Security and compliance

We cover everything from NIS2 compliance through to 24/7 monitoring and data recovery, with seven services and one team to talk to about all of them.

24/7 monitoring and response
7 global SOC locations
500+ cybersecurity professionals
Sophos Platinum authorised partner
1000+ active clients across 4 continents

Most companies already know they have a gap somewhere, and far fewer have managed to close it.

The gap usually shows up in one of three places.
52%

of SMBs acknowledge a lack of necessary in-house cybersecurity skills, with 57% missing dedicated cybersecurity professionals.

79%

express their concerns over remote workplace security vulnerabilities and would like to make improvements.

86%

prioritize cybersecurity among their organization’s top five concerns, indicating a significant awareness-to-action gap.

So where are you right now?

Pick the one that sounds like your week, and we will take you straight to the answer.

“We have to prove NIS2 compliance.”

NIS2 compliance, penetration testing

See how compliance works

“Our workplaces and email are exposed.”

BTT Armour, data security

See how we protect them

“Nobody is watching out of hours.”

SOC service, BTT shield

See who watches instead

“We could not restore fast enough.”

BTT Vault, continuity plans

See the recovery options

Finding out where you actually stand

You cannot fix what nobody has measured. Whether you need to prove NIS2 compliance or find out whether your defences hold, you finish with a written action plan that says what to fix.
NIS2 compliance

Prove compliance before you are asked to

Applies to companies with more than 50 employees or annual turnover above EUR 10 million.
  • Risk analysis and a security policy that matches your business
  • Business continuity and incident response planning
  • Supply chain, cryptography, MFA and access control
  • Legal documentation review powered by DocuGuru

You leave with a list of the gaps and a two step plan, starting with the audit and moving on to implementation and maintenance. Engineers and cybersecurity specialists run the audit itself.

Get the NIS2 assessment →

BTT Armour already covers around 80% of the NIS2 requirements.

Penetration testing

Find out if your defences hold under a real attack

Skaylink analyses your infrastructure while Syntricks attacks it with real adversary tradecraft.
  • Perimeter, firewall and VPN configuration analysis
  • Red Team operations across the full attack lifecycle
  • Web, mobile and desktop application testing
  • Social engineering: phishing, vishing and smishing

You leave with every vulnerability scored against CVSS, along with a verification procedure your own team can re-run.

Book a security audit →

Both teams document their techniques and train your specialists to repeat the tests.

Would you rather start on your own?

Microsoft’s Zero Trust test assesses your security level free of charge and comes back with recommended next steps. It runs on Microsoft’s own site, so nothing reaches us until you want it to.

Close the two gaps that get exploited first

Attackers go for the workplace first, because that is where your people log in every day. BTT Armour protects the workplace and the identities behind it, and Data Security protects the data those identities reach.

BTT Armour, managed security for the workplace

Which plan you can take depends on the Microsoft 365 plan you already have or plan to buy.
Basic

Hands email, users, identities and file sharing over to your IT partner.

Premium

A multi-layered model covering identity, device compliance, mail protection and data loss prevention, and it includes everything in Basic.

User and group administration included included
Email and calendar management included included
File storage and document sharing management included included
Security and compliance support included included
Reporting on the current security status included included
PC and mobile device management not in this plan included
Advanced threat protection management not in this plan included
Assessment of the company’s M365 security status not in this plan included
Enhancing and maintaining the security score not in this plan included
Zero trust policy not in this plan included
Microsoft 365 plan required M365 Basic, M365 Standard, O365 E1 or up M365 Premium, or M365 Basic plus Enterprise Mobility + Security E3
Get a Basic quote → Get a Premium quote →

Data security and business continuity

How much downtime can your business absorb? Your answer picks the plan.

Zero-Risk

No tolerance at all
Recover from live site images, continuous replicas and backups. Cloud infrastructure in a secondary data centre or public Cloud, so the business never stops.

Low-Risk

A couple of hours is survivable
Data and applications restored in real time from the latest copy, or any earlier one, taken on a schedule.

Moderate-Risk

No need for round-the-clock access
Virtual assets protected by scheduled backups, everything safe and reachable when you need it.
Need one piece rather than a whole plan? M365 backups, immutable copies on WORM, on-site and off-site copies, restore into the BTT Cloud data centre and DRaaS are each available on their own.

The people probing your infrastructure never stop, so the people defending it should not either

Attackers do not keep office hours. BTT Armour SOC watches inside your infrastructure and reacts around the clock, and BTT shield watches everything of yours that the internet can already see.

BTT Armour SOC, what happens when something fires

Detect

Monitoring runs across endpoints and cloud around the clock, using XDR together with custom SIEM and SOAR correlation.

Contain

The response process starts straight away, and the threat gets neutralised rather than left sitting in a queue.

Root cause

Analysts then establish how it got in and what it touched, working from indicators of compromise and AI analysis.

Report

You get the corrective actions and the conclusions in writing, so that the same route does not work a second time.

7 global SOC locations
500+ cybersecurity professionals
24/7 always on
Monthly fee predictable, no surprise invoices
Ask the SOC team a question →

Recognised by IDC, Gartner Peer Insights, G2, MITRE Engenuity and Frost & Sullivan.

BTT shield, the version of you that attackers already have

External attack surface monitoring built on Entryscope, which cross-references public DNS records, breach databases and social sources into a single inventory.
yourcompany.com Scan
Leaked credentials 169

across 6 breach databases

Infostealer leaks 13

plus 4 active session cookies

Employees enumerated 1,284

847 email addresses harvested

Assets discovered 36

domains and 12 subdomains, 16 hosts across 4 ISPs

Scan your own domain →

It takes about thirty minutes, with nothing to prepare and nothing to commit to. The figures shown are anonymised from a real assessment.

Getting back up is the part almost nobody rehearses

A backup is worth exactly as much as the speed you can restore from it. BTT Vault keeps your copies in Frankfurt, and the price is here rather than behind a quote.
BTT Vault S1

Everything a small business needs to get started with backup management.

From 126 EUR/month
Choose the S1 plan →
BTT Vault S2

More power and storage for scaling companies.

From 252 EUR/month
Choose the S2 plan →
BTT Vault S3

Maximum protection for large organizations

From 378 EUR/month
Choose the S3 plan →
Storage volume Up to 1 TB storage Up to 2 TB storage Up to 3 TB storage
Virtual machines protected Up to 10 Up to 20 Up to 30
Storage type Hot storage Hot storage Hot storage
Immutable backups (WORM) Included Included Included
Data upload and download fees None None None
Backup location Germany Germany Germany
Setup and configuration Free Free Free
If you need more than 3 TB or run more than 30 virtual machines, we will build a solution around your requirements.
Discuss a custom plan →

And then the plan for actually getting back up

Taking the backup is the straightforward part. Getting back up is agreed and rehearsed with you in advance, so that nobody has to improvise on the day.

M365 backups

SharePoint Online, OneDrive, Exchange Online and Teams.

Immutable copies

WORM storage that nobody can change, delete or overwrite, including an administrator.

On-site backup

Kept on the same site as the infrastructure, so restores are fast and need no internet connection.

Off-site backup

Kept in a physically separate location, which is what covers you for fire, flood, break-ins and ransomware.

DRaaS

Your full infrastructure mirrored in the cloud, with automatic failover and real-time sync.

Copies live in Equinix Frankfurt, on SOC 2 and ISO 27001 certified infrastructure.

Off-site storage in another country is what NIS2 and the Lithuanian cybersecurity law recommend, and it is up to 80% cheaper than the same volume on AWS, Azure or Google S3.

The six things people ask us before they write

If yours is not here, the form below reaches a person.
We already have antivirus. Is that not enough?

Antivirus is one of the layers inside the SOC package, and alongside it you get XDR including EDR, custom SIEM and SOAR correlation, threat hunting against indicators of compromise, and a team that neutralises whatever it finds instead of raising a ticket about it.

Are we big enough for NIS2 to apply to us?
What does it cost?
Will a test or a scan disrupt our people?
We already have an IT team. Does this replace them?
Where would our data actually sit?

Still not sure which of these you need?

Describe the situation in a few words and we will come back with a concrete recommendation and a first step, on a thirty minute call.
  • We reply within one business day
  • Engineers and cybersecurity specialists run the audit itself
  • Prefer to start alone? Microsoft’s Zero Trust test is free of charge
TRUSTED BY
ISO 27001 Microsoft Sophos Platinum

We use your details only to reply to this inquiry.

We reply within one business day.

Cyber threats don’t sleep. Neither should your defenses.

Tell us where you are and we will come back with a concrete first step within one business day. What happens after that is up to you.
Book a security assessment →
Book a 30-min call →
Skaylink
Privacy Policy

We use cookies on this website to ensure smooth website performance and improve your browsing experience. Cookies help us save your preferences, recognize returning visitors, and analyze which parts of the website are most relevant to you.

Privacy Policy