equivalent.
- SOC 2, ISO 27001, PCI DSS, HIPAA
- Compliance standards: SOC 2 and ISO 27001 for security programs, PCI DSS for card payments, HIPAA for US health data.
What happens when…
Pick a bad day. See the playbook.
Six situations every business eventually faces, and the minute-by-minute response a managed client gets. Times are typical for a client on our standard baseline.
An employee clicks a phishing link and types their password
The most common incident we handle. The attacker has a valid password for a few minutes at most.
- T+0You
The employee reports the email with the Outlook report button, or the SOC sees the credential-entry page in DNS and endpoint telemetry before anyone reports anything.
Report buttonDNS filteringEDR - T+2 minSecurity team (SOC)
Alert triaged. The URL is detonated in a sandbox; the mailbox audit is checked for new inbox rules, forwarding, or OAuth consents.
Defender for Office 365Mailbox audit - T+5 minSecurity team (SOC)
Pre-authorised containment: sessions and refresh tokens revoked, password reset forced, MFA re-registration required. The email is purged from every mailbox that received it.
Entra IDZero-hour purge - T+15 minSecurity team (SOC)
Sign-in logs checked for the attacker's IP and any successful access; indicators blocked at DNS and the firewall; no consent or rule found, or removed if found.
Sign-in logsFortiGate / DNS - T+1 hService desk
The employee is called, walked through re-enrolment, and thanked for reporting. No blame: reporting is the behaviour we want.
Ticket - T+1 dayCompliance
Ticket closed with a timeline. The lure goes into next month's simulation. The monthly report shows the incident and the time to contain.
Monthly reportPhishing simulator
OutcomeAttacker access window: minutes. Data accessed: none. Cost to you: one phone call.
The catalogue
58 services. Filter by what you actually need.
Open any service for what is included, how it is delivered, the platforms behind it, and the outcome you can measure. Shortlist the ones that fit and request one scoped proposal, or ask ZeroBot about any of them.
Core Managed IT Services
One accountable team for the whole estate (desk, devices, servers, identity), run to a documented standard.
02
24/7 IT Support
Round-the-clock support from our own engineers, whenever and wherever your people are working.
03
Co-Managed IT Services
Enhance your internal IT team with expert backup, advanced tools, and strategic guidance.
04
Remote Monitoring & Management (RMM)
Real-time system monitoring to prevent issues before they impact your business.
05
IT Help Desk Support
Fast, friendly, and knowledgeable support that keeps your team productive.
06
On-Site IT Support
Hands-on technical expertise when your business needs boots on the ground.
Cybersecurity & MSSP Services
Layered controls implemented to a baseline, watched 24/7 by analysts, and reported in numbers you can show an insurer.
07
Managed Cybersecurity Services
Layered security protection designed to stop threats before they cause damage.
08
AI-Driven Threat Detection (SOC)
Intelligent monitoring powered by AI to detect and neutralize cyber threats 24/7.
09
Network Security & Firewall Management
Advanced firewall and intrusion prevention systems that defend your digital perimeter.
10
Endpoint Detection & Response (EDR)
Real-time protection for desktops, laptops, and servers against modern threats.
11
Email Security & Anti-Phishing Protection
Protect your inbox from phishing, malware, and business email compromise attacks.
12
Security Awareness Training
Turn your employees into your first line of defence.
13
Vulnerability Assessments & Penetration Testing
Identify and eliminate weaknesses before attackers exploit them.
14
Compliance & Risk Management
Simplify regulatory compliance with expert risk assessments and reporting.
15
Multi-Factor Authentication (MFA) Deployment
Strengthen access control with secure identity protection solutions.
16
Zero Trust Architecture Implementation
Adopt modern security frameworks that verify every user and device.
Cloud Services
Microsoft 365, Azure, AWS, and Google Cloud operated under guardrails: configured deliberately, cost-controlled, logged, and backed up.
17
Managed Cloud Services
Optimize, secure, and scale your cloud infrastructure with expert management.
18
Microsoft 365 Management
Complete administration, security, and optimization of your Microsoft 365 environment.
19
Azure & AWS Cloud Solutions
Design, migrate, and manage secure public and hybrid cloud environments.
20
Cloud Migration Services
Move your data, applications, and workloads to the cloud without disruption.
21
Cloud Backup & Recovery
Reliable cloud-based backup solutions that protect against data loss and ransomware.
22
Virtual Desktop Infrastructure (VDI)
Secure remote access solutions for today's hybrid workforce.
Data Protection & Business Continuity
Backups ransomware cannot touch, recovery times you have measured, and data that does not walk out the door.
23
Backup & Disaster Recovery (BDR)
Rapid recovery solutions that minimize downtime and protect your revenue.
24
Business Continuity Planning
Strategic planning to keep your operations running during disruptions.
25
Ransomware Protection & Recovery
Proactive defense and fast recovery from ransomware attacks.
26
Data Loss Prevention (DLP)
Prevent sensitive data from leaving your organization.
Infrastructure & Networking
Networks designed to contain, built to baselines, documented as built, and changed only under control.
27
Network Design & Optimization
Future-ready networks built for speed, reliability, and scalability.
28
Structured Cabling & Infrastructure Setup
Professional infrastructure deployment for growing businesses.
29
Wi-Fi Design & Deployment
Wireless designed for density, roaming and security, then validated in the building.
30
SD-WAN Implementation
Intelligent networking that improves performance across multiple locations.
31
Server Virtualization
Reduce hardware costs and improve performance through virtualization.
32
Hardware Procurement & Lifecycle Management
Strategic sourcing and management of IT assets from purchase to retirement.
Communication & Collaboration
Voice, video, and messaging on the same identity and security policy as everything else.
33
VoIP & Business Phone Systems
Modern cloud phone systems built for mobility and reliability.
34
Unified Communications (UCaaS)
Voice, video, and messaging that work as one system.
35
Video Conferencing Solutions
Secure, managed meeting rooms and conferencing for hybrid teams.
Strategic & Advisory Services
Executive-level technology leadership: roadmap, budget, risk, and board reporting without a full-time salary.
36
vCIO / Fractional CIO Services
Executive-level IT strategy without the full-time executive cost.
37
IT Strategy & Roadmapping
Align your technology investments with long-term business goals.
38
Technology Assessments & Audits
Structured evaluations that find gaps and growth opportunities.
39
IT Budget Planning & Optimization
Maximize ROI with smarter IT spending strategies.
40
AI Readiness & Integration Consulting
Develop a clear roadmap to safely adopt AI technologies.
Advanced & Emerging Services
Identity, devices, automation, and intelligence: the controls that turn a managed estate into a defended one.
41
AI-Integrated Network Monitoring (NOC + SOC)
Smart, automated monitoring that keeps your infrastructure secure and optimized.
42
Identity & Access Management (IAM)
Centralized identity controls to protect sensitive systems.
43
Mobile Device Management (MDM)
Secure and manage smartphones and tablets across your organization.
44
IT Automation & Workflow Optimization
Automate the repetitive work that slows your operations down.
45
Dark Web Monitoring
Monitor for compromised credentials before attackers use them.
46
Incident Response & Digital Forensics
Rapid containment and investigation when security incidents occur.
Specialized Services
The same engineering standards applied to the sectors with the least room for downtime.
47
Multi-Location IT Management
Unified IT management for growing, distributed organizations.
48
Retail & POS IT Support
Reliable IT solutions designed for high-transaction environments.
49
Healthcare IT & HIPAA Compliance
Secure, compliant IT services for healthcare providers.
50
Construction & Field IT Solutions
Mobile-first IT infrastructure built for dynamic industries.
Vendor Professional Services
Fixed-scope design, deployment, and knowledge transfer on the platforms we partner with, and your team runs it afterwards.
Bought the platform but need it built right? We deliver fixed-scope professional services on the vendors we partner with, and leave your team able to run it without us.
01
Design
Requirements, architecture, and a build plan your team signs off before anything is touched.
02
Deployment
Staged rollout with testing, scheduled cutover windows, and a rollback plan: no surprises.
03
Knowledge Transfer
Documentation, admin training, and runbooks so your team owns the platform after we leave.
51
Fortinet Professional Services
FortiGate, FortiSwitch, FortiAP, and SD-WAN: architecture, policy build, deployment, and handover.
52
Cisco & Meraki Professional Services
Switching, wireless, and SD-WAN designed, deployed, documented, and handed to your team.
53
Palo Alto Networks Professional Services
Next-generation firewall rollouts and migrations from legacy firewalls, tuned and documented.
54
Sophos Professional Services
Sophos Firewall and endpoint protection deployed with policy design and admin training.
55
Microsoft 365 & Entra ID Professional Services
Tenant design, Intune, Conditional Access, migrations, and a clean admin handover.
56
Azure, AWS & Google Cloud Professional Services
Landing zones, cloud networking, identity, and workload migrations built to be run by you.
57
Backup & Recovery Platform Deployments
Immutable backup design, deployment, restore testing, and the runbooks to go with it.
58
Firewall & Network Platform Migrations
Vendor-to-vendor cutovers planned around your change windows, with rollback built in.
Sectors
Built for regulated,
always-on work
The sectors we serve and the rules they live under. We publish references only with a client's written permission, so you will find no client counts here, and you can ask for a conversation with someone in your sector.
🏦
Financial Services
Regulator and auditor expectations, complete audit trails, client records that cannot leak
🏭
Manufacturing
Operational technology kept apart from office IT, shift coverage, downtime counted in lost production
🏫
School Districts
FIPPA obligations, thousands of student and staff identities, shared devices across many schools
🏛️
Government
Public-sector privacy law, procurement and reporting requirements, services the public depends on
🏥
Health Care
Patient privacy under PIPA, clinical uptime, medical devices on the network
🎓
Education
Colleges, universities and private schools: open campus networks, research data, staff and student access
⚖️
Legal and Professional Services
Client confidentiality, document management, trust-account and invoice fraud attempts
🛒
Retail and Hospitality
PCI DSS, point-of-sale and guest systems, many locations run to one standard
🏢
Business and Enterprise
Multi-site companies with an internal IT team that needs 24/7 security depth and a documented standard
Frameworks we work to:PIPEDA • BC PIPA • FIPPA • NIST CSF 2.0 • CIS Controls • SOC 2 • ISO 27001 • PCI DSS v4.0 • HIPAA
Let's Talk
Ready to Stop Worrying
About IT?
Book a free 30-minute assessment, no pressure, no obligation. We'll review your current setup, surface your biggest risks, and show you exactly what a properly managed IT environment looks like. Call us anytime at +1 (866) SOS-GEEK or fill out the form and we'll reach out within one business day.
1055 West Georgia St, Suite 2100 · Vancouver, BC V6E 3P3
✓A person replies within one business day
✓A 30-minute conversation about your situation, no slides
✓A written proposal with scope, price and measures