Security Operations
Enterprise-grade security monitoring, threat detection, and incident response. Capabilities that expand tier by tier from COSAINT Cyber through to Strategic.
Get in TouchWhat we do
Every COSAINT tier starts with the same enterprise-grade security foundation: Blackpoint Cyber for 24/7 SOC monitoring and Ironscales for email threat protection. We do not sell security as an add-on. It is the baseline.
From this foundation, each tier adds progressively deeper protection. Essentials adds Microsoft-native identity and email security (Entra P1, MDO P1). Managed adds endpoint hardening and device security (MDE P1, Defender for Cloud Apps, Intune). Complete upgrades to the full Microsoft Defender XDR suite. Strategic adds Purview compliance, Sentinel SIEM, and external attack surface management.
The layered approach means you are never paying for security you do not need, but you always have a clear upgrade path when your requirements grow. Every tool in the stack is configured, monitored, and maintained by our team – you get protection, not a dashboard to watch.
Security across our tiers
Each tier builds on the one before it. Security capabilities expand as you move up – no gaps, no overlap, clear value at every step.
COSAINT Cyber
EUR 35/user/moSecurity overlay on your existing M365
- Blackpoint MDR (24/7 SOC) – human-led threat detection and response
- Ironscales email protection – phishing, BEC, malicious attachments
- SPF/DKIM/DMARC setup and monitoring
- Security alert notifications to nominated contacts
- Discovery and baseline gap report
You keep your own M365 licences and IT team. We add enterprise-grade security monitoring and email protection as a lightweight overlay.
COSAINT Essentials
EUR 60/user/moIdentity and email security for cloud-first organisations
- MDO P1 – Safe Links, Safe Attachments, anti-phishing policies
- Entra P1 Conditional Access – MFA, location-based, risk-based sign-in policies
- SaaS Backup – M365 mailbox, OneDrive, and SharePoint protection
Adds Microsoft-native identity and email protection layers on top of Cyber. Cloud-only, no device management.
COSAINT Managed
EUR 85/user/moEndpoint hardening and device security
- MDE P1 – endpoint hardening, ASR rules, vulnerability management
- Defender for Cloud Apps – shadow IT discovery, app permissions control
- Intune device compliance policies (Windows + macOS)
- 1Password Business – credential management across your organisation
Adds endpoint protection and device security to the stack. Every device your team uses is enrolled, hardened, and monitored.
COSAINT Complete
EUR 115/user/moDefender Suite with XDR and attack simulation
- Defender Suite – MDE P2 (EDR), MDO P2 (advanced email), Entra P2/PIM (privileged identity)
- Enhanced Defender for Cloud Apps – deeper shadow IT and OAuth app control
- Attack Simulation Training – test your team with realistic phishing campaigns
- Full end-user helpdesk with SLA-measured security incident escalation
Upgrades to the full Microsoft Defender XDR suite. Cross-domain threat correlation, automated investigation, and attack simulation training.
COSAINT Strategic
EUR 150/user/moCompliance, SIEM, and external attack surface management
- Microsoft Purview Suite – DLP, Insider Risk Management, eDiscovery Premium, Audit Premium
- Microsoft Sentinel – custom detection rules, threat hunting, anomaly detection
- Defender EASM – continuous external attack surface mapping
- Cyberday ISMS – ISO 27001, NIS2, GDPR compliance platform
- vCISO advisory and board-level security reporting
Adds the full compliance and threat intelligence layer. Purview protects data. Sentinel hunts threats. EASM maps your external exposure. Cyberday manages your ISMS.
Key capabilities
24/7 SOC monitoring
Round-the-clock security operations centre via Blackpoint Cyber, detecting and responding to threats in real time. Included in every tier.
Endpoint detection and response
Microsoft Defender for Endpoint across all devices – from basic protection at Managed tier to full P2 EDR with automated investigation at Complete and above.
Email threat protection
Ironscales catches phishing and BEC at every tier. MDO P1 adds Safe Links and Attachments from Essentials. MDO P2 adds advanced anti-phishing from Complete.
Identity and access management
Entra ID with Conditional Access from Essentials. Privileged Identity Management (PIM) from Complete. Zero-trust identity controls that grow with your tier.
Data loss prevention
Microsoft Purview DLP at Strategic tier – policy-based protection for sensitive data across email, Teams, SharePoint, and endpoints. Insider Risk Management for behavioural anomalies.
Security incident triage
Every alert is investigated and triaged. Real threats are escalated and resolved. False positives are closed. You get clarity, not noise.
Monthly security reporting
Automated reports covering threat detections, incident resolutions, Secure Score trends, and compliance posture – delivered to your inbox from Essentials upward.
Security Operations FAQ
Is the SOC really 24/7?
What happens when a threat is detected?
What is the difference between Cyber and Essentials for security?
When do I need Defender Suite (Complete tier)?
Do you handle compliance reporting?
Technology Partners
The tools and platforms we use to deliver enterprise-grade security operations.
Ready to secure your business?
Every COSAINT tier starts with enterprise-grade security. Let us show you which level is right for your organisation.
Get in TouchOr email us at [email protected]