Frequently Asked Questions

Standard

• SIEM/XDR: Blumira (Respond Core)
• Cloud Security Posture Management: CloudCapsule (Analyze)
• Data Backup: VMOBACKUP from Managecast (Basic)
• Domain/DNS Management: EasyDMARC
• Security Awareness Training & Phishing Simulation: Phin Security

Advanced

• SIEM/XDR: Blumira (Respond)
• Cloud Security Posture Management: CloudCapsule (Analyze)
• Data Backup: VMOBACKUP from Managecast (Advanced)
• Domain/DNS Management: EasyDMARC
• Security Awareness Training & Phishing Simulation: Phin Security

Premium

• SIEM/XDR: Blumira (Automate)
• Cloud Security Posture Management: CloudCapsule (Analyze + Manage)
• Data Backup: VMOBACKUP from Managecast (Business Critical)
• Domain/DNS Management: EasyDMARC
• Security Awareness Training & Phishing Simulation: Phin Security

We extensively vetted tools that solve common problems efficiently and simply. If you have specialized needs, we can provide and support a variety of SIEM, EDR, and XDR tools to meet these requirements through custom packages.

Absolutely! We've even listed the tools we use for full transparency. Our value lies in the following key benefits:

1. Simplified Billing - We provide all licenses and services under a single vendor and invoice.
2. Co-managed solution - You get full visibility and access to the tools because we feel that is your right. We empower your staff to remain the experts your business depends on, while serving as a trusted advisor and partner for excellence in service delivery.
3. Vetted integrations - The hard work of figuring out which solutions work together, how to integrate them, and manage them effectively is already done for you.

Conflux Cloud is a Managed Security Service Provider (MSSP), not a general-purpose MSP. We focus exclusively on cybersecurity — we don’t provide helpdesk support, RMM tools, or manage your printers. We work alongside your existing IT team or MSP to add a dedicated security layer 

The simplicity of this approach depends on multiple services included with Microsoft 365 Business Premium, including Entra ID/Conditional Access, Defender for Office 365, Defender for Endpoint, Intune, Autopilot, and Purview. Many of these tools don't have an analogue in Google Workspace, but everything we've discussed here is possible with third-party tools.

We are developing packages for Google Workspace environments. Contact us to be notified when available. 

Microsoft 365 Business Premium is a licensing plan from Microsoft that includes email, Office apps, and built-in security and device management tools like Microsoft Defender, Intune, and Conditional Access.

We build our security services on top of these capabilities, so Business Premium (or an equivalent Microsoft 365 license) is required to fully implement and manage the protections included in our plans.

If you already have Microsoft 365, we’ll review your current licensing and let you know if anything needs to be upgraded. If not, we can guide you through selecting and setting up the right plan.

Each tier builds on the last, adding more depth, automation, and support as your security needs grow.

• Standard provides foundational protection, including threat detection, secure configuration, backup, and user awareness training.
• Advanced expands on this with longer data retention, faster backups, deeper threat investigation, and enhanced compliance support.
• Premium delivers a fully managed security experience with automated response, advanced data protection, strategic advisory, and priority incident support.

Our service is designed for businesses with 50–300 employees. We have a monthly minimum that ensures every client receives the attention and resources their security program requires. For smaller teams, contact us to discuss options.

Our services are billed on a per-user, per-month basis, so your costs scale with your team as you grow.

• Monthly Subscription:
  You’re billed monthly based on the number of users covered under your plan.
• Microsoft 365 Licensing:
  Microsoft 365 (such as Business Premium) is billed separately, either through us or your existing provider.
• One-Time Onboarding:
  There is a one-time onboarding fee to set up and configure your environment properly.
• Flexible Terms:
  We do not require long-term contracts, so you have the flexibility to adjust as your needs change.

Yes — this is one of the most common reasons clients come to us. Our security controls directly address the requirements insurers look for: MFA, endpoint detection, email security, backup, and monitoring. Depending on your tier, we provide everything from a compliance checklist (Standard) to full application support with evidence packages (Premium).

If a security incident occurs, we follow predefined response playbooks to quickly investigate, contain, and remediate the threat.

• Detection & Triage:
  Alerts are reviewed and validated to determine severity and impact.
• Response & Containment:
  We take action based on the situation, which may include isolating devices, securing accounts, or blocking malicious activity.
• Escalation & Communication:
  You’re notified with clear guidance, and we escalate as needed to ensure the issue is fully addressed.
• Recovery & Recommendations:
  After containment, we help restore normal operations and provide recommendations to prevent recurrence.

Advanced and Premium tiers include deeper investigation capabilities, while Premium clients receive priority response and proactive threat hunting for faster and more comprehensive incident handling.

Essentials has a 10-user minimum. If your team is smaller, your monthly fee is based on 10 users, $240. Standard and Complete have a 25-user minimum, so a smaller team on either of those pays the 25-user rate, $800 for Standard or $975 for Complete. This is covered during your consultation and shown clearly on your statement of work before you sign.

Blumira handles continuous monitoring within its defined capabilities at every tier. Essentials and Standard include detection and alerting; Complete adds automated threat response. We do not operate a staffed 24/7 security operations center, and we act on findings during business hours unless an automated playbook has already responded or an hourly rate has been accepted.