24/7 detection & response
EDR and SIEM, watched around the clock by our analysts. We contain threats ourselves, so nobody on your team gets an alert at 3am asking them to deal with it.
Your security first MSP
Quietly, relentlessly secure.
VIC ITS runs your technology with security built into everything we do. One team manages your helpdesk, endpoints, cloud and backups, and watches over all of it 24/7.
- 24/7/365Eyes on glass
- <15 minCritical response
- Zero-trustBy default
Services
Everything you need, delivered security‑first
You don't buy security as a separate product from us. Every service is designed, configured and operated to our hardened baseline.
Managed IT & helpdesk
Unlimited support, device lifecycle, Microsoft 365 and network management, all hardened before handover.
Email & identity security
Phishing protection, phishing-resistant MFA, conditional access and alerts on mailbox rules. Most incidents start here.
Backup & recovery
Immutable, off-site backups with restore tests every month. If ransomware hits, you recover in hours, not weeks.
Compliance & vCISO
Policies, risk registers, and evidence for auditors and insurers, plus a named security lead at your board meetings.
Incident response
Not a client yet? We still respond to active incidents, from containment and forensics through to recovery and the report you'll need.
Report an incidentDefense in depth
Five layers between attackers and what matters
There's no single control that stops everything. We stack independent layers, so an attacker who gets past one still meets the next.
- PeoplePhishing simulations, awareness training, and clear ways for staff to report.
- IdentityPhishing-resistant MFA, conditional access, and separate admin accounts.
- Email & networkFiltering, DNS protection, firewalls, and segmentation.
- EndpointEDR, patching within 14 days, and application control.
- DataEncryption, least-privilege access, and immutable backups.
0%backup restore success
<0 mincritical-incident response
0 daysmaximum critical-patch window
0%MFA coverage on every client
Approach
From first call to fully defended
- 01
Assess
A free security review of your attack surface, Microsoft 365 posture, backups and identity, with a risk report written in plain English.
- 02
Harden
We fix the highest-risk gaps first, usually within 30 days: MFA, admin separation, patching and immutable backups.
- 03
Monitor
EDR and log collection go live with 24/7 SOC coverage, using response playbooks we agree with you.
- 04
Improve
Quarterly reviews, phishing simulations, tabletop exercises and a roadmap that keeps improving.
Working with us
Pricing built around your business, not a price list
No two environments are the same, so we don't publish one-size-fits-all packages. We scope your service on a short call, then send a clear proposal setting out what's included and what it costs.
What shapes your proposal
- Users and devices
- Cloud and on-premises systems
- Compliance and insurance requirements
- Support hours and onsite needs
-
01
Discovery call
A 30-minute conversation about your team, your systems and what's worrying you.
-
02
Free security review
We assess your environment and show you where the real risks are, in plain English.
-
03
Tailored proposal
Scope, inclusions, onboarding plan and pricing, which we walk through with you on a call.
New business
Book a discovery call
Tell us a little about your organisation and we'll set up a 30-minute discovery call. You'll speak with a security engineer, not a salesperson, and we'll reply within one business day. Pricing is tailored to you and discussed on the call.
- No obligation, and no 40-slide deck
- A free security review comes with every proposal
- Findings you can act on, even if you don't hire us
- We sign an NDA on request
Is this an active incident?
Don't use this form. Use the emergency workflow or call 03 9647 2229.
Thank you, we've got it.
Your reference is . A security engineer will be in touch within one business day to arrange your discovery call.
Meanwhile, here's the one control we'd ask every business to check today: MFA on email for every user, including admins.