Source
r/ITManagers•
luksharp

Cyber Security Vendor/Bundle?

Hi all - What Cyber Security Vendor/company would you recommend for an org size of 100-150? I am considering demo-ing Blackpoint Cyber and wanted to see if anyone here has any experience with them. What are other alternatives on the market?

Edit: No Framework as of yet, I'm looking to get rid of symantec AV ASAP and replace it with the service in the lines of EDR/MDR/XDR. We are a 2 men department (soon to be 3) and we do not have expertise or time to sit down and do threat hunting or investigation. Considering M365 security+monitoring service as well. Apologies for very broad initial post.

Posted May 18, 2022, 2:21 PM UTC · edited

412
Unatommer•

What are you looking to accomplish by hiring a vendor? That was a pretty open ended question. Do you have any compliance or risk frameworks you’re currently adhering to?

3
VA_Network_Nerd•

What are your requirements?

3
VA_Network_Nerd•

https://www.microsoft.com/security/blog/2021/05/11/gartner-names-microsoft-a-leader-in-the-2021-endpoint-protection-platforms-magic-quadrant/

https://www.crowdstrike.com/resources/reports/gartner-magic-quadrant-endpoint-protection-platforms-2021/

https://www.gartner.com/reviews/market/endpoint-protection-platforms

3
peesteam•

What problem are you trying to solve? Sounds like you may just need a consulting firm to come in and provide an assessment and recommendations for next steps.

3
luksharpOP•

This is pretty much is the best answer. Nobody on the team has security experience and this is the problem. We will need whole lot of handholding in the process. Bun on the same time I don't want to jump on the very first vendor I read or hear about.

1
theykilledmyaccount•

We were in a similar spot. This was our step 1 and really worked for us.

1
Danwri•

You didn’t provide enough information to allow me to give any specific recommendations that are useful sorry. I also have no experience with Blackpoint Cyber so cannot comment on them.

However as some general advice, if you are already heavily using M365 then there are lots of advantages to using the Microsoft security tools. They fully integrate into your environment, work natively with Windows devices and the M365 security centre will give you advice about which features to turn on to increase security posture.

In my experience it is often better to have 90% of your requirements met by one platform that is fully integrated than to have 100% met across lots of separate tools.

In terms of background, I run a consultancy which recently developed a cyber consulting practice so we have advised people with your challenge. We don’t offer managed services but you if are UK (or to a lesser degree US based) feel free to DM me some more details and perhaps I could suggest some excellent companies that we have worked with in the past.

My final suggestion is that if you do any sort of networking, or have met people on training courses etc. speak to your peers in other similar sized companies and ask what they do and who they recommend. People generally only recommend services that they are really pleased with as the recommendation reflects directly on them. You also get to quiz them about it before going near a vendor whose sales person may say yes to whatever you ask.

Best of luck!

2
msp-daddy•

Is this purely for endpoint protection? If you are going full MDR then it's good to highlight your own requirements and then the MDR vendors can address those points and add bells/whistles. Then it'll come down to costs naturally.

2
[deleted]•

This is a great thread to refer to and will help gain visibility on what security gaps could use some work and strategize the efforts on getting them implemented into your existing ecosystem. I’m in the same boat and can’t provide vendor advice but for me I started out here and am now wondering if an MSSP might be who I’m looking for.

https://www.reddit.com/r/msp/comments/ngfohk/mssp_security_stack_for_smb/?utm_source=share&utm_medium=ios_app&utm_name=iossmf

2
charuvilat•

Sent you a DM.

1
Jweekstech•

Our group has experience with BPC and are a big fan. They are a great team to work with.

As far as vendor/bundle for endpoint security we typically recommend Sentinel One EDR paired with BPC or another MDR service of your choice that you can work well with.

Our blog covers tons of fundamental stack type recommendations. Feel free to check it out at https://insula.tech/blog

1
Salthill1•

@luksharp we’d love to have a chat with you and show you what we can do

https://www.titanhq.com/

0