Security activity is monitored 24/7 so important signs aren't limited to normal business hours.
Protection after the setup
A strong Microsoft 365 setup is the starting point, not the finish.
Your baseMSP support service helps keep agreed access controls, MFA and essential security settings consistent. Microsoft 365 Security adds continuous monitoring for the activity those settings alone can't prevent.
When something unusual appears, a security specialist decides whether it's harmless or needs action. That means genuine threats are investigated instead of leaving your business with another alert to interpret.
What happens around the clock
From unusual activity to a clear response.
The service combines technology with human judgement. Important activity is watched continuously, checked by a specialist and dealt with through an agreed response. The security team also looks for signs of emerging threats and ways to reduce risk.
A security specialist examines suspicious activity and separates genuine concerns from harmless events.
Where action is needed, the agreed steps are taken to contain the issue and the right people are informed.
Your monthly report shows the activity reviewed, action taken and anything your business should consider next.
Protection across Microsoft 365
The service watches the routes an attacker may try to use.
The exact coverage depends on the monitoring level selected. We confirm what will be watched, how incidents will be handled and who we should contact before the service begins.
View security pricing01
Microsoft 365 accounts and sign-insCore coverage for activity that may suggest an account is being misused.
02
Company devicesCore coverage for security activity from covered devices.
03
Email and Microsoft 365 servicesExtended coverage for suspicious activity involving the services your people use to communicate and work.
04
Other agreed systemsExtended coverage can include agreed servers, cloud services or network activity where broader visibility is required.
Monthly security reporting
See the security work carried out each month.
The report is written to give you oversight, not another technical document to decode. It brings together what was seen, what was investigated and any action taken on your behalf.
Recommendations that need your decision are made clear, so security can be discussed alongside the wider priorities in your regular baseMSP reviews.
Your monthly report
Clear evidence and next steps
Activity reviewedA summary of the security events checked by the monitoring team.
Investigations and actionWhat needed closer examination and how genuine concerns were handled.
RecommendationsAny improvement that would reduce risk or strengthen the service.
Weaknesses to addressImportant device, software or security-setting weaknesses that should be considered next.
Additional security assurance
Check the areas that continuous monitoring doesn't test.
Monitoring watches covered activity as it happens. Phishing simulations, vulnerability assessments and penetration testing provide a separate view of how employees respond and where devices, systems or applications may be exposed.
Explore security assurance servicesPhishing simulations
Help employees recognise suspicious messages and identify where clearer guidance is needed.
Vulnerability assessments
Identify known weaknesses and put the findings into a practical order for action.
Penetration testing
Use a controlled test to understand whether agreed weaknesses can be used in practice.
Two levels of monitoring
Choose the coverage that matches your risk.
Both options provide 24/7 monitoring, specialist investigation, response and monthly reporting. We assess your Microsoft 365 environment and recommend one level for the whole organisation.
MDR service
Core Security Monitoring
24/7 monitoring, investigation and response for Microsoft 365 accounts and covered company devices.
£17.50per covered licence
per month
per month
- Minimum coverage
- 20 licences
- Minimum monthly charge
- £350
- Commitment
- 12 months
- Monthly reporting
- Included
MXDR service
Extended Security Monitoring
Extends that protection across email, cloud services and other agreed systems where broader visibility is required.
£23.50per covered licence
per month
per month
- Minimum coverage
- 20 licences
- Minimum monthly charge
- £470
- Commitment
- 12 months
- Monthly reporting
- Included
One-off service setup£1,400
Microsoft 365 Business Premium provides the main security foundation for this service. We confirm the appropriate monitoring level, licensing and final monthly total before anything starts. Core and Extended Security Monitoring aren't mixed within one organisation.
View all pricing and termsMicrosoft 365 Security questions
What businesses want to know about continuous monitoring.
Clear answers about alerts, monthly reporting, licensing and the difference between security monitoring and everyday IT support.
What happens when suspicious activity is found?
A security specialist investigates it to establish whether it's harmless or a genuine concern. If action is required, the agreed response is followed to contain the issue and inform the appropriate people.
What happens if a serious security incident is confirmed?
The immediate priority is to contain the incident and protect the business. Your agreed contacts are kept informed, necessary recovery actions are coordinated and you receive a separate incident report explaining what happened, what action was taken and what should change next.
What will our monthly security report show?
It summarises the activity reviewed, investigations carried out, action taken and any recommendation that needs your attention. The purpose is to give you clear oversight without presenting a raw list of technical alerts.
What do MDR and MXDR mean?
They're industry terms for the two monitoring levels. MDR is presented here as Core Security Monitoring. MXDR is Extended Security Monitoring, with broader visibility across more of the organisation's technology. We confirm exactly what each option covers before you proceed.
Is this the same as setting up MFA and security policies?
No. MFA and agreed security settings form the baseline. This service adds continuous monitoring, human investigation and response after that baseline is in place.
Why is Microsoft 365 Business Premium the main foundation?
Business Premium includes the Microsoft device and security capabilities needed for the core monitoring service. We review the organisation's full licence mix and confirm any changes required before setup.
Does 24/7 monitoring include a 24/7 IT helpdesk?
No. The security monitoring team watches for and responds to covered security threats around the clock. Everyday employee and device support continues through the baseMSP helpdesk during the support hours agreed for that service.
Can the service support Cyber Essentials or ISO requirements?
It can help you operate and evidence important security controls, but it doesn't replace an independent certification or guarantee that every requirement is met. We explain where the service supports the framework you work to.
Start from a clear position
Know what's in place before choosing continuous monitoring.
We can review your current Microsoft 365 setup first, then explain the baseline work, monitoring level and monthly cost appropriate for your business.