Co-Managed Guardian

Who it is for

Businesses with in-house IT staff who want to keep the front line and hand security, servers and the network to TSR.

Co-Managed Guardian gives your internal IT team the same platform TSR runs for fully managed clients — 24×7 detection and response, log retention, DNS filtering, patching, monitoring and documentation — while your team keeps tier-1 support and administrative control. TSR looks after security, servers and the network, takes after-hours escalations and carries the security operations centre relationship. Your team gets the tools, the portal and an engineer to call, without giving up the parts of IT it already does well.

Inside the rate

• 24×7 managed detection and response by a staffed security operations centre
• Logs kept off the machine that generated them, and DNS filtering on and off the network
• Patching, configuration enforcement and zero-touch deployment for every endpoint
• Help desk and onsite support for security, servers and the network, plus a 24×7 on-call engineer
• Your team keeps user tickets, administrative rights and day-to-day decisions
• Shared ticket portal, monitoring console and documentation your team can work in
• Quarterly business review and vCIO planning alongside your IT lead
• Microsoft 365 security baseline maintained by TSR, with drift reported to your team

What it does not do

• User help desk. Your team owns tier-1 tickets; TSR's help desk covers security, servers and the network and takes escalations.
• Day-to-day administrative decisions. Your team keeps admin control; TSR maintains the security baseline and flags drift rather than overriding it.
• Incident remediation beyond the immediate response, which is time and materials per the TSR Services Guide.
• Migration projects, which are scoped and quoted separately.