Managed Server Protection

Deployment and ongoing management of Microsoft Defender for Cloud on your in-scope servers, agent and policy health monitoring, secure configuration baselines with drift correction, forwarding of server audit and security events for monitoring, and reporting on protection status and agreed exceptions.

Windows Server estates running supported operating system versions, on-premises and in the cloud. In-scope servers and supported versions are agreed during service design.

No. We keep protection deployed, healthy and enforced, and we forward the events. Threat hunting, investigation and active containment sit with a security operations capability, either ours under Cybersecurity Managed Services or your own team.

We configure event forwarding to whatever you use. Where you have nothing in place, we will tell you plainly that events are being generated without anyone watching them, and what your options are.

Defender for Cloud requires the appropriate Microsoft licensing or subscription plan for your in-scope servers. We confirm what you need during service design and tell you where a licence gap limits protection.

Baselines are the agreed secure settings for your servers, covering configuration, hardening and policy. We propose a baseline, you approve it, and we hold your estate to it and correct drift under change control.

Yes. Some applications need an exclusion or a baseline exception to run. We record the request, explain the exposure it creates, ask you to accept the residual risk in writing and bring it back for review rather than leaving it open indefinitely.

We raise it with you immediately and act within the scope of the service, protecting configuration, restoring protection state and supporting the response. Investigation and containment beyond the server platform run through your security operations capability.

You pay a monthly charge per managed server, so cost tracks your estate and stays predictable as it grows. Your service schedule confirms the charging unit, in-scope servers and what is included.

We manage estates that sit outside our reference architecture. Where an unsupported version or a legacy application limits what we can protect or enforce, we tell you up front, what it means for your risk position and what it changes commercially.