What Elevaire Managed Security Includes (and What It Doesn't)

Elevaire Managed Security runs your cybersecurity end to end. We manage the security tools and vendors, watch for threats, and step in to stop an attack when one hits. This guide explains exactly what that covers, so there are no surprises later.

The three packages

Every package is run by the same team. The difference is how much protection is in place and how fast we respond.

Essentials is a solid security baseline:

Ransomware and application protection, so only approved software can run
Email security, plus web filtering and traffic monitoring
Security training and monthly phishing tests
Device management and a security baseline for Windows and Mac, plus iPhone and Android
Multi-factor sign-in and access hardening
Security setup for Microsoft 365, Microsoft Azure or Google Workspace
A quarterly security review
Business-hours response

Plus is for regulated or higher-risk organizations. It adds:

24/7 threat detection and response
Microsoft 365 backup
Vulnerability scanning
Audit-ready compliance reporting

Organizations under HIPAA, CMMC or PCI start at Plus.

Complete is for organizations that want one partner for everything. It adds help desk and full day-to-day IT support through an IT partner we vet and manage.

What the monthly fee covers

The monthly management fee covers running your security, with no hourly billing. That includes:

Running and monitoring your security stack
Security vendor management and renewals
Incident triage and containment
Security setup when people join or leave
Automated training and phishing tests
A baseline security policy set
Your yearly cyber insurance renewal
Short client security questionnaires
A quarterly security review with a metrics report

Security licensing is priced per employee for the package you choose and billed on the same invoice. Packages start at 20 seats, and smaller teams can talk to us about specialized pricing.

What a virtual CISO adds

Managed Security runs the controls. A virtual CISO leads the program around them. Add one when you need:

An ongoing security awareness program with tailored campaigns and live staff sessions
Custom or framework-specific policies
A risk register and help with risk decisions
Long-form vendor assessments, such as SIG or CAIQ
Written security reports for leadership and the board
Tabletop exercises and audit coordination

What is quoted as a project

Some work has a clear start and finish, so we scope and price it up front:

Compliance programs, such as SOC 2, HIPAA or CMMC readiness
Compliance self-assessments, such as a HIPAA risk analysis or a CMMC score
Penetration testing
Major incident recovery and forensics
Migrations and new office build-outs

Do you replace our IT provider?

No. If you have an IT provider or internal team, they keep handling day-to-day support while we handle security. If you have no IT at all, Complete brings in help desk support through a partner we manage, so you still have one team to call.

Next step

The fastest way to see which package fits is the free security scorecard, followed by a 30-minute Risk Snapshot.