Skip to content
GlabIT
GlabIT

Managed security · subscription

Cybersecurity-as-a-Service

Managed cybersecurity services in Romania: vulnerability management, hardening, policies, awareness, supplier risk and incident support in Romanian and English.

Book an assessment

In one sentence

A fractional security team on subscription — vulnerability management, hardening, policy, awareness training, vendor risk and an incident response retainer — for companies that need a security function but not a full-time CISO yet.

Who it is for

  • Companies with 50–1,000 staff and no dedicated security team, or one person doing it part-time
  • Organisations newly in scope for NIS2 or DORA that need the Article 21 measures actually run, not just documented
  • Groups whose customers, auditors or insurers now ask for evidence of a security programme
  • Firms that had a pentest last year and are still looking at the same findings

What is included

CaaS bundles the things a security team would do if you had one, and runs them on the regular cadence set in your contract:

  • Vulnerability management. Continuous external scanning, scheduled internal scanning, triage of results, and coordination with whoever patches. We track time-to-fix and report it.
  • Hardening and configuration. Microsoft 365 / Google Workspace, identity (MFA, conditional access, privileged accounts), endpoints, cloud accounts and network edge, worked through against CIS-style baselines and your own risk appetite.
  • Policy and governance. The policy set your customers, auditors and NIS2/DORA require, written to be followed rather than filed, mapped to ISO/IEC 27001 controls.
  • Awareness training. Short, role-specific sessions and phishing simulations; results feed the roadmap.
  • Vendor and third-party risk. A review process for new suppliers and a re-review cycle for the ones that hold your data.
  • Incident response retainer. A named engineer, agreed response times, a rehearsed runbook and post-incident reporting.
  • Management reporting. Reporting and management reviews at the cadence set in your contract, in the language your board reads.

How we work

A named security lead owns your account and does not change without notice. CaaS engineering work — hardening, policy, remediation — is done by GlabIT engineers (round-the-clock monitoring, where you add the SOC service, is available under a contracted coverage model together with a partner SOC, as described on that page). Changes we make to your systems are logged, agreed in advance and made reversible wherever the platform allows; every recommendation comes with the reason and the risk of not doing it.

What CaaS is not

It is not a SOC. Monitoring, detection engineering and alert triage — with round-the-clock coverage available under a contracted model — are the SOC & managed detection service, which many CaaS clients add. It is also not a one-off audit: if you want a point-in-time view, start with a penetration test or a compliance gap assessment.

Deliverables

What you receive

  • Security roadmap

    A prioritised plan built from your first assessment, reviewed periodically and rewritten when the business changes.

  • Vulnerability report

    At the cadence set in your contract — what was found on your external and internal estate, what was fixed, what is outstanding and why — written for management and for the people patching.

  • Policy and control set

    Working policies (access, incident, backup, acceptable use, vendor) mapped to ISO/IEC 27001 controls and NIS2 Article 21 where relevant. Yours to keep.

  • Hardening changes

    Configuration changes actually applied — Microsoft 365 / Google Workspace, endpoints, identity, cloud, network — with a change log.

  • Awareness training record

    Sessions delivered, phishing simulation results and attendance — the evidence auditors ask for.

  • Incident retainer

    A named engineer to call, agreed response times, and a runbook we have rehearsed with you before anything happens.

Engagement model

How it runs

Model
Subscription in three coverage tiers — Essential, Managed, Enterprise — scoped to your estate; term, notice period, reporting and review cadence agreed in the contract. Named security lead throughout. Ask for the tier sheet.
Typical timeline
An onboarding assessment scoped to your estate, then the regular cadence set in your contract.
  1. 01

    Onboard

    Baseline assessment of your estate, identities, cloud and policies. We agree the roadmap and the onboarding period's priorities.

  2. 02

    Run

    Scanning, patch coordination, hardening, policy work and training run on the contracted cadence. You see it all in the regular report.

  3. 03

    Respond

    When something happens, the retainer applies — triage, containment, communication support and the post-incident report.

  4. 04

    Review

    Periodic review with management — risks closed, risks open, budget, and what changes in the next period.

FAQ

Questions a sceptical CISO asks

How is this different from hiring a CISO?

A full-time CISO costs a senior salary and still needs engineers. CaaS gives you a security lead plus the hands to do the work, for a subscription fee, and scales down or up with you. When you are large enough to justify an in-house team, we help you hire it and hand over.

Do you replace our IT provider or MSP?

No. We work alongside them. They run infrastructure; we set the security requirements, verify they are met and step in on incidents. Where an MSP is unresponsive on security changes, we tell you plainly.

What tools do you use?

A mix of open-source and commercial tooling chosen for your estate. We name the specific stack in the proposal; ownership of tenants and data is defined per tool in the contract, and our default is that tenants are yours.

What are your incident response times?

Response times are agreed per tier and written into the contract, not left as marketing copy. Ask us for the current figures and we will show you how they are measured.

Can this cover NIS2 or DORA obligations?

CaaS is designed to support the implementation, operation and evidence of the agreed technical and organisational measures after a gap assessment. Whether your organisation is compliant is a legal conclusion for you, your counsel and the authority — we provide the technical work and the evidence.

Get a security function this quarter, not next year

We start with an onboarding assessment and a fixed subscription scope. The onboarding period delivers a baseline assessment, an agreed roadmap and the first report — concrete outputs you can hold us to.

Book an assessment

Often combined with

IT audit

Evidence-based review of your IT estate, operations and controls — findings, verified safeguards and a prioritised remediation roadmap.

Read more

SOC & managed detection

Monitoring, detection, triage and response mapped to MITRE ATT&CK; round-the-clock coverage available under a contracted model.

Read more

Penetration testing

Web, network, cloud and mobile testing to OWASP WSTG and PTES, with retest included.

Read more