Contact Us

MANAGED CYBERSECURITY SERVICES · CHICAGOLAND

Cybersecurity services in Chicago, watched around the clock and included on every plan.

Protection on every computer, a 24/7 security operations center behind it, and the proof that it is running whenever you or your insurer ask. Security is never an add-on on our Managed IT plans.

24/7 security operations center that can isolate a computer immediatelyCyber insurance applications filled in by usIncluded on every plan, never sold as an upgrade

IS THIS YOU?

Most companies are one renewal or one email away from finding the gap

These are the moments that bring companies to us. Each one is a question about security that somebody has to answer with evidence.

The cyber insurance renewal

The carrier now asks about multi-factor sign-in, endpoint detection, tested backups and staff training, and wants a yes it can rely on. A wrong answer can void the policy you are paying for.

The questionnaire from your biggest customer

A spreadsheet of security questions arrives from purchasing, with a deadline. Nobody in the office knows how to answer half of it, and the contract depends on it.

The tools nobody watches

Antivirus is installed, backups are set up, alerts go to an inbox. Installing a tool is not managing it, and nobody can say for sure that every computer is covered today.

The email that looked real

An invoice with new bank details, a sign-in page that looked right, a request from the owner that was not from the owner. Most breaches at companies your size start in an inbox.

WHAT IS INCLUDED

Layered protection, because any single control fails eventually

Every layer below is included in every Managed IT plan. On Co-Managed IT you can hand us the security piece on its own.

Endpoint protection and response

Every managed computer protected, and watched by analysts who can act on what they see.

  • Next-generation endpoint protection
  • Managed detection and response
  • Isolation of a compromised computer
  • Macs and Windows alike

24/7 security operations center

Security specialists watching day and night, so an attack at 2 AM does not wait until morning.

  • Monitoring around the clock
  • Triage and investigation
  • Alerts routed to our team as tickets
  • You are told without delay

Email security

Phishing, impersonation and fake invoices stopped before they reach the inbox.

  • Phishing and impersonation detection
  • Suspicious email checked on request
  • Domain and email security records
  • A report button for your team

Accounts and access

The sign-in is where most attacks start, so we lock it down and keep it that way.

  • Multi-factor sign-in enforced
  • No everyday admin rights on computers
  • Admin passwords kept in a secure vault
  • Departing staff shut off on time

Backup you can restore from

Your mail and files in Microsoft 365 or Google Workspace, backed up apart from the platform itself.

  • Mail, files, calendars and contacts
  • Retention independent of the platform
  • Restores tested and written down
  • A written recovery plan

Training and patching

People and software are the two things attackers count on being out of date.

  • Short security lessons for staff
  • Simulated phishing with results
  • Patching on a schedule, staged
  • DNS and network edge protection

PROOF IT IS RUNNING

Ask us to show you, and we will

You should not have to take a provider's word for it. In assessments we keep finding companies paying for security that was never installed, or that stopped reporting months ago.

Device by device

A list of every managed computer, the protection on it, when it last checked in and its patch status. A missing layer shows up as a gap.

In your reports

Patch and backup status in your regular reports, and security coverage reviewed at every business review.

Live on a call

On any call we can share a screen and show a computer's protection status in our consoles, right then.

Tested, not assumed

Backup restores are tested and documented, and phishing simulation results are reported to you.

IF SOMETHING HAPPENS

What we do in an incident, and what it costs

Our security operations center can isolate a compromised computer from the network immediately, without waiting for business hours. Here is the line between included and billed.

Billed separately Included in your plan
Extended forensic investigation by a specialist firm Detection, alerting and triage, 24/7
Legal and regulatory notification work Isolating the affected computers
Large-scale rebuild or recovery projects Investigating what happened and what was touched
Work on systems we do not manage Fixing the systems we manage, telling you without delay, and working with your insurer and counsel

Think you have been hacked and you are not a client? Call (847) 499-1500 and say it is urgent. Take the computer off the network, do not wipe it, and call your insurer's breach line first if you have one.

Compliance

We run the controls your auditor asks about

We are not a compliance auditor and we do not pretend to be one. We run the technical controls behind HIPAA, the FTC Safeguards Rule and your customers' questionnaires, and hand you the evidence when someone asks.

  • Access control, multi-factor sign-in and patch history you can report on.
  • Backup and restore testing with documented results.
  • Business Associate Agreements for healthcare clients.
Cyber insurance

Your application, filled in by us

We complete the technical sections of your cyber insurance application and attest only to controls we actually run. When a carrier makes a control a condition of coverage, it becomes our deadline, not yours. Included, not billed.

GETTING STARTED

You see what we found before you see a quote

Nothing gets quoted off a guess. You can stop after any step, and what we find is yours to keep.

1

15-minute call

What you have today, what your insurer or customers are asking for, and whether we are a fit.

2

Assessment

An engineer reviews sign-ins, admin accounts, email security, backups and patching, remotely or on-site.

3

Findings presentation

Every gap ranked by risk, with a 30/60/90-day plan to close it.

4

Proposal

A plan and a price based on what we actually saw.

Already have IT staff?

Co-Managed IT

Keep your IT person and hand us the piece most in-house teams cannot staff around the clock: 24/7 security monitoring and response.

No IT person on staff?

Managed IT

We run all of it: help desk, 24/7 monitoring, cybersecurity and backups, with three plans from $130 per user per month.

DON'T TAKE OUR WORD FOR IT

What our clients say

Two offices and a hybrid team across Chicagoland, and clients who stay.

Google Reviews
★★★★★
5.0 · 244 reviews

Real reviews from the Chicagoland practices and businesses we support.

SmileBack CSAT
Customer Satisfaction
93.4 · customer satisfaction score

Rated by our clients on their support tickets.

Read our CSAT reviews

Eleanor K.
SafePoint IT! One of the best customer-focused, technology-advanced IT companies I have worked with. Amazing customer experience and effective results. Highly recommended.
★★★★★
Patricia S.
SafePoint IT does a fantastic job of responding to our IT needs. They go above and beyond in ensuring their clients are satisfied. We're extremely grateful and highly recommend them.
★★★★★
David S.
SafePoint IT is an excellent company, all-around. Their combined knowledge and expertise are robust, and their customer service team is outstanding, extremely responsive and professional.
★★★★★
Frances C.
It is my pleasure working with SafePoint IT. The IT team is helpful when needed and follows up to make sure all issues are solved in a timely manner.
★★★★★
Gene K.
The folks at SafePoint IT went above and beyond to make sure every little request is taken care of. When they didn't have an answer right away, they did their due diligence to find a solution.
★★★★★
Lee S.
Their staff is friendly, knowledgeable, and competent. When we run into IT issues, their response time is great. An outstanding organization, I've been extremely satisfied with their service.
★★★★★

FAQ

Questions owners ask us about cybersecurity

Is cybersecurity included in your Managed IT plans, or extra?

Included in every plan. Endpoint protection, managed detection and response with a 24/7 security operations center, email security, cloud backup, multi-factor sign-in, admin access control, training and patching are never sold as upgrades. The only piece a client may opt out of is security awareness training, and only when they carry no cyber insurance.

What happens if we have a security incident?

Our security operations center can isolate a compromised computer from the network right away, at any hour. Detection, isolation, investigation, fixing the systems we manage, telling you without delay and working with your insurer and counsel are included. Extended forensics by a specialist firm, legal notification work and large rebuilds are billed separately.

We think we have been hacked and we are not a client. Can you help?

Yes. Call (847) 499-1500 and say it is urgent. Take the affected computer off the network, do not wipe it, and if you have cyber insurance call your carrier's breach line first, because many policies require their own response team.

Will you help with our cyber insurance application?

Yes, and it is included. We complete the technical sections and attest only to controls we actually run. When a carrier makes a control a condition of coverage, it becomes our deadline to put in place and report on.

Can you help with HIPAA, the FTC Safeguards Rule or a customer's security questionnaire?

We are not an auditor. We run the technical controls those frameworks ask about, such as access control, multi-factor sign-in, patch history and tested backups, and hand you the evidence. We answer the technical sections of customer questionnaires directly, and we sign Business Associate Agreements with healthcare clients.

Do you run vulnerability scans or penetration tests?

24/7 security monitoring is included in every plan and watches for active threats in real time. Scheduled vulnerability scanning is an add-on for clients who need it for compliance, insurance or industry rules, and the findings come with a priority and a recommendation.

How do we know the security is really running?

Ask us. We can produce a list of every managed computer with its protection, last check-in and patch status, show it live on a call, and report backup and phishing test results. Our assessment compares what is running against what you are paying for.

Does SafePoint IT hold SOC 2 or ISO 27001?

Not today. We carry Technology Errors and Omissions and Cyber Liability insurance, document the controls in your environment on request, and publish our Service Level Agreement, Terms and Privacy Policy.

Start with 15 minutes

Find out where your security really stands, before your insurer does.

A short call to see what you have and what you are being asked for. If we are a fit, the next step is an assessment, not a sales pitch.

chevron-down linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram