Snapshot 223329
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Plug into a security team. Stay secure. Managed security services that give you a security team, without the resource drag. Your board wants someone accountable for security, and hiring a CISO takes months you don't have. We plug in a senior security leader and a hands-on squad that runs the stack you already use, watches your cloud and SaaS around the clock, and answers for security when the board asks. Your engineers stay on the product. Book a free consultation 1,600+ clients 24/7 threat detection A named squad, not a ticket queue What we run One team, the whole security stack Hire us for the vCISO, the 24/7 SOC, or all of it. Every capability below is run by the same squad, and each one links to how it works. vCISO & security squad A senior security leader plus an analyst and a PM who know your business. One team to call, not a ticket queue. Managed threat detection A 24/7 SOC watching your cloud and SaaS: AWS, GCP, Azure, GitHub, Microsoft 365, and Slack. 900+ detection rules, mapped to MITRE ATT&CK. Managed endpoint protection Fully managed Sophos across Windows, Mac, and Linux. We configure it, deploy it, and run it, so your team doesn't. Managed user education KnowBe4 training and phishing tests, rolled out and managed for you. 150+ courses, real reporting. Fractional DPO & privacy A privacy officer on retainer who holds CIPP/C and CIPP/E and is called to the BC bar. GDPR, PIPEDA, and Law 25 covered. AI governance Governing how you use AI, mapped to ISO 42001 and the NIST AI Risk Management Framework, so you can answer the questions buyers have started asking. Managed security services Start with one service or the whole team. Every engagement is run by a named squad. Pick the entry point that fits where you are: find out where you stand, plug in the full team, or start with a single managed service. One-time assessment Security gap assessment A step-by-step review of your security posture against a recognized control framework. You get the full picture in about three weeks, and it becomes the foundation of your roadmap. Risk log and gap assessment report Threat modelling included Report delivered in ~3 weeks From $5,750 Discover the gap assessment Most popular Monthly program Your security team, run by us A dedicated squad runs your security program end to end: a vCISO owns the roadmap, an analyst does the work, and a 24/7 SOC watches your environment. This is a security team, not another dashboard. vCISO, security analyst, and PM on your account 24/7 threat detection across cloud and SaaS User education and phishing tests included Weekly working meetings and quarterly business reviews Book a free consultation A la carte A single managed service Not ready for a full program? Take one thing off your plate. We run threat detection, endpoint protection, or user education as a standalone managed service. 24/7 managed threat detection Managed endpoint protection Managed user education Add the full program whenever you're ready Explore managed services How it works From first call to a security team that's already watching Every Kobalt security program follows the same sequence, with milestones you can plan around. 1 Scoping call We review your stack, your risks, and what's driving the need: a deal, the board, an incident, or a gap you already know about. No prep required. 2 Gap assessment We benchmark your current posture against a recognized framework and hand back a prioritized risk log with the engineering effort to close each item. 3 Squad stands up Your vCISO, analyst, and PM onboard, connect your cloud and SaaS log sources, and roll out endpoint protection and user education. 4 24/7 monitoring goes live The SOC starts watching your environment. You get alerts, triage, investigation, and regular analyst reviews, not just pager noise. 5 Ongoing operations Weekly working meetings, monthly executive reporting, and quarterly business reviews. The vCISO owns the roadmap and reports to your board. 6 Scale as you grow When a deal appears or you expand, the program flexes: add a pentest, another cloud source, or a new framework. As fast as you need, never a promised date. A senior hire vs a whole team One senior hire can't be your whole security team A senior security leader runs you north of $200K a year, before the analysts and tools they'll need to hire next. And one person can't watch your logs at 3am, day after day. A Kobalt squad provides the leadership, the hands-on team, and a 24/7 SOC, for less than that one salary. One senior hire Kobalt security squad Senior security leadership (vCISO) Hands-on analysts who do the work – 24/7 threat detection across cloud and SaaS – Managed endpoint protection – User education and phishing tests – Covers vacations, illness, and turnover – Costs less than one senior salary – 1,600+ growing companies plugged into our security team. Kobalt.io's vCISO provided clear guidance and support, managing our ISO 27001 compliance process with ease. It's so much easier to work with them than if we had to start from scratch. Chris Spencer CTO, Silico They keep their managed threat detection service simple, and allow us to stay ahead of the game and focus on what is important for us. Robert Fraser, Ph.D. President & CEO, Molecular You We absolutely love the security training awareness module, especially the real-world scenarios to show applications of key concepts. David Keene VP of Engineering, Vantage Point Logistics 24/7 SOC, mapped to MITRE ATT&CK 1,600+ clients across North America, Europe, and APAC vCISO, SOC, endpoint, and training in one squad Book a free consultation Common Questions Security questions, answered straight What's included in your managed security services? A named squad and the services they run. Every program is run by a security analyst and a PM, with a vCISO leading the roadmap on our full programs. On top of that we offer 24/7 threat detection, managed endpoint protection, and user education, and we bring in a DPO or AI governance when you need them. You can take the whole team or start with a single service. Do we get a real person, or just a dashboard? Kobalt.io provides you with a real team. You get a vCISO, an analyst, and a PM who know your business and your stack, with one point of contact. We're an extension of your team, not a tool you have to learn. The software collects the data; our people make it mean something. How is this different from hiring a CISO? A single hire gives you one person; a Kobalt squad gives you a leader plus the analysts, the 24/7 SOC, and the tools, for less than that one salary. One person also can't cover nights, weekends, vacations, and turnover. We do. Most clients plug us in because the board wants an owner now, not in six months. What does your 24/7 SOC actually monitor? Your cloud, your SaaS, and your identity providers. That means AWS, Azure, and GCP; GitHub, Microsoft 365, Google Workspace, and Slack; and identity tools like Okta and Azure AD. We run 900+ detection rules mapped to MITRE ATT&CK. We detect, triage, investigate, and recommend; your team executes the fix with our guidance. Can we start with just one service? Yes. Plenty of companies start with 24/7 threat detection, managed endpoint protection, or user education as a standalone service, then add the full program later. Managed threat detection starts at $750 per month for a single cloud source. What do managed security services cost? Less than one senior hire. You can start small: a security gap assessment is $5,750, and standalone managed threat detection runs $750 per month for a single cloud source. Full programs are priced by your team size and what you plug in, and even a fully staffed squad costs less than one senior security salary, which typically starts north of $200K a year before tooling. Do you replace our engineers or IT team? No. We handle security so your engineers stay on the product, and we work alongside your IT team rather than replacing it. We're a security team, not an IT help desk, so we focus on security events and posture, not device provisioning or desktop support.