BLACKPOINT CYBER COMPASSONE
When a threat appears,
alerts are only the beginning.
Blackpoint Cyber combines managed detection and response with a 24/7 security operations team that can investigate and act on supported threats. Supportdesk connects that specialist capability to the people, devices, identities and cloud services within your business.
WHY ACTIVE RESPONSE MATTERS
An attacker does not need
to wait for business hours.
A stolen account signs in after midnight
The activity may look like a legitimate user rather than malware. Identity threat detection can assess login behaviour and related signals, while the Blackpoint Cyber SOC provides human oversight and response within the selected service.
Malicious activity starts on an endpoint
MDR monitors supported endpoint and activity data for attacker behaviour. Blackpoint Cyber investigates detections and can take supported containment actions instead of leaving an alert waiting for someone to review the next morning.
A vulnerability is discovered across the environment
CompassOne can combine asset and vulnerability information with wider security context. This helps move remediation from a long technical list toward the weaknesses that deserve attention first.
Management asks whether security is improving
Security posture, asset and service information can provide clearer evidence of coverage and priority work. Supportdesk helps turn the findings into practical actions across configuration, access, patching and support.
INSIDE COMPASSONE
See more of the attack surface.
Respond with more context.
CompassOne brings reactive protection and proactive security management into a connected platform. The available modules depend on the package selected for your environment.
Managed detection & response
Blackpoint Cyber’s human-led SOC monitors supported endpoint and security activity around the clock, investigates suspicious behaviour and performs supported response actions when a verified threat requires intervention.
Identity threat detection & response
Monitor activity across supported Microsoft 365, Google Workspace and Cisco Duo identities. Look for signs such as abnormal access, suspicious sessions, malicious inbox rules or account changes that endpoint tools may not see.
Security Posture Rating
Measure security posture using assets, findings, integrations and service context. The rating provides a clearer way to identify gaps, set priorities and show progress over time.
Asset inventory
Build visibility across supported devices, identities, applications and cloud accounts. Better inventory helps expose unmanaged systems and gives investigations more context.
Vulnerability management
Scan supported devices, networks and cloud environments, then use security context to help prioritise which vulnerabilities should be addressed first. Selected packages can also include dark-web monitoring.
Cloud posture
Monitor supported Microsoft 365 configuration for drift and security gaps. Findings can highlight changes or settings that increase risk before they become part of an incident.
Application control
Use managed rules to restrict risky or unwanted applications on supported systems, strengthening prevention while reducing the day-to-day burden of maintaining allow and block decisions.
SIEM, logging & compliance support
The Standard package can add centralised security event collection, mapping and extended log retention. This can support investigation and evidence requirements within a wider compliance programme.
No security service prevents every incident. Coverage and response actions depend on the CompassOne package, integrations, supported technologies and enrolled systems. We document these boundaries during onboarding.
CHOOSE THE DEPTH OF COVERAGE
Start with the protection you need.
Expand as requirements grow.
Essentials ITDR
A focused starting point for organisations concerned about identity-based attacks across supported cloud accounts, with security posture and asset visibility included in the current package.
Essentials MDR
A focused starting point for endpoint managed detection and response, combining supported endpoint coverage with Blackpoint Cyber’s 24/7 SOC and platform context.
CompassOne Core
Bring MDR and ITDR together, then add proactive capabilities such as vulnerability management, cloud posture and application control for a broader security programme.
CompassOne Standard
Extend the widest current CompassOne coverage with additional integrations and SIEM capability for organisations with more advanced logging, investigation or compliance-evidence needs.
Package names and inclusions reflect Blackpoint Cyber’s current platform structure and may change. Supportdesk confirms the available package, integrations, endpoint quantities and subscription details in your proposal.
WHEN AN INCIDENT OCCURS
Detection, decisions
and coordinated action.
Technology creates the signal. A useful managed service also establishes who will assess it, who can act and how your business will be kept informed.
Blackpoint Cyber investigates
The SOC validates suspicious activity using the information available through the selected CompassOne services and integrations.
Supported threats are contained
Blackpoint Cyber can perform response actions covered by the service. The escalation plan defines contacts, authority and any actions that require coordination.
Supportdesk helps with the wider response
We help address affected accounts, devices, configuration or recovery tasks and coordinate with your nominated stakeholders. Findings feed into follow-up security improvements.
GETTING PROTECTED
Know what is covered
before monitoring begins.
01
Assess the environment
Review endpoints, identities, Microsoft 365 or other cloud services, existing security products and current gaps. Identify the CompassOne package and integrations that fit your priorities.
02
Onboard & verify
Deploy required agents and connections, confirm enrolled systems, test visibility and establish authorised contacts and escalation paths.
03
Operate & improve
Coordinate important detections and response. Review coverage, unresolved risks, vulnerability priorities and environmental changes as part of ongoing security management.
WHY SUPPORTDESK
Specialist security operations.
A local technology relationship.
Blackpoint Cyber supplies the specialist platform and SOC. Supportdesk helps your organisation adopt the service and connects security findings to the day-to-day management of your technology.
One place to coordinate action
Work with a team that understands your users, Microsoft 365 environment, devices, network and backup arrangements.
Plain-language security conversations
Translate technical findings into priorities, responsibilities and practical remediation work.
Coverage that can develop
Review the service as your environment, risk profile and customer or insurer requirements change.
COMMON QUESTIONS
Before you make a change.
How is MDR different from antivirus or EDR?
Antivirus and EDR provide important endpoint controls and telemetry. MDR adds continuous monitoring, investigation and human-led response around supported activity, so a meaningful detection is assessed and acted on rather than simply delivered as another alert.
Why add identity protection to endpoint MDR?
Attackers can use valid stolen credentials to enter Microsoft 365 or another cloud service without placing malware on a device. ITDR looks at identity and account behaviour, complementing endpoint visibility.
Can Blackpoint Cyber monitor Microsoft 365?
Yes, supported CompassOne identity and cloud capabilities can monitor relevant Microsoft 365 activity and configuration. We confirm the package, permissions, supported workloads and precise coverage before onboarding.
What happens when a serious threat is found?
Blackpoint Cyber investigates and can perform supported response actions within the service. Your escalation plan sets out who is contacted, what authority has been provided and how Supportdesk and your stakeholders coordinate wider containment, recovery and communication.
Will CompassOne make our business compliant?
No product establishes compliance on its own. CompassOne can provide controls, visibility, logging and evidence that support a wider programme, alongside suitable policies, access management, maintenance, backup and organisational processes.
CONNECTED SERVICES
Bring the right services together.
LET’S TALK
Move beyond alerts.
Build a response capability.
Tell us what you protect today, where you lack visibility and who responds after hours. We’ll map those needs to a suitable CompassOne option.
Prefer to call?