Firewall posture, network segmentation, IDS/IPS and Active Directory hardening, built around the AWS and Azure landing zones we already manage for you. Configuration drift is detected continuously, not at quarterly review.
Four phases. The first month gets you to a baseline; the program after that keeps you ahead of it.
Stack inventory, control map, threat-model workshop. Two weeks to a documented baseline.
Quick-wins shipped immediately. Pen test runs in parallel. SOC onboarding starts.
24×7 monitoring live. Incident-response retainer active. Weekly hygiene reports.
Quarterly retests, tabletop exercises, compliance evidence rolling forward continuously.
Every capability below is delivered as part of one managed program, scoped to your business, executed by our partner network, and managed by your Katalor Security lead. One contract, one point of contact, one report.
Configuration review and continuous monitoring of your firewall rule base. Rule-sprawl audit, change-control workflow, and drift detection between intended and deployed policy.
Signature-based and behavior-based intrusion detection on your network perimeter and internal segments. Tuned to your environment, not a shipped default ruleset, with alerts routed to the SOC.
Validates that your segmentation actually segments. Tests east-west reachability between zones, dormant routes, and forgotten any-any rules. The gaps that show up in tabletop scenarios.
Posture-based admission control for managed and BYOD devices. Quarantines unknown endpoints, enforces patch and EDR baselines before granting network access.
AD hygiene audit: privileged-account sprawl, stale objects, GPO drift, Kerberos misconfigurations. Catches the conditions that turn a phishing click into a domain takeover.
End-to-end assessment of network architecture, controls, and monitoring. Identifies the gaps between what the diagram shows and what the topology actually allows.
Pulse Check covers the basics: external network scan, firewall posture spot-check, basic segmentation review. The Monthly Retainer adds continuous firewall change monitoring and quarterly network segmentation testing.
See small-business plans →For mid-market & enterpriseIn Project or Retained engagements, network security covers firewall management, IDS/IPS tuning, zero-trust architecture rollouts, Active Directory assessment, and continuous segmentation validation, including pre/post-change posture verification on every infrastructure release.
See engagement models →Schedule a 30-minute scope call with Katalor Security. We'll walk your stack, identify the top three exposures, and propose the right MSP tier. No cost.