GreyCybersecurity
Under attack? Book a consultation

Protection at every layer.

Eight core disciplines across the full security lifecycle, delivered by our Calgary-based team — from testing your defenses to responding when something goes wrong.

Phase 01

Assess

Find the weaknesses that matter before an attacker does.

01

Penetration Testing

Vulnerability assessments and penetration tests that find your weaknesses the way an attacker would — before one does.

Vulnerability assessmentPenetration testingRisk-based prioritizationClear remediation guidance
Phase 02

Harden

Close gaps across your network, data, identities and configuration.

02

Network Security

Firewalls, segmentation and intrusion prevention that keep attackers out — and contain them if they get in.

Perimeter defense & firewall managementNetwork segmentationIntrusion detection & preventionSecure remote access
03

Data Encryption

Encryption at rest, in transit and in use, with managed keys and compliance-ready standards.

Full-spectrum encryptionAutomated key managementCompliance-ready standardsEndpoint & device protection
04

Identity & Access

MFA, least privilege and privileged-access controls so only the right people reach the right systems.

Multi-factor authenticationLeast-privilege enforcementAutomated onboarding & offboardingPrivileged access management
05

Security Configuration

CIS-based hardening, drift detection and attack-surface reduction across servers, endpoints and network devices.

Hardening baselinesDefault credential eliminationAutomated drift detectionAttack surface reduction
Phase 03

Monitor

Watch your environment around the clock and catch threats early.

06

Security Monitoring

24/7 SIEM-based detection mapped to MITRE ATT&CK, with investigation and response when alerts fire.

SIEM deployment & management24/7 detection & alertingLog management & retentionInvestigation & response
Phase 04

Respond

Contain incidents fast and restore operations from tested backups.

07

Incident Response

Rapid, expert-led response that contains active threats, finds the root cause and restores operations.

Rapid containmentInvestigation & root-cause analysisRecovery & restorationIncident readiness planning
08

Backup & Recovery

Immutable, tested backups and recovery plans that get you operational fast after ransomware or failure.

Automated, scheduled backupsOffsite & cloud storageTested recovery proceduresRansomware-resilient architecture

How we work

A clear path from exposure to resilience.

Every engagement follows the same disciplined cycle — so you always know what we're doing, why, and what comes next.

  1. 01

    Assess

    We map your environment and test it the way an attacker would, through vulnerability assessments, configuration reviews and penetration testing.

    Vulnerability assessmentPenetration testing
    Penetration testing
  2. 02

    Harden

    We close the gaps that matter most first — segmentation, encryption, identity controls and secure configuration baselines.

    ConfigurationIdentityEncryption
    Hardening services
  3. 03

    Monitor

    SIEM-based monitoring watches your systems around the clock, with detection rules mapped to MITRE ATT&CK.

    24/7 monitoringSIEM
    Security monitoring
  4. 04

    Respond

    When something happens, we investigate, contain the threat and restore operations from tested backups.

    Incident responseRecovery
    Incident response

FAQ

Questions we're often asked.

Can't find what you're looking for? Ask us directly — we're happy to help.

Do you work with small and mid-sized businesses?

Yes. Our clients range from growing online retailers and professional services firms to established law firms and mid-market enterprises. Every engagement is scoped to your size, risk and budget.

How much do your services cost?

It depends on the size of your environment and what you need. After an initial consultation you'll receive a clear, upfront quote — with no hidden fees and no surprise add-ons at renewal.

How does an engagement start?

With a conversation. We learn about your environment, your concerns and any compliance requirements, then recommend where to start — often with an assessment that shows where your biggest risks are.

Do you provide 24/7 monitoring?

Yes. Our security monitoring service watches your systems around the clock, with detection rules mapped to the MITRE ATT&CK framework and investigation whenever an alert fires.

We think we've been breached. What should we do?

Call us right away, and follow the first steps on our incident response page. Isolate affected systems, but don't power them off or delete anything — evidence matters.

Can you help us meet compliance requirements?

Yes. Our work aligns with frameworks including ISO 27001, SOC 2, PCI DSS, HIPAA and PIPEDA, and we've helped clients achieve PCI DSS compliance through a formal security audit.

Will new security controls slow our team down?

They shouldn't. We design controls around the way your team works, so protection runs quietly in the background. For one online retailer, we secured payments without slowing checkout.

What if the results don't meet what we agreed?

We stand behind every engagement. If your security posture doesn't meet the standard we agreed on, we make it right — no exceptions.

Where are you located?

Our head office is at 388 4th Avenue SE in Calgary, Alberta.

Next step

Find the gaps before someone else does.

Tell us about your environment and what's worrying you. We'll help you decide where to start.

Book a consultation

Prefer to talk?