Our standards · Published openly
We run every environment to the same bar, and we put it in writing so you can hold us to it.
Most IT companies keep their "standards" vague on purpose. Ours are not. This is how we run what we touch, and what you can expect, every month, signed by the person who does the work.
— Orion Grimm, founder
Eight standards
The technical floor, non-negotiable.
MFA is enforced, not optional
Every account, every user, on email and remote access. No exceptions for "convenience," because the convenient account is the one that gets breached. This is the floor, in every contract.
Modern EDR on every endpoint
Real endpoint detection and response with human threat hunters (Huntress), not signature antivirus from a decade ago. Security is included in every managed agreement, never sold as an upsell.
Backups are tested by restoring them
A backup nobody has restored is a guess. We perform real test restores on a schedule and keep at least one copy isolated where ransomware cannot reach it.
Least privilege by default
People get the access their role needs and no more. Standard users do not run as local admins. The accounts that can do the most damage get the most protection.
Everything is documented
Your environment is documented end to end, in your own records, not locked in one engineer's head. If you ever leave, you get a clean hand-off. No hostage-taking.
Patching on a tested schedule
Operating-system and third-party updates applied within a managed window, because the vast majority of exploited vulnerabilities had a patch available for months.
We run best-in-class, not best-commission
We pick the right tool for your business, not the one that pays us the most. Microsoft and Google are both first-class. Vendor margins are disclosed.
Honest about what we are not
We are not a compliance certifier, a pen-test shop, or a federal-contract CMMC firm. When you need one of those, we say so and refer you to a specialist. We do not pretend.
And four promises
How it feels to be a client.
No call center
You reach a person who knows your environment, not a tier-one queue reading a script.
No emergency surcharge
For managed clients, a Saturday-night outage gets the same response as a Tuesday morning.
No price-hike ambushes
Your monthly figure is in writing. It changes when your device count does, not by surprise at renewal.
You own your environment
Your data, your accounts, your documentation. Always. A clean hand-off is part of the deal, even if you leave.
See how your current IT measures up.
The free 30-minute IT Health Check checks your environment against exactly these standards. You will know precisely where you stand, with no obligation.