Services
One security baseline. Three depths of service.
Every package sits on the same non-negotiable security baseline. Higher packages add response speed, security depth, continuity, and strategic governance. Depth of service, not size of client.
ATG Foundation
The responsible baseline
Standardized organizations that want professional management and a real security floor without the governance overhead.
- Response
- Same business day
- Reviews
- Annual security review
- Detection & response
- Endpoint detection & response included
- Awareness training
- Annual training + phishing simulation
- Incident response
- Standard plan, annually reviewed
ATG Secure
Proactive security and governance
Organizations with compliance pressure, client data obligations, or a low tolerance for downtime.
- Response
- 4 business hours
- Reviews
- Quarterly reviews + annual security review
- Detection & response
- EDR with enhanced tuning and review
- Awareness training
- Quarterly managed program
- Incident response
- Customized plan
ATG Resilient
Continuity, around-the-clock depth, and strategic rigor
Business-critical, regulated, or multi-site operations where hours of downtime are measured in real money.
- Response
- 2 hours + defined extended window
- Reviews
- Monthly reviews + executive business reviews
- Detection & response
- 24x7 managed detection & response included
- Awareness training
- Quarterly + targeted remediation
- Incident response
- Living plan + annual tabletop exercise
Pricing is provided on request following a discovery conversation.
Scope depends on your environment and what the assessment finds. We quote what we can stand behind, not a number pulled from a pricing page.
The full catalog
What’s in each package, service by service.
Support+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| Help deskResponsive support from a team that knows your environment. | Same-business-day response | 4-business-hour response | 2-hour response + extended window |
Management+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| Monitoring, management & inventoryContinuous health monitoring and lifecycle tracking for every managed device. | Included | Included | Included |
| OS & third-party patchingAutomated security updates on defined timelines, tested before deployment. | Included | Included | Included |
Microsoft 365+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| Microsoft 365 administrationFull tenant administration: users, mail, Teams, SharePoint, and policy. | Core | Advanced | Advanced |
Security+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| MFA & Conditional AccessModern identity protection on every account, enforced from day one. | Required baseline | Enhanced policy set | Full policy set + just-in-time admin access |
| Endpoint management (Intune)Every covered device enrolled, encrypted, and policy-managed. | Core baseline | Enhanced policy set | Enhanced + lifecycle rigor |
| Endpoint detection & responseEnterprise-grade threat detection and containment on every endpoint. | Included | Enhanced tuning and review | MDR-integrated |
| Web / DNS filteringMalicious sites and phishing domains blocked before they load. | Included | Dedicated filtering platform | Dedicated filtering platform |
| Local admin password managementNo shared administrator passwords, anywhere, ever. | Included | Included | Included |
| Email securityLayered phishing, malware, and spoofing protection with enforced authentication. | Advanced protection | Advanced + enforced DMARC program | Premium: attack simulation + automated investigation |
| Security awareness trainingYour people trained and tested against the attacks that actually arrive. | Annual training + phishing simulation | Quarterly managed program | Quarterly + targeted remediation |
| Vulnerability managementWeaknesses found and remediated on a schedule, not after an incident. | Annual baseline review | Scheduled reviews | Reviews + internal and external scanning |
| 24x7 managed detection & responseAround-the-clock security operations watching identity, email, and endpoints. | Optional add-on | Optional add-on | Included |
Continuity+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| Microsoft 365 backupIndependent point-in-time backup of mail, files, and Teams. Native retention is not backup. | Required, licensed separately | Required, licensed separately | Required, licensed separately |
| Endpoint backupUser data protected so a lost or failed device is an errand, not an incident. | Cloud-first baseline; agent backup add-on | Agent backup included | Agent backup included |
| Business continuity planningRecovery objectives defined, documented, and tested. | Basic planning | Enhanced planning | Testing and recovery governance |
Governance+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| Incident response planningA documented, rehearsed plan for the worst day, before it happens. | Standard plan, annually reviewed | Customized plan | Living plan + annual tabletop exercise |
| Reviews & strategic governanceRegular reviews that keep technology aligned to the business, not the other way around. | Annual security review | Quarterly reviews + annual security review | Monthly reviews + executive business reviews |
| Compliance supportEvidence and advisory support for the frameworks your business answers to. | Evidence support | Advisory | Enhanced advisory + framework mapping |
Infrastructure+
| Service | Foundation | Secure | Resilient |
|---|---|---|---|
| Server managementFull lifecycle server care, priced per server. | Per-server add-on | Per-server add-on | Per-server add-on incl. recovery testing |
| Network device managementFirewalls, switches, and wireless managed, patched, and configuration-backed. | Per-device add-on | Per-device add-on | Per-device add-on |
Server management, network device management, and 24x7 MDR (on Foundation and Secure) are per-device add-ons, scoped during the assessment.
Professional services
Project work, scoped and delivered to the same standard.
Beyond ongoing management, we deliver defined projects: elective change like migrations, modernization, and network redesign. Every project is scoped after a discovery conversation and quoted as fixed-price or time-and-materials before work begins.
VoIP & telephony migrations
Phone systems moved to modern cloud voice platforms with number porting, call-flow design, and user training handled end to end.
Line-of-business application deployment
The applications your company actually runs on, deployed, integrated with Microsoft 365 and identity, and documented.
Network design & redesign
Secure networks built from scratch or rebuilt to standard: firewalls, segmentation, wireless, and documentation.
Cloud & Microsoft 365 migrations
Email, files, and workloads moved to the cloud deliberately: planned, staged, and validated, not lifted and hoped.
Server & infrastructure upgrades
End-of-life systems replaced on a schedule you control instead of a failure you don't.
Gap Report remediation projects
Findings from your assessment, quoted and fixed as defined projects with clear acceptance criteria.
Not sure which package fits?
That’s what the 15-minute call is for. We’ll tell you plainly, including if the answer is Foundation.
Book an Assessment