Cyber security
Endpoint and identity protection
Every computer, laptop and server protected against malware and ransomware, and every Microsoft 365 account watched for a stolen password in use, with threats dealt with by our team.
Who it is for
Businesses in Teesside and the North East whose antivirus is whatever came with the laptop and whose Microsoft 365 accounts have never been watched: anyone with staff working from home, with an insurer asking about endpoint detection and response, or with a customer questionnaire that uses the letters EDR and MDR and expects a yes.
What you get
Microsoft Defender on every device, backed by Huntress managed endpoint detection and response and identity threat detection and response for Microsoft 365, watched by security analysts around the clock, with the alerts investigated and acted on by Odyssey engineers who isolate infected devices, clean them, secure the accounts and tell you what happened. A regular report of what was detected and done, in the words an insurer wants to read.
The problem
Every device your staff use is a way in. Antivirus that nobody watches catches known malware but misses an attacker using tools already on the machine, and stolen passwords get round it entirely.
Antivirus matches known bad files. It has no answer to an attacker who signs in with a real password stolen by a phishing page, or who uses tools that are already on the machine, which is how authorised push payment fraud starts: a compromised mailbox, weeks of quiet reading, then an invoice with new bank details.
Endpoint detection and response (EDR) watches behaviour on the device rather than matching files, and managed detection and response (MDR) means someone is watching the alerts and acting on them. Identity threat detection and response (ITDR) does the same for Microsoft 365 sign-ins: a login from a country nobody is in, a session token reused to skip multi-factor authentication, a rogue application granted access to a mailbox. These are the controls cyber insurers and Cyber Essentials Plus assessors now ask about by name.
Huntress analysts triage around the clock; our engineers in Stockton-on-Tees act on what they find, during the working day within our written commitment of actively working within 2 hours on anything urgent, and the device or account is contained before the damage spreads.
Malware protection is one of the five Cyber Essentials controls, and endpoint protection also covers much of a second, user access control. The Cyber Essentials check shows where you stand on all five controls, with no name or email needed.
What Odyssey provides
- Microsoft Defender on every device, detecting, blocking and removing malware and ransomware
- Huntress managed endpoint detection and response (EDR), watched by security analysts around the clock
- Huntress identity threat detection and response (ITDR) for your Microsoft 365 accounts
- Huntress SIEM, bringing security logs together so threats are spotted across your systems
- Infected devices isolated and cleaned, and compromised accounts secured, by Odyssey engineers
- Regular reports of what was detected and done, for your board, your insurer and your customers' questionnaires
What is included
| Included | Detail |
|---|---|
| Deployment | Microsoft Defender configured and the Huntress agent installed on every computer, laptop and server, in the office or at home |
| Device monitoring | EDR alerts investigated by Huntress analysts around the clock and acted on by our team |
| Identity monitoring | Microsoft 365 sign-ins watched for account takeover, session hijacking and rogue applications, with multi-factor authentication enforced |
| Response | Infected devices isolated from the network and cleaned, compromised accounts locked and passwords reset, and you told what happened and what we did |
| Logs | Security events from devices and Microsoft 365 collected in the Huntress SIEM and retained for investigation |
| Reporting | A regular summary of detections, actions and the state of protection across the estate |
Not included, or sold separately
- Out-of-hours response
- Huntress analysts monitor around the clock; a critical alert out of hours reaches our out-of-hours service desk rota, and the response work is never drawn from retained hours and is charged at the consumed list rate for the grade of engineer in use
- Email filtering
- Phishing and malware are stopped before the inbox by email filtering, a separate service; this service catches what gets past it
- Backup and recovery
- If ransomware wins, recovery comes from backups, which is its own service with recovery times agreed per system
- Security awareness training
- The people layer, with simulated phishing and short lessons, is a separate service
- A full security operations centre
- We provide managed detection and response built on Huntress; a SOC built to order, with custom log sources and threat hunting across your own applications, is outside this service
- Devices we are not told about
- A laptop that has never been enrolled is not protected, which is why onboarding starts with an audit of every device
How it is delivered
-
Audit the estate
Every computer, laptop and server, in the office, at home and in the cloud, and every Microsoft 365 account, so nothing is left outside the protection.
-
Deploy the protection
Microsoft Defender configured to our standard and the Huntress agent installed on every device, Microsoft 365 connected for identity monitoring, and multi-factor authentication enforced for every user, with staff told what will change before it does.
-
Tune and baseline
The first weeks establish what normal looks like for your business, so a sign-in from a sales rep on the road is not an alert and one from a country nobody is in is.
-
Watch and respond
Huntress analysts triage alerts around the clock; our engineers act on them, isolate and clean devices, secure accounts and tell you what happened in plain language.
-
Report
A regular summary of what was detected and what was done, kept so it can be handed to an insurer or a customer with a questionnaire.
Why trust Odyssey with this
-
ISO
Certified to ISO 27001 for information security
-
In-house
All work completed by Odyssey employees, never subcontracted
- Cyber Essentials consultancy through our professional services
- Actively working within 2 hours on anything urgent, in writing
Client story
Prestons of Potto
A 20-year telephony relationship grew into full IT support, moving a nationwide haulage firm onto Microsoft 365.
Read the story
Questions people ask
Is antivirus enough on its own?
Not any more. Modern attacks often use stolen passwords or tools already on the machine, which antivirus does not flag. Microsoft Defender is backed here by Huntress detection and response on the devices and on your Microsoft 365 identities, with people watching and acting.
What is the difference between EDR and MDR?
EDR is the software on the device that watches behaviour and raises alerts. MDR is the service around it, the analysts watching the alerts around the clock and the engineers who respond. You are buying both here.
Who watches for threats?
Huntress security analysts monitor the endpoint and identity alerts around the clock, and Odyssey's own engineers in Stockton-on-Tees investigate and act on what they escalate, isolating devices, cleaning them and securing accounts.
Does it cover staff working from home?
Yes. Protection travels with the device, so laptops are covered wherever they are used, and Microsoft 365 sign-ins are watched wherever they come from.
Does it protect our Microsoft 365 accounts?
Yes. Identity threat detection and response watches Microsoft 365 for signs of a stolen password in use, a session token reused to bypass multi-factor authentication, or a rogue application granted access, and the account is secured when it finds one.
Will it satisfy our cyber insurer?
Insurers increasingly ask for endpoint detection and response, multi-factor authentication on every account and monitoring of Microsoft 365. This service provides them, and the regular reports give you the evidence. Check the exact wording of your policy with your insurer.
What happens when something is found?
The device is isolated from the network and cleaned, or the account is locked and the password reset, and you are told what happened, what we did and what we recommend next. If files have been encrypted, recovery comes from your backups.
Will it help us get Cyber Essentials?
It puts the malware protection and much of the user access control in place. Our Cyber Essentials consultancy takes you through the rest of the five controls and the evidence, and from 27 April 2026 multi-factor authentication on every cloud service is required to pass.
Challenges this helps with
- Adopting AI with the right controlsYour data, your policies
- Responding to a security incidentThe first hour, and preventing the next
- Protecting staff from phishing and fraudFewer clicks, and fewer ways in
- Getting Cyber Essentials certificationThe controls in place, the evidence ready
- Recovering from data loss or ransomwareData restored, and recoverable next time
- Answering a customer's or insurer's security questionnaireControls in place, evidence ready
- Joiners, movers and leavers at volumeAccess that follows people in and out
Related services
Ask about endpoint and identity protection
Send us your question and we will come back to you. We call back within the hour in office hours.
Rather talk? Call 01642 661888. Already a customer with a fault? Call the service desk on 01642 661800.
Please fill in every field marked *, then send again.
That email address does not look right. Please check it and send again.
We have had several messages from you in a short time. Please call us on 01642 661888 instead.
Online messages are paused for the moment. Please call us on 01642 661888.
Your message is too long for this form. Please shorten it, or call us.
Something went wrong on our side and your message was not sent. Please call us on 01642 661888.
We could not confirm that a person sent this message. Please try again, or call us on 01642 661888.
Talk to a human about endpoint and identity protection
Call and we answer within three rings. Or tell us what you need and we will call you back at any time.