Service desk
We help users with day-to-day problems, fix issues remotely and own service requests within the agreed scope.
Managed XDR
SONAR Managed IT & Cyber Security
Service desk, IT operations, Microsoft 365, endpoint and email security and 24×7 security operations. One managed service, one accountable team.
SONAR owns the whole job, from user support to cyber response.
Most managed IT splits support from security. Users call one provider. Security alerts go somewhere else. Another team owns the servers, and nobody owns the whole result. SONAR is built another way. Vectra joins up the service desk, IT operations and security operations, so everyday IT issues and cyber risk are handled by one team. When an issue crosses from IT into security, we don’t hand it back to you. We bring the right people together and see it through.
More than endpoint monitoring.
SONAR can run as your whole IT function or extend your own team. We agree the exact scope with you. It covers your users, devices and core business technology from start to finish.
Joiners, movers and leavers
We set up new starters, change access when roles change and close accounts when people leave.
Device management
We watch device health, set up and patch devices, deploy software, automate routine tasks and fix problems remotely.
Microsoft 365
We run day-to-day admin and support for the Microsoft 365 services and user setups we agree to support.
Servers and network
We monitor and maintain supported servers and networks, and chase issues through to a fix.
Endpoint and email defence
CrowdStrike Falcon and Check Point Email Security are built into how we run the service.
24×7 monitoring and response
We triage, investigate and escalate security events, and coordinate the response, day and night.
Recovery
We help you recover and keep running, across the backup and infrastructure services we agree to cover.
Reporting and roadmap
Regular reviews show your risks, plan when to replace systems and give you plain advice on what to do next.
Proven platforms, joined up by Vectra.
SONAR is not a patchwork of low-cost MSP tools. We use proven enterprise platforms for IT operations and security, and join them up through our service desk, SOC and managed-service processes.
NinjaOne
Modern IT operations
NinjaOne gives us one view of every supported device, so we can automate upkeep and fix issues faster.
- Endpoint monitoring and management
- OS and third-party patching
- Software deployment
- Automation and remediation
- Secure remote support
CrowdStrike Falcon
Endpoint defence
CrowdStrike protects devices with AI-native prevention, detection and response, backed by our CrowdStrike experts and security team.
- Next-generation endpoint protection
- EDR telemetry and investigation
- Ransomware and malware defence
- Threat containment workflows
- Options to expand the platform
Check Point Email Security
Email and collaboration protection
Check Point Email Security, formerly Harmony Email & Collaboration, protects Microsoft 365, Google Workspace and other collaboration tools.
- Phishing and impersonation protection
- Malware and attachment defence
- Business email compromise
- Account takeover protection
- Data protection options
Vectra operations
The layer that makes it a service
Tools alone don’t deliver a result. We link them to people, process, escalation and accountability.
- Service desk
- 24×7 security operations
- Technical specialists
- Incident coordination
- Governance and improvement
IT operations and security operations should work together.
The same laptop can be a support ticket in the morning and a security incident in the afternoon. SONAR joins up the service desk, IT operations, security operations, specialist engineers and service reviews, so issues reach the right people without you chasing them.
Detection is only useful when someone owns what happens next.
Many managed security services stop at an alert or a suggestion to contain it. SONAR links cyber monitoring to the team that can work on the device, user account or system that is hit. We run security and IT work through the whole incident, so you are not left to bridge the gap.
Detect
Our security tools and IT monitoring spot suspicious activity or a serious technical fault.
Validate
An analyst checks whether the event is a real risk, and which systems or users it affects.
Contain
Security controls and approved response steps limit what the attacker can do and stop further harm.
Remediate
We coordinate the technical work to restore systems, remove the cause and get back to a known good state.
Improve
Lessons, reports, policy changes and technical fixes feed back into the service.
Move away from reactive support and surprise labour bills.
SONAR is a clearly defined service with an agreed monthly cost. The scope, service desk hours and included technology follow your SONAR plan and the setup we manage.
That makes the cost easier to plan. It also gives us every reason to automate, standardise and fix problems before they turn into costly incidents.
Your customer agreement and service plan set out what SONAR includes: service desk hours, technology licences and who is responsible for what. 24×7 refers to security monitoring and response unless we agree otherwise.
-
Fixed monthly fee
A steady cost for the agreed scope, rather than mostly ad hoc hourly support.
-
Proactive by design
Automation, monitoring and upkeep cut repeat issues and daily friction.
-
Clear ownership
Everyone knows who does what, how issues escalate and who is accountable, across IT and security.
-
Flexible cover
Service desk hours and extra services can match the model you choose and what you need.
-
Always improving
Reports, reviews, automation, tuning and agreed project work keep the service getting better.
Where SONAR fits.
SONAR runs your IT and your security as one service. If you need only part of that, or a deeper CrowdStrike service, start here.
Managed XDR
Managed Detection & Response
24×7 detection and response on your own security stack, for teams that run their own IT.
Managed XDR
CrowdStrike for Small Business
Managed CrowdStrike Falcon for small and mid-sized businesses, with Falcon Complete and White Glove in one service.
Managed XDR
Vectra White Glove
A local service layer around CrowdStrike Falcon Complete, with a named Technical Account Manager.
Solutions
Vectra Strike Team
Our CrowdStrike specialists, from design and rollout to SIEM migration and tuning.
Change provider without losing control.
Changing providers should make things better, not cause months of disruption. We learn your setup and what depends on what, and set a baseline before we start to improve it.
-
Step 1: Assess
We learn your users, devices, servers, network, Microsoft 365, current tools, security controls, support history and pain points.
-
Step 2: Plan
We agree the scope, who does what, access, the order of the move, communications, milestones and risks.
-
Step 3: Onboard
We roll out the management and security tools, set up the service desk and connect monitoring and escalation.
-
Step 4: Baseline
We check patching, device health, software, security posture and open issues, so we know where we start.
-
Step 5: Stabilise
We close the priority gaps, check coverage and put repeatable support processes in place.
-
Step 6: Improve
Automation, reports and regular reviews make the service more reliable, more secure and better for users over time.
A managed service built by a cyber security company.
Cyber security at the core
Endpoint and email security are part of the service from day one, not extra licences bolted on later.
24×7 security operations
Security monitoring and response run around the clock. Service desk hours follow your SONAR plan.
Enterprise technology
NinjaOne, CrowdStrike and Check Point are proven platforms for IT operations and cyber defence.
Australian accountability
You work with a local team. Delivery is Australian, backed by Vectra’s national capability.
A deep specialist bench
When an issue goes past normal support, we bring in our experts in cloud, endpoint, network, incident response, penetration testing and compliance.
One service view
You see how your technology performs, your security posture, open issues and what to fix next, in one place.
Better IT. Stronger security. Less drag on your team.
SONAR is designed to make technology work better for your users, and to take IT and cyber work off your managers and IT staff.
-
Fewer handoffs: one provider owns IT and cyber issues, so you aren’t passed between vendors.
-
Faster fixes: shared device visibility gives our engineers the context to act quickly.
-
More predictable cost: a defined scope turns reactive IT support into a steady monthly cost.
-
Healthier devices: automated patching, software updates, monitoring and fixes keep every device in line.
-
Stronger defence: enterprise endpoint and email protection is backed by people who watch, investigate and respond.
-
Fewer tools to juggle: we run the core platforms and own the service, so you don’t manage separate consoles and alerts.
-
Better visibility: reports and regular reviews show how the service performs, where the risk is and what comes next.
-
More time back: your IT staff and leaders spend less time on routine work and more on the business.
Managed IT and cyber security, without the usual fragmentation.
What is Vectra SONAR?
SONAR is Vectra’s end-to-end managed IT and cyber security service. It brings the service desk, device management, Microsoft 365 support, IT operations, CrowdStrike endpoint security, Check Point Email Security and 24×7 cyber monitoring and response into one service.
Is SONAR a fully outsourced managed IT service?
It can be. SONAR can run your IT and cyber security day to day, as your IT and security team. Or it can work alongside your own IT team, with Vectra providing tools, service desk capacity, specialist engineers, 24×7 cyber operations or other agreed areas. We agree who does what during design and onboarding.
What technology does SONAR use?
NinjaOne for device and IT operations, CrowdStrike Falcon for endpoint security, and Check Point Email Security - formerly Harmony Email & Collaboration - for email and collaboration. Vectra joins them up through its service desk and security team.
Does SONAR include 24×7 support?
SONAR includes 24×7 security monitoring and response. Service desk hours follow your SONAR plan and can be built around your needs.
What does fixed-price managed IT mean?
You pay an agreed recurring fee for the defined scope. That is easier to plan for than paying mostly for hourly support. Project work, or work outside the scope, may be charged separately.
Can SONAR support Microsoft 365?
Yes. SONAR can include day-to-day admin and support for agreed Microsoft 365 services, as well as user, device and security work.
How is SONAR different from a traditional MSP?
SONAR is built to join IT and cyber security. We run the service desk, device management and security operations as one service. That cuts the handoffs you get when the IT provider and the security provider are separate.
Can SONAR replace our current IT provider?
Yes. We assess your current setup, plan the move, roll out our tools, set a baseline, then stabilise and improve the service step by step.
Where is SONAR delivered?
Across Australia. You get a local team and Australian service ownership, backed by Vectra’s national capability and Ensign’s cyber security capability.
Start with a conversation.
Speak to us about your cyber governance and compliance requirements.