Conflux Cloud Simple Security
Stronger security, easier cyber insurance, built on Microsoft 365.
Built for business and technology leaders answer common questions:
-
Is my company's data safe in the cloud?
-
Are we protected from modern cybersecurity threats?
-
How do I meet Cybersecurity Insurance requirements?
-
What do all these questions on vendor security questionnaires mean?
-
How do I comply with Ohio's Safe Harbor law and/or HB96?
How we Protect your Business
Building on Microsoft 365 Business Premium
Microsoft 365 Business Premium includes world-class security tools, and we help you get the most out of your investment. We start by leveraging the following included tools:
- Entra Conditional Access Policies - control who has access to your data, on which device, and from where. Conditional Access Policies tailored to your business help keep your data safe while making sure people aren't constantly interrupted by unnecessary security prompts.
- Defender for Microsoft 365 - Scans emails for viruses, ransomware, and other threats in both links and attachments, blocks spam, protects against impersonation & phishing, and more with protection extending to Teams and other Office apps.
- Microsoft Defender for Endpoint - Next-generation antivirus that detects and protects against modern threats, manages and reduces attack surface, and applies content filtering policies on your Windows and Mac computers.
- Intune - Manage Windows and Mac computers, iOS and Android mobile devices, deploy apps, and deliver security configurations natively from Microsoft 365.
- Purview - Identify, protect, and limit the sharing of sensitive information while ensuring business records are created and retained.
Strategically Covering Gaps
M365 Business Premium lays a solid foundation for protecting your business, and our packages help you cover gaps with solutions designed for small businesses.
- Cloud Security Posture Management - We perform and deliver regular reports against baselines that are backed by industry leaders such as Microsoft, NIST, and the Center for Internet Security.
- SIEM/XDR - Monitoring and threat response solutions for SMBs regardless of their needs and budget. From our Essentials tier focused on Microsoft 365, to Standard, adding full SIEM and EDR capabilities, and the Advanced tier, completing the package with full XDR capabilities that can automatically shut down threats on your endpoints and Microsoft 365 environment.
- Secure DNS - Configure public DNS records to ensure your email gets delivered and your domain can't be spoofed by impostors. Enhanced reporting proactively identifies mail delivery issues for quick resolution. SPF flattening allows for complex sender frameworks that meet any need.
- Security/Compliance Training & Attack Simulation - Training is required by most cybersecurity insurance, compliance frameworks, and also strengthens your first and best line of defense, your people. We include training on cybersecurity, HIPAA, PCI DSS, GDPR, OWASP TOP 10, and others. The training modules are short, most less than 60 seconds, and lighthearted, with phishing simulations that lead to teachable moments - not punishments.
- Data Backup - Microsoft does not back up your data in Microsoft 365. This is your role under the shared responsibility model, and one of the most challenging problems that many organizations face. We provide a cloud-native tool to back up your business data without deploying any infrastructure, so you can stay focused on running your business rather than managing servers or appliances. Data is stored securely in a SOC 2 Type 2 data center and can be restored at a moment's notice while protecting you from ransomware, accidental deletion, insider threats, account compromise, and other modern threats.
Plans and pricing
We help our customers prepare for Cyber Security Insurance requirements, vendor cybersecurity questionnaires, as well as NIST CSF and CIS Security Controls to meet a wide array of compliance requirements.
Essentials
$8.50/month per seat
Included in all packages:
-
Semi-annual Microsoft 365 Security Assessment
-
Monitor Microsoft 365 to defend against threats
-
Secure 2 email domains with managed DMARC
-
30-day Log retention
-
Microsoft 365 Data backup with 1-year retention
-
Security Awareness Training & Phishing Simulation
Standard
$23.00/month per seat
Everything in Essentials plus:
-
Quarterly Microsoft 365 Security Assessments with trend and drift detection
-
Monitor additional services & endpoints
-
Constant visibility with 24x7 SOC
-
Secure 4 domains and adds managed SPF
-
1-year Log retention
-
7-year Microsoft 365 backup retention
Advanced
$29.00/month per seat
Everything in Standard plus:
-
Monthly Microsoft 365 Security Assessments
-
Proactively block threats with automated actions
-
Fully managed domain security with managed DKIM and reputation monitoring
-
Unlimited Microsoft 365 Backup Retention
One-time setup and monthly management fees apply
Microsoft 365 Business Premium licensing is required but not included in stated pricing
Conflux can provide Microsoft licensing at a discount when bundled with Simple Security
Add-ons & Supplemental Services
For clients with specific requirements, we offer a variety of add-ons to our core security services.
-
Advanced Intune Setup
Efficiently deploy business apps and policies on Windows, Mac, iOS, and Android devices to meet internal and regulatory requirements.
Not available with Essentials
-
Extra Log Retention
Need to keep logs for more than 1 year? We can provide custom retention to meet your requirements.
Not available with Essentials
-
Additional Protected Domains
Cover as many domains as you need to protect all your lines of business from phishing and impersonation by bad actors.
-
Autopilot Deployment
Seamlessly provision Windows PCs with zero-touch user experience integrated with your existing OEM or VAR's procurement processes.
Requires Advanced Intune Setup
-
Purview Deployment
Meet advanced DLP, retention, and compliance requirements with a custom Microsoft Purview deployment.
Not available with Essentials
-
Collaboration Enablement
Set up Teams, OneDrive, and SharePoint to supercharge productivity and integrate with business workflows for world-class collaboration.
Smaller business?
If you are just getting started or have 1-5 people working at your company, we have special packages and pricing just for you.
Frequently asked questions
What tools are you using
The tools we use may change over time as problems and solutions evolve. We will always strive to provide the best quality and most cost-effective solutions for our clients. At the time of writing, we use the following:
- Cloud Security Posture Management: CloudCapsule
- SIEM/XDR - Blumira
- Domain/DNS Management - EasyDMARC
- Security Awareness Training & Phishing Simulation - Phin Security
- Data Backup - VMOBackup from Managecast
Do you support alternate tools
We extensively vetted tools that solve common problems efficiently and simply. If you have specialized needs, we can provide and support a variety of SIEM, EDR, and XDR tools to meet these requirements through custom packages.
Couldn't I do all this myself
Absolutely! We've even listed the tools we use for full transparency. Our value lies in the following key benefits:
- Simplified Billing - We provide all licenses and services under a single vendor and invoice.
- Co-managed solution - You get full visibility and access to the tools because we feel that is your right. We empower your staff to remain the experts your business depends on, while serving as a trusted advisor and partner for excellence in service delivery.
- Vetted integrations - The hard work of figuring out which solutions work together, how to integrate them, and manage them effectively is already done for you.
Is Conflux Cloud a Managed Service Provider (MSP)
No, Conflux Cloud is not an MSP. A key distinction is that we do not provide Remote Monitoring and Management (RMM) tools, ticketing systems, or focus on day-to-day operations. We're focused on managing risk and boosting security, but we'll help with minor/common issues along the way.
What if we use Google Workspace?
The simplicity of this approach depends on multiple services included with Microsoft 365 Business Premium, including Entra ID/Conditional Access, Defender for Office 365, Defender for Endpoint, Intune, Autopilot, and Purview. Many of these tools don't have an analogue in Google Workspace, but everything we've discussed here is possible with third-party tools.
If you're interested in learning more and having a custom solution built for you, please contact us.