{"title":"Security Services","description":"\u003cp\u003eHands-on Microsoft security engineering for UK small businesses: Defender, Purview DLP, Sentinel, Splunk, detection-as-code and security automation, from the technical owner of these platforms at a major UK bank.\u003c\/p\u003e","products":[{"product_id":"small-business-security-health-check","title":"Microsoft 365 \u0026 Defender Security Health Check","description":"\u003cp\u003eA fixed-price review of your Microsoft security setup by the technical owner of Microsoft Defender, Splunk Enterprise Security and Purview DLP for a major UK bank, with 8+ years in enterprise banking technology.\u003c\/p\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReview of Microsoft Defender for Endpoint coverage, onboarding gaps, device groups and policies\u003c\/li\u003e\n\u003cli\u003eReview of exclusions, indicators and automated response settings, with each exclusion risk-scored\u003c\/li\u003e\n\u003cli\u003eMicrosoft Defender for Identity check, if licensed\u003c\/li\u003e\n\u003cli\u003eMicrosoft Entra ID check of MFA, admin accounts and privileged access\u003c\/li\u003e\n\u003cli\u003eMicrosoft Purview DLP policy review, if licensed\u003c\/li\u003e\n\u003cli\u003eAdvanced hunting (KQL) sweep for common risky activity in your tenant\u003c\/li\u003e\n\u003cli\u003ePlain-English report with a prioritised fix list\u003c\/li\u003e\n\u003cli\u003e60-minute call to walk through the findings\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWho it's for\u003c\/h3\u003e\n\u003cp\u003eUK businesses with up to 50 devices using Microsoft 365 Business Premium or E3\/E5.\u003c\/p\u003e\n\u003ch3\u003eHow it works\u003c\/h3\u003e\n\u003cp\u003eAfter you order, I'll email you within 2 working days to agree read-only access. The report is delivered within 10 working days.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Default Title","offer_id":67877766070663,"sku":"KG-HEALTHCHECK","price":495.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-health-check.jpg?v=1793788449"},{"product_id":"microsoft-defender-for-endpoint-setup-tuning","title":"Microsoft Defender for Endpoint \u0026 Identity Setup and Tuning","description":"\u003cp\u003eGet Microsoft Defender properly deployed and tuned, so it protects you without drowning you in noise. Delivered by an engineer who helped onboard tens of thousands of bank endpoints into Defender for Endpoint and owns the platform day to day.\u003c\/p\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOnboarding of Windows devices and servers into Defender for Endpoint\u003c\/li\u003e\n\u003cli\u003eDevice groups set up so policies and alerts match how your business is organised\u003c\/li\u003e\n\u003cli\u003eDefender for Identity connected and checked, if licensed\u003c\/li\u003e\n\u003cli\u003eExclusions reviewed and risk-assessed, with anything unsafe removed\u003c\/li\u003e\n\u003cli\u003eCustom indicators (IOCs) and alert tuning to cut false positives\u003c\/li\u003e\n\u003cli\u003eHandover document and a 60-minute walkthrough\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWho it's for\u003c\/h3\u003e\n\u003cp\u003eBusinesses with up to 50 devices that have Defender licensed (Microsoft 365 Business Premium or E5) but haven't set it up fully.\u003c\/p\u003e\n\u003cp\u003eLarger estates are quoted separately, so please get in touch first.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Default Title","offer_id":67877770101127,"sku":"KG-MDE-SETUP","price":1500.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-defender.jpg?v=1793788450"},{"product_id":"microsoft-purview-data-loss-prevention-dlp-setup","title":"Microsoft Purview Data Loss Prevention (DLP) Setup","description":"\u003cp\u003eStop sensitive data such as customer details, card numbers and contracts leaving your business by email, Teams, OneDrive or USB. Delivered by the technical owner of Microsoft Purview and Symantec DLP for a major UK bank.\u003c\/p\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkshop to identify the data that matters most to your business\u003c\/li\u003e\n\u003cli\u003eMicrosoft Purview DLP policies built for email, SharePoint, OneDrive, Teams and devices\u003c\/li\u003e\n\u003cli\u003ePolicies run in test mode first, then tuned before being switched on\u003c\/li\u003e\n\u003cli\u003eUser policy tips set up so staff understand why something was blocked\u003c\/li\u003e\n\u003cli\u003eHandover document and a 60-minute walkthrough\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWho it's for\u003c\/h3\u003e\n\u003cp\u003eBusinesses with Microsoft 365 Business Premium or E3\/E5 that handle personal or sensitive data.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Default Title","offer_id":67877770264967,"sku":"KG-DLP-SETUP","price":1500.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-purview.jpg?v=1793788449"},{"product_id":"detection-engineering-alert-tuning-sentinel-or-splunk","title":"Detection Engineering \u0026 Alert Tuning (Defender, Sentinel or Splunk)","description":"\u003cp\u003eMake your security alerts worth reading. I'll tune the noisy ones and build detections that catch real threats, using the same approach I use on the Defender and Splunk Enterprise Security platforms I own for a major UK bank.\u003c\/p\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReview of your current custom detections, analytics rules or correlation searches and their alert volumes\u003c\/li\u003e\n\u003cli\u003eTuning of the noisiest rules to cut false positives\u003c\/li\u003e\n\u003cli\u003eUp to 5 new custom detections written in KQL or SPL\u003c\/li\u003e\n\u003cli\u003eCheck of log sources for gaps in what you're collecting\u003c\/li\u003e\n\u003cli\u003eHandover document with each detection explained\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWho it's for\u003c\/h3\u003e\n\u003cp\u003eBusinesses already running Microsoft Defender XDR, Microsoft Sentinel or Splunk Enterprise Security.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Microsoft Defender \/ Sentinel (KQL)","offer_id":67877770330503,"sku":"KG-DETECT-SENTINEL","price":1200.0,"currency_code":"GBP","in_stock":true},{"title":"Splunk Enterprise Security (SPL)","offer_id":67877770363271,"sku":"KG-DETECT-SPLUNK","price":1200.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-detection.jpg?v=1793788450"},{"product_id":"security-automation-build","title":"Security Automation Build","description":"\u003cp\u003eAutomate the repetitive security jobs eating your team's time. I build them with Azure Logic Apps, Python, PowerShell or Splunk SOAR, the same tools I use to automate Defender operations for a major UK bank.\u003c\/p\u003e\n\u003ch3\u003eExample automations\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlerting your IT team when Defender quarantines files or detects a new threat\u003c\/li\u003e\n\u003cli\u003eApplying indicators of compromise (IOCs) to Defender automatically\u003c\/li\u003e\n\u003cli\u003eHandling exclusion requests, including an AI-assisted risk score for each one\u003c\/li\u003e\n\u003cli\u003eAuto-assigning devices to the right Defender device groups\u003c\/li\u003e\n\u003cli\u003eRaising an incident when one of your automations fails, so nothing breaks silently\u003c\/li\u003e\n\u003cli\u003eScheduled KQL hunting queries with results emailed or posted to Teams\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOne automation scoped, built, tested and deployed in your environment\u003c\/li\u003e\n\u003cli\u003eDocumentation and a handover walkthrough\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003ePlease get in touch before ordering so we can agree the scope.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Default Title","offer_id":67877770461575,"sku":"KG-AUTOMATION","price":1500.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-automation.jpg?v=1793788449"},{"product_id":"monthly-security-support","title":"Monthly Security Support","description":"\u003cp\u003eOngoing hands-on support for your Microsoft security tools, without hiring a full-time security engineer.\u003c\/p\u003e\n\u003ch3\u003eWhat's included each month\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReview and triage of Microsoft Defender alerts\u003c\/li\u003e\n\u003cli\u003eOngoing tuning of policies, exclusions and alert rules\u003c\/li\u003e\n\u003cli\u003eMonthly threat hunting sweep using KQL\u003c\/li\u003e\n\u003cli\u003eUp to 4 hours of hands-on engineering time\u003c\/li\u003e\n\u003cli\u003eMonthly summary report\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePlease note\u003c\/h3\u003e\n\u003cp\u003eThis is support during UK working hours, not a 24\/7 monitoring service. Serious incidents are escalated to you straight away, with advice on next steps.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"Default Title","offer_id":67877770559879,"sku":"KG-MONTHLY","price":395.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-monthly.jpg?v=1793788450"},{"product_id":"detection-as-code-pipeline-for-microsoft-defender-gitlab-or-github","title":"Detection-as-Code Pipeline for Microsoft Defender (GitLab or GitHub)","description":"\u003cp\u003eStop building detections by hand in the portal. I'll set up a pipeline that manages your Microsoft Defender custom detections as code, with every change tested, reviewed and promoted to production in a controlled way, with a full audit trail.\u003c\/p\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA GitLab or GitHub repository with your Defender custom detections stored as code\u003c\/li\u003e\n\u003cli\u003eAutomatic checks on every change: query validation and standards checks before anything is deployed\u003c\/li\u003e\n\u003cli\u003eA test-to-production promotion flow with approvals, so nothing reaches production untested\u003c\/li\u003e\n\u003cli\u003eA full change history showing who changed what, when and why, ready for audits\u003c\/li\u003e\n\u003cli\u003eYour existing custom detections migrated into the repository\u003c\/li\u003e\n\u003cli\u003eHandover so your team can add and update detections themselves\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWho it's for\u003c\/h3\u003e\n\u003cp\u003eBusinesses and IT providers using Microsoft Defender XDR who write their own custom detections, or need to show auditors how detection changes are controlled.\u003c\/p\u003e\n\u003cp\u003ePlease get in touch before ordering so we can agree the scope.\u003c\/p\u003e","brand":"KingGuard Cyber","offers":[{"title":"GitLab","offer_id":67884651938183,"sku":"KG-DAC-GITLAB","price":2500.0,"currency_code":"GBP","in_stock":true},{"title":"GitHub","offer_id":67884651970951,"sku":"KG-DAC-GITHUB","price":2500.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1115\/5852\/5319\/files\/kg-detection-as-code.jpg?v=1793788450"}],"url":"https:\/\/kingguardcyber.com\/collections\/security-services.oembed","provider":"KingGuard Cyber","version":"1.0","type":"link"}