The managed program
Your security program, run end to end by an expert team.
A named lead expert and team direct your program. VectraIQ, our AI, handles the drafting, scoring and tracking, and you keep the final say.
Reach your expert team where you already work
Example
Slackor
Microsoft Teamsor in the appYour cyber expert
I reviewed this week's scan. Two findings need your attention first, and I have added both to your plan.
Who runs it
One accountable lead, a team behind them, and AI doing the drafting.
VectraIQ does the repetitive work fast. Your cyber expert reviews it and makes the call.
- Named, accountable
Your cyber expert
One named person who knows your business. They set priorities with you, review the work that matters and answer for how your program is going.
- Certified
Your expert team
Specialists behind your lead who tailor policies, review reports and help you close what the scans find. Your expert team holds leading certifications across security, privacy and cloud.
- AI
VectraIQ
Our AI scores assessments, drafts findings and reports, runs scans on a schedule, flags changes and keeps evidence current. You can also chat with it any time.
A named lead expert agrees scope and timeline with you at kickoff, then runs the program month after month.
What is included
Everything you need to run a real program.
Pricing is scoped to your frameworks, size and depth, so talk to us. This is what the managed program covers.
Show everything that is included
- Risk and vendor assessments
- SOC 2, ISO 27001, HIPAA, CMMC and more readiness
- Scheduled configuration monitoring through read-only integrations
- Weekly vulnerability scans of your company
- Ongoing posture, records and news checks on your vendors
- OSINT and dark web monitoring
- Remediation guidance
- Evidence collection and audit tracking
- VectraIQ and your expert team on Slack or Teams
Readiness follows the framework you choose. See the supported frameworks and what an independent auditor does.
Your company is scanned on a regular schedule and your vendors get passive checks between assessments. This is scheduled work, not 24/7 monitoring.
Boundaries
What isn't included.
24/7 SOC or MDR monitoring
We run risk, compliance and exposure work on a schedule. A SOC or MDR provider watches your systems around the clock.
The audit itself, which an independent auditor performs
An independent auditor performs your audit. We get you ready and support you through it.
A hassle-filled cybersecurity program management experience
The reason the program exists: you should not have to chase it. We run it with you.
You can add authenticated internal scans, deeper testing or hands-on remediation when you need them. Add-ons are quoted separately.
Remediation
Your expert team owns every finding.
They set the priority with you, guide the fix and drive it to closure with evidence.
Fits what you already run
It works alongside your SOC, MDR and compliance tools.
Show how it fits your tools
Alongside your SOC or MDR provider
We do not replace them. They watch your systems around the clock. We cover your risk, compliance and external exposure on a schedule, and we work alongside them.
Alongside Vanta, Drata or similar tools
Compliance tools automate evidence collection, but someone still has to run the program. We can take that on. Talk to us about how we fit with the tools you already use.
Read-only connections into the tools you already use
Identity, endpoint, cloud and SIEM tools. Your cyber expert confirms the exact list and access needed at kickoff. Read what access we ask for and who approves it.
Working together
Scoped to your frameworks, size and depth.
Pricing depends on your frameworks, company size and the depth of support you need. Talk to us and a lead expert will scope it with you.
What shapes the scope
The frameworks in play, the systems and vendors in the picture, how much remediation help you want and how mature your program is today. Pricing is scoped with you.
Questions, answered.
Who will I work with?
Every program has a named lead expert and a team behind them. VectraIQ, our AI, handles the repetitive drafting, scanning and tracking, and your expert team reviews final reports and makes the key decisions with you.
Who fixes the findings?
Your expert team owns every finding. They set the priority with you, guide the fix and drive it to closure with evidence. If you want our Cybersecurity Engineers to make the changes directly in your tools, that is the advanced remediation support add-on.
Do you replace my SOC or MDR provider?
No. Vectra View covers your risk, compliance and external exposure on a schedule. A SOC or MDR watches your systems around the clock, and we work alongside them.
We already use Vanta or Drata. Why would we need you?
Those tools automate evidence collection, but someone still has to run the program. We can take that on, alongside the tools you have.
What does the managed program cost?
Pricing depends on your frameworks, company size and the depth of support you need. Talk to us and we will scope it with you.
In the program
What each part of the program involves.
What happens, who does it, and what you receive.
Kickoff, baseline and roadmap
The first phases in order: scope, kickoff, a reviewed baseline of your risk and vendors, then a ranked roadmap of gaps.
Read moreRisk and vendor reviews
How a company assessment and a vendor review run, who drafts, who reviews and when you see the report.
Read moreScanning and exposure monitoring
What is scanned and how often, how your cyber expert triages the results and what you are asked to do about them.
Read moreAudit readiness
Evidence kept current between audits, what the independent auditor does and where our work stops.
Read moreRemediation support
How a finding moves to closure, who makes the change and when hands-on help is an add-on.
Read moreReporting and advisory
The reports your leadership gets, how meetings are set and the extra support you can add.
Read more
See what the program would cover for you.
Give us your frameworks and company size and a lead expert will scope it with you.