What do cybersecurity companies do is the question the owner or office manager who has been handed security asks after the third sales call, and the answer sorts into four jobs: they watch systems, they fix and patch them, they advise on the programme, and they respond when something happens. Security advisory services are the third job sold alone; customer security is what a client means when it asks the organisation to prove the four are done; security visibility is the first job's output, knowing what is on the network and what it is doing; and dark web monitoring for business is a watch on whether the organisation's credentials have been sold. This page is the four jobs in plain words, and the free policy sheet on this site sizes the programme the advice is about, from the organisation's own facts with no account.
Watch, fix, advise, respond
Watching is monitoring and visibility; fixing is patching and configuration; advising is the assessment and the written programme; responding is the on-call and the recovery. A company may do one, some or all, and the contract should say which. CISA's small-business guidance describes the controls the four jobs deliver.
Customer security and the proof
When a client asks about customer security it is asking for the written programme and evidence the controls run: the policies, the last assessment, the backup test, the training record. The policy sheet on this site sizes the written part: 12 people, 8 systems with their own login, remote work, card payments and personal devices is a set of nine policies, 27 hours to draft, 13.5 hours a year to keep reviewed and $1,822.50 in the first year at $45 an hour; the client's questionnaire is the same list from the other side.
Visibility and the dark web
Security visibility is an inventory of devices and accounts with their state; dark web monitoring for business is an alert when an organisation's email addresses and passwords appear in a sold breach, which the FBI's IC3 reports describe by the thousand. Both are watch jobs; the response to either is written in the programme, and Hardenvo Pro keeps that programme current at one flat price.
Questions people ask about what do cybersecurity companies do
What do cybersecurity companies do?
Four jobs: watch systems, fix and patch them, advise on the programme, respond when something happens; the contract should say which.
What are security advisory services?
The advising job sold alone: the assessment and the written programme; the free policy sheet sizes what the advice is about.
What is dark web monitoring for business?
An alert when the organisation's credentials appear in a sold breach; the response is written in the programme.