Endpoint Security Service

Multi-Layered Security

When you close your office at the end of the day, do you lock the doors? Maybe you set an intruder alarm? Or maybe you even have a security guard monitoring CCTV or patrolling outside the building?

Your approach to Cyber Security should be no different. While there are no guarantees that any individual threat will be prevented by an individual security component, you can significantly reduce your exposure to risk by adopting a layered approach to your endpoint security, such as what Renaissance offer with our Endpoint Security Service.

It is widely acknowledged and accepted that relying on a single Endpoint Cyber Security product is no longer sufficient to protect an organisation’s IT assets, and that a layered approach is far more likely to fend-off any given cyber threat successfully. That’s why our Endpoint Security Service is built on a combination of several integrated component solutions. While each component has unique functionalities, there is also a very deliberate overlap between them; this is where the overall service provides multiple layers of protection and helps to ensure your assets are as safe as possible.

Multi-layered Protection

Security Operations Centre (SOC)

At the heart of our Endpoint Security solution is our Security Operations Centre (SOC); a cyber security platform which ingests data from computer and server event logs, Antivirus components, network activity, and more.

Our dedicated cyber security analysts analyse this data in near real-time, monitoring and protecting your systems against an ever-evolving list of cyber security threats.

Operating 24×7, our SOC monitors your systems round-the-clock and, in the event of a security incident, can take remote action to clean or remove threats, or isolate compromised computers from the rest of your network.

Endpoint Detection & Response (EDR)

Endpoint detection and response (EDR) tracks and stores system behaviours, continuously analysing them to detect anything unusual. This helps our security team quickly identify, investigate, report, and respond to malware, ransomware, and other malicious activities that might slip past traditional Antivirus software.

The system continuously monitors endpoints, providing real-time alerts and automated responses to potential threats. This helps in quickly identifying and mitigating risks before they can cause significant damage, thus minimising downtime and operational disruption to your organisation.

Antivirus/Antimalware (AV)

Antivirus (AV) tools are still essential for keeping your devices safe from everyday cyber threats. Working on a “dictionary” of known threats, they detect, quarantine, or remove malicious files from your endpoints. Renaissance offer three options for the Antivirus component of our Endpoint Security Service:

Option 1: Windows Defender (Management & Monitoring)
Windows Defender offers excellent protection, but has limited native remote manageability and monitoring functionality. Both the EDR and SOC components of our Endpoint Security Service are designed to work alongside and integrate with it, turning it into a centrally managed and monitored component of our Endpoint Security Service.

Option 2: Datto AV
This is primarily used as our alternative Antivirus solution for non-Windows computers (or those where Windows Defender is not an appropriate solution.) Offering comparable levels of protection, Datto AV is based on a mature detection engine and, like Windows Defender, integrates fully with our SOC and EDR services, allowing us to ensure total Endpoint Security on just about any computer.

Option 3: Microsoft Defender for Business/Endpoint
Our EDR and SOC components integrates seamlessly with Microsoft Defender for Business/Endpoint, pulling metrics and threat data directly from the endpoints, and enhancing it with data from your Microsoft 365 tenant. This is the “top-tier” solution used by computers on our Premium Service Plan.