- Every
- managed device, Windows and Mac
- Isolate
- a suspicious device in seconds
- A person
- investigates every alert
- Written
- account of what happened and why
More than antivirus.
Antivirus looks for known bad files. EDR watches what programs do and stops the ones behaving badly, including the ones nobody has seen before.
- 01
Behaviour-based detection
Scripts that encrypt files, programs that dump passwords, sign-ins from odd places. Caught by what they do, not by a signature list.
- 02
Automatic isolation
A device that trips a serious alert is cut off from the network while it is checked, so one laptop does not become the whole office.
- 03
Engineer investigation
Alerts go to ALCO engineers, not to a dashboard nobody opens. We work out whether it is real, what it touched and how it got in.
- 04
Patching and hardening
Operating system and application updates on a schedule, with the risky settings closed: macros, old protocols, local admin.
- 05
Recovery
If something does get through, we have the backups and the plan. Restore, clean, and write up what changed.
- 06
Reporting
A plain-English record of every incident in myALCO, and the evidence your insurer or auditor asks for.
From alert to answer.
- 1
Deploy
The agent goes onto every managed Windows and Mac device through our remote management platform. No visit needed.
- 2
Watch
Behaviour is monitored around the clock. Most of the time, nothing happens, and that is the point.
- 3
Respond
An alert isolates the device if needed and pages an engineer. We investigate and act, then tell you.
- 4
Close the gap
Every incident ends with the cause fixed, not just the symptom: a patch, a setting, a training note.
A good fit when...
Your insurer asked for EDR
Cyber policies increasingly require it. This is the box, with the evidence.
Staff work from anywhere
Laptops at home and in coffee shops are outside the office firewall. EDR travels with them.
Nobody watches the antivirus console
You have protection installed and no idea whether it has ever fired.
You handle client, patient or financial data
A compromised laptop is a reportable event. Fast isolation limits it.
Questions people ask.
Is this included with the help desk plan?
Yes. Managed EDR is part of the help desk plan for every managed device. It can also be added on its own.
Which product is it?
A commercial EDR platform deployed and watched through ALCO's remote management tools. We will walk you through the product and the data it collects before anything is installed.
Will it slow our computers down?
No noticeably. The agent is light, and we tune exclusions for the software you actually run.
Does it replace backups?
No. EDR stops most attacks early. Backups are what you fall back on if something still gets through. We do both.
What do you do when an alert fires at 2 AM?
The device is isolated automatically if the alert is serious, and the on-call engineer investigates. You hear from us in the morning with what happened, or sooner if we need you.
- The client area
Everything ALCO does for you, in one place.
Requests, your team, invoices, documents, shared credentials and sign-in security. One sign-in, any device. Take the tour.
Tour myALCO - New · Our work
See the sites we have built.
A newspaper rebuilt headless, a parts storefront, two Boise nonprofits and our own site. Every screenshot is the full page, scrolling live.
Browse our work
Clients we’ve worked with
We’ve worked with businesses, nonprofits and community organizations on managed hosting, website development and everyday IT support. These are some of the current and past clients we’ve supported, each with different systems, priorities and people. Explore their stories to see what working with ALCO looks like.
