Essentials
$45from / endpoint / month
- MDR
- Email protection
- Encryption
- Monthly security report
- Business-hours local support
MSSP Services
Managed Security Services with Compliance Evidence
Operate controls and produce evidence that supports compliance over time.
Operate controlsProduce evidenceBuilt for real operations
Who it’s for
Small regulated teams that need security to keep working after the project ends.
Financial services
Tax, accounting, mortgage, auto-finance and money-services businesses covered by the FTC Safeguards Rule.
Healthcare & nonprofits
Healthcare providers, behavioral-health organizations and nonprofits that handle electronic protected health information.
Defense & lean IT teams
Small defense subcontractors handling FCI or CUI, plus organizations with an IT provider but no dedicated security team.
Why it matters
Regulators expect safeguards that operate—and proof.
FTC Safeguards Rule
Covered organizations must monitor and log authorized-user activity, test or continuously monitor safeguards, and oversee service providers.
HIPAA Security Rule
Covered organizations need processes for reviewing system activity, responding to security incidents, and maintaining retrievable backups of electronic protected health information.
CMMC Level 2
Security tools can become Security Protection Assets within the assessment scope. Logging, incident response and system monitoring are part of the underlying security requirements.
What’s included
Security operations and evidence, in one service.
Your plan and scope determine exactly what is deployed. Every SafeGuard 360 plan includes managed detection and response, email protection, encryption, a monthly security report, and support from our local team during business hours.
- Monitoring & response. 24/7/365 SOC monitoring and response on Plus and Elite; MDR with business-hours RebootTwice support on Essentials.
- Endpoint & device protection. MDR on all plans; EDR/XDR, remote monitoring and patching on Plus and Elite.
- Email, identity & cloud. Phishing protection on all plans; dark-web monitoring, identity protection and cloud security on Plus and Elite.
- Network & data protection. Network detection and monitored backup on Plus and Elite; Zero Trust Network Access on Elite.
- Training & risk. Security awareness training on Elite; vulnerability management and mobile-device management available as add-ons.
- Evidence reporting. Records and reporting designed to support examiners, insurers and auditors.
Our security stack
Proven tools, matched to your environment.
Your plan and scope set exactly what’s deployed. These are tools we use—not a claim that every client receives every platform.
Endpoint & operations
N-able N-sight RMM, Microsoft Defender for Endpoint, Huntress Managed EDR, Blackpoint Cyber MDR, and Sophos where appropriate.
Inventory • patching • threat detection • response recordsIdentity, email & cloud
Huntress, Blackpoint Cyber and Sophos capabilities for identity threat detection, email protection, cloud monitoring and dark-web alerts.
Access • email threats • account takeover • cloud evidenceNetwork & Zero Trust
Network detection capabilities and Sophos ZTNA where included in scope.
Network visibility • controlled access • monitoring recordsEncryption & backup
Sophos Central Device Encryption for BitLocker/FileVault management and MSP360 Managed Backup with immutable Wasabi Object Lock storage.
Encryption status • recovery keys • backup and restore evidencePlans & pricing
SafeGuard 360 cybersecurity protection plans.
Choose the operating level that fits your environment. Plus and Elite add 24/7/365 SOC monitoring and response; Essentials provides MDR without SOC services.
24/7 SOC
Plus
$85from / endpoint / month
- Everything in Essentials
- 24/7/365 SOC monitoring & response
- EDR/XDR, RMM & patching
- NDR, ITDR & cloud security
- Dark-web monitoring
- Backup & restore testing
Elite
$100from / endpoint / month
- Everything in Plus
- Security awareness training
- Zero Trust Network Access
- Expanded protection for higher-risk environments
Actual pricing varies with scope, regulatory requirements, technology environment, endpoints, locations, storage, and support needs. SIEM, MDM, vulnerability scanning, penetration testing, on-site work, projects, expanded incident response, and compliance programs may be separately scoped.
How it works
A clear path from first look to steady operations.
1
Compliance Snapshot
A free 30-minute first look at your framework, environment and biggest gaps.
2
Discovery & scope
We review users, devices, cloud apps and locations, then confirm scope and pricing.
3
Implementation
We deploy the agreed controls, typically in 5–7 business days.
4
Testing & validation
Controls are verified and corrective actions are documented.
5
Ongoing operations
We monitor, respond, remediate, report monthly and support periodic reviews.
What you receive
Proof that your safeguards are operating.
Defined scope
A documented service scope and asset list so responsibilities and coverage are clear.
Monthly reporting
A plain-English security report, plus incident, remediation and applicable scan records.
Compliance evidence
Operational evidence that can support FTC Safeguards, HIPAA or CMMC readiness, based on your applicable framework.
Why RebootTwice
Security operations built by a compliance-focused team.
Compliance + operations
Our compliance work defines the evidence your program needs; managed security helps produce it over time.
Technical & audit depth
Our team brings experience across cloud, Zero Trust, SIEM, Microsoft security, governance, risk and compliance.
Practical for small teams
We build around real staffing, real workflows and the systems you already depend on—not an enterprise blueprint scaled down after the fact.
Frequently asked questions
Managed security, answered plainly.
What’s the difference between an MSP and an MSSP?
An MSP primarily keeps IT systems running. An MSSP focuses on protecting systems, detecting and responding to threats, and documenting security operations. RebootTwice can work alongside an existing IT provider.
We already have an IT provider. Do we have to switch?
No. Your provider can continue day-to-day IT while RebootTwice handles the agreed security responsibilities, with roles defined in writing.
What do you monitor?
Depending on plan and add-ons: endpoints, Microsoft 365, email, identities, logs, network activity, mobile devices and backups. Plus and Elite include 24/7/365 SOC monitoring and response.
How fast do you respond?
Plus and Elite include contractual response commitments defined in the signed agreement, including a 30-minute response for confirmed critical incidents. Essentials is supported during business hours on a best-effort basis.
Do you offer penetration testing?
Yes, priced by scope. The FTC Safeguards Rule requires continuous monitoring or, absent effective continuous monitoring, annual penetration testing and vulnerability assessments at least every six months for covered systems subject to that provision.
Does managed security make us compliant with FTC Safeguards, HIPAA or CMMC?
No service does that by itself. Compliance also depends on risk assessment, policies, governance, vendor oversight and the way your organization operates. RebootTwice provides security operations, assessment, readiness and documentation support—not certification.
Will you sign a Business Associate Agreement?
Yes. For HIPAA-covered clients where RebootTwice handles ePHI as a business associate, we sign a BAA as part of the engagement.
Is SafeguardNero your monitoring tool?
No. SafeguardNero is RebootTwice’s compliance assessment and readiness platform. Monitoring, detection and response are delivered through the security tools and services in your managed-security scope.
No provider can prevent every attack. Plus and Elite response commitments are governed by the signed agreement; Essentials response is best effort. General educational information only; not legal advice. Requirements change and depend on your facts, and your signed agreement controls over this website summary.
Ready to move forward?
Start with a free 30-minute Compliance Snapshot, or talk through your environment with our team.