Frequently asked questions

The monthly price per endpoint includes everything needed to keep your devices protected: software licensing, managed deployment, configuration, continuous threat monitoring and a monthly security report. Human-led 24/7 MDR is included in the EDR + MDR plan.

Email security and identity protection (EDR and EDR + MDR) cover one mailbox and one user identity per protected endpoint. Additional mailboxes or identities are quoted separately.

There are no hidden setup fees or additional charges. The price shown is the price you pay, per device, every month.

Prices on the website are displayed in EUR per device per month. Invoicing depends on your location:

• Clients in Romania are invoiced in RON, calculated at the BNR exchange rate on the invoice date.
• Clients in the EU (outside Romania) are invoiced directly in EUR.

Invoices are issued on the 28th of each month. Payment is due within 15 calendar days, by bank transfer or card payment.

Yes. The agreement is month-to-month with no long-term commitment. You can terminate at any time with 30 calendar days' written notice. There are no cancellation fees.

The minimum is 5 endpoints on every plan. You can add or remove devices at any time, and your invoice will be adjusted accordingly from the following month.

Depending on the plan selected, protection is available for:

• Windows (workstations and servers)
• macOS
• Linux (servers)
• Android, iOS and Chromebook (Mobile Security add-on)

The ThreatDown protection agent is lightweight and designed for minimal system impact. It runs quietly in the background and is optimised to avoid interfering with daily work. In most environments, users do not notice it is running.

Running two antivirus solutions simultaneously on the same device is not recommended, as they may conflict with each other and reduce system performance. As part of the onboarding process, we will advise on the best approach for your environment.

No security product can guarantee 100% protection, and we will never claim otherwise. What we do provide is continuous automated monitoring, rapid detection and remediation, and a managed service that keeps your protection correctly configured. On the EDR + MDR plan, human-led 24/7 MDR analysts also actively hunt for and contain threats.

Our service significantly reduces your attack surface and response time, which are the two factors that matter most in limiting the impact of a security incident.

Four features of the EDR and EDR + MDR plans are included in the price but activated on request, because they depend on your decisions:

• Email security needs your Microsoft 365 or Google Workspace tenant and an administrator's consent for the API connection.
• DNS filtering and web content control: you decide which websites and website categories are blocked.
• Application block: you decide which applications are not allowed to run on your devices.
• Windows firewall management: the firewall rules are set up according to your network and the applications you use.

They are included in the plan and activated on request, configured with you according to your rules. Tell us when you want them switched on: we agree the rules with you, configure everything according to them and adjust the rules whenever your needs change.

Email security (EDR and EDR + MDR plans) is delivered through the ThreatDown platform and powered by IRONSCALES. It protects against phishing, business email compromise (BEC) and account takeover.

It connects by API directly to your Microsoft 365 or Google Workspace tenant. There is no MX record change and nothing to install in Outlook or any other mail client: messages are analysed and handled directly in the mailboxes.

To activate it, you need a Microsoft 365 or Google Workspace tenant, and an administrator of that tenant grants consent for the API connection. Email security is included in the plan and activated on request, together with you. It covers one mailbox per protected endpoint; additional mailboxes are quoted separately.

Yes, the service is GDPR-compliant. Every client contract includes a data processing agreement that sets out what data we process, for what purpose and under which safeguards.

The service relies on specialised providers: ThreatDown (Malwarebytes), IRONSCALES and Cloudflare. Some of them may process data outside the European Economic Area, for example in the United States, under appropriate safeguards such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. You will find the details in our Privacy Policy.

Yes. We offer a free 14-day trial, with no card required and no obligation. We deploy protection on a selection of your devices and, at the end of the trial, you receive a report of what was found and blocked.

After that, you decide: continue month-to-month, or simply stop.

For most organisations, devices are fully protected within 24 hours of contract signature. The actual agent deployment typically takes under 2 hours for up to 50 devices. Our team handles the entire process remotely.

No. This service is specifically designed for organisations without a dedicated security team. We handle deployment, configuration, monitoring, and response. You only need to provide basic access to your devices during the initial setup.

You receive a monthly security posture report by email, detailing every threat detected, blocked, and resolved during the period. The report is written in plain language, without technical jargon, so it can be shared with management or used for internal compliance purposes.

Level 1 support covers: installation, initial configuration, connectivity issues, general service usage, and identification of common problems. Support is provided by email in English, Romanian, and Hungarian.

More complex technical issues (platform malfunctions, advanced security incidents) are escalated directly to the ThreatDown/Malwarebytes team through our MSP partnership.

Level 1 support is available Monday to Thursday, 09:00 to 17:00. Outside of these hours, your devices stay protected and monitored automatically: threats are blocked and remediated by the platform without waiting for a person.

Human-led 24/7/365 monitoring and response (MDR) is included in the EDR + MDR plan.

On the EDR + MDR plan, our team acts immediately: isolate the affected device, contain the threat, and remediate, with an incident response SLA under 2 hours. For confirmed security incidents, you receive a full report within 24 hours, with a clear explanation of what happened and what was done.

On the EDR plan, threats are detected and remediated automatically, with 7-day ransomware rollback and device isolation available. Our team will notify you and provide guidance on next steps. If you need human-led 24/7 response, upgrading to EDR + MDR takes effect from the next billing period.

On the Endpoint Protection plan, threats are blocked and remediated automatically and are covered in your monthly security report.

A security incident is a confirmed attack or compromise that requires investigation and response, for example active ransomware, a compromised account, an attacker on your network or a successful intrusion.

Routine detections handled automatically are not incidents: blocked malware, quarantined files, blocked brute-force or RDP attempts and blocked phishing sites. They are summarised in your monthly security report.

The full report within 24 hours (EDR + MDR plan) applies only to confirmed security incidents. If your organisation falls under NIS2, the report helps you prepare the notification to the competent national authority; the notification itself remains your organisation's responsibility. For audits, policies and governance, we can introduce you to our compliance partner VOIGHT.