Pace finds the weak spots in your network, ranks them, and helps you close them.
Pace Systems runs risk assessments, vulnerability scans and penetration tests for cities, school districts, colleges and businesses. We rank each finding by its effect on your operation so that the most costly problems get fixed first, and after that we write the plan to fix them, train your staff, and run endpoint detection and response on the devices we look after, with CrowdStrike and Huntress among our tools.
- Tests
- Risk assessments, vulnerability scans, penetration tests
- Findings
- Ranked by their effect on your operation
- EDR
- CrowdStrike and Huntress
- Training
- Phishing, passwords and what to report
- Security officer
- Part time, if you want one
Risk assessment
Risk assessments rank each threat by what it would cost.
We list the devices, the systems and the data you need to protect and the threats they face. Then we work out what it would cost you if any of them failed, so that the most costly ones are at the top of the list.
Vulnerability scans
Each scan comes back as a ranked list of fixes.
We scan the devices and the applications connected to your network for known weak spots, such as open ports and missing patches. Each finding is then ranked by its effect on your operation, so the ones that would hurt you most come first.
The plan says how to close each item, in that order, which means your team always knows what to fix next.
High
Medium
Low
Penetration tests
A penetration test tries every way in an attacker would.
We go after your systems, and the habits of your staff, the way an attacker would. Then we write down every way in that worked and how to close it, so you can fix them before a real attacker finds them.
Staff training
Your staff learn to spot an attack and report it.
The training covers the things a person can stop, i.e. a phishing email, a weak password or a link that looks wrong. Your staff also learn what to report and how, so that a suspicious email reaches someone who can deal with it instead of sitting in an inbox.
On managed devices
CrowdStrike and Huntress run on the devices Pace manages.
If you’re one of our managed IT clients, we also run these three on each device we manage, so the protection is in place between one scan and the next.
Endpoint detection and response
CrowdStrike and Huntress are among our endpoint tools, with managed detection and response from our network operations center behind them.
Email protection
Incoming mail is filtered for phishing and malware, so fewer of those emails get as far as the people our training teaches to spot them.
Patching
We install the operating-system and software updates on each device, so fewer missing patches turn up in your next scan.
Endpoint detection and response
A security officer
A part-time security officer keeps the fixes moving.
If your city, school or business wants one named person to answer for its security but doesn’t want to hire one, our Director of Information Security can take that role part time, so the fixes on your list keep getting done after we hand over the report.
Questions buyers ask
Questions buyers ask about cybersecurity
What is the difference between a vulnerability scan and a penetration test?
A vulnerability scan checks the devices and applications on your network for known weak spots, such as open ports and missing patches, and lists them. A penetration test goes further, because our team actually tries the ways in an attacker would try, against your systems and your staff’s habits, and then reports every way in that worked.
How are the findings reported?
We rank each finding by its effect on your operation, highest first, and write a plan to close them in that order, so the findings that matter most are dealt with before the rest.
Does Pace test our staff and train them?
Yes, our penetration tests can include your staff’s habits as well as your systems, and our training teaches your staff to spot a phishing email, a weak password or a link that looks wrong, and to report it.
Which endpoint protection does Pace run?
For managed IT clients, we run endpoint detection and response on the devices we manage, with CrowdStrike and Huntress among our tools, and we filter their email and install their updates as well.
Can Pace act as our part-time security officer?
Yes, our Director of Information Security can take that role part time, which means one named person keeps the plan moving after the first assessment is done.
An assessment
Ask Pace for an assessment or a scan.
If you tell us how many people, devices and sites you have, the account manager for your area will send you the scope and the price.