The best cyber security services for a Gauteng business are the ones that close the gaps attackers use most: weak logins, phishing email, unmanaged devices and untested recovery. Start with a risk assessment if you do not know your gaps. Add multi-factor authentication and email protection if your team lives in Microsoft 365 or another cloud mailbox. Choose managed endpoint protection if you have many laptops or remote staff. Move to monitoring and staff training once those basics hold.
The problem is that provider websites list a dozen services under overlapping names. Few of them tell you what you actually receive or what to ask before you sign. Owners in Johannesburg, Pretoria and Ekurhuleni often end up buying tools that nobody on the team can manage.
This article lists five services in the order most small and mid-sized businesses should consider them. Each one explains what it covers and gives you questions to put to any provider. QuikeFix offers all five, so you will also see how we scope each one. Every quote is confirmed in consultation, never guessed from a price list.
1. Cyber security risk and vulnerability assessments
A risk assessment is the consulting service to buy first, because it shows which of the other four services you actually need. It suits any business that has never had its security reviewed, or that must answer a customer or insurer questionnaire.
A good assessment ends in a ranked list of fixes, not a thick report.
What it covers
A risk assessment reviews your users, devices, accounts, backups and suppliers against the threats you face. A vulnerability assessment is narrower. It scans your systems for missing patches and misconfigurations. QuikeFix offers both as a Cybersecurity Risk Assessment and a Vulnerability Assessment, each scoped to your environment. Whoever you hire, expect:
- A list of exposed systems and accounts
- Findings ranked by likelihood and impact
- A recommended fix order, with assumptions and exclusions stated
What to ask a provider
Ask for a documented recommendation, because a raw scanner printout is not an assessment. When you request a quote, give the number of users, locations and devices. A 25-person office with two sites and 30 devices needs a different scope from a team of five in one room. Then ask:
- Will I get a ranked action list or only scanner output?
- Does the scope include Microsoft 365 and cloud accounts, not only the office network?
- Is a retest after the fixes included?
2. Multi-factor authentication and email security
Email and logins are where a large share of incidents begin, so MFA and email protection give the biggest risk reduction for the least effort. This is the cyber security service to buy if your staff use cloud email, especially Microsoft 365.
Switch on MFA for email and admin accounts before you buy anything else.
What it covers
Multi-factor authentication adds a second proof of identity to each login, so a stolen password alone no longer opens a mailbox. Email security and anti-phishing setup filters malicious messages and links and tightens how your domain is protected from spoofing. QuikeFix quotes Multi-Factor Authentication Deployment and Email Security and Anti-Phishing Setup as separate services. A solid project includes:
- MFA on admin accounts first, then all staff
- Filtering of phishing links and attachments
- Sender authentication on your domain, such as SPF, DKIM and DMARC
What to ask a provider
Ask which MFA method they deploy. An authenticator app is stronger than an SMS code. Ask how they handle a staff member who loses a phone, because a weak recovery process undoes the whole control. Then confirm three things:
- Are shared mailboxes and service accounts covered?
- Who tunes the email filter when real mail is blocked?
- Do you test the setup with a simulated phishing message?
3. Managed endpoint detection and response
Managed endpoint detection and response (EDR) watches every laptop, desktop and server for suspicious behaviour and lets a security team act on it. It suits businesses with remote staff, many devices or no in-house IT person to read alerts.
Antivirus blocks known malware, while EDR catches software that behaves badly.
What it covers
A small agent on each device records activity and flags behaviour such as mass file encryption. Analysts can then isolate the device before ransomware spreads. These cyber security subscription services are usually billed per device on a recurring basis. QuikeFix offers Managed Endpoint Detection and Response, quoted from your users, devices and current platform. Make sure the service includes:
- Agents on servers as well as laptops
- Alert review by people, not only by software
- A remote isolation option for infected devices
What to ask a provider
Ask who responds to an alert and during which hours. Get the coverage hours in writing, because an alert at 02:00 matters as much as one at 10:00. Also ask these questions:
- Can you isolate a device without waiting for my approval?
- Is the licence registered in my company’s name?
- Can someone come onsite in Johannesburg or Pretoria if a device must be rebuilt?
4. Managed security monitoring and incident response
Managed security monitoring gathers alerts and logs from your systems and has people review them. An incident response plan sets out what happens when something gets through. Together they suit businesses that cannot staff an overnight watch, or that face customer or regulatory review.
Write your response plan before the breach, not during it.
What it covers
Monitoring pulls signals from firewalls, endpoints and Microsoft 365, then escalates what matters. QuikeFix offers this as Managed Security Monitoring, with coverage hours set in the quote. The Incident Response Readiness Plan is the paper side. POPIA expects you to secure personal information and to notify the Information Regulator of a compromise, so the plan should name who does what. A usable plan lists:
- Decision makers and contact numbers
- Containment steps for accounts and devices
- The order in which systems are restored from backup
- Who notifies the Information Regulator and affected people
What to ask a provider
Ask for response targets in writing and for the exact hours covered. Ask whether the plan includes a restore test, since backups that were never restored are a common gap. Confirm that you keep ownership of your logs if you leave the provider. Finally, ask for a walk-through of the plan with your own managers, so the first time they read it is not during an attack.
5. Security awareness training
Security awareness training teaches your staff to spot phishing, fake invoices and unsafe file sharing. Anyone who handles email, payments or customer data needs it, which in practice means almost every business.
Your staff are the control that attackers test first, so train them.
What it covers
Good training uses short lessons, simulated phishing messages and a simple way to report a suspicious email. It repeats through the year instead of happening once. QuikeFix offers Security Awareness Training, scoped by the number of users. Look for completion records too. They are useful when a customer or auditor asks how you manage staff risk.
What to ask a provider
Ask whether the examples reflect South African scams, such as fake SARS notices and requests to change supplier banking details. Staff learn faster from threats they recognise. Then check three things:
- Is training ongoing or a once-a-year session?
- Do you get reports on who completed it and who clicked a test link?
- Can sessions be short enough to fit around normal work?
Where to start with your own security
Pick the service that matches your biggest gap. If you do not know it, begin with an assessment. Then work through MFA and email protection, endpoint detection, monitoring with a response plan, and staff training. Each step reduces risk on its own, and you can add the next as your users, devices and locations grow.
Whichever provider you choose, ask for a written scope, stated exclusions and agreed coverage hours before you sign. Cyber security work depends on your environment, so a fair provider quotes after a short review, not from a fixed price tag.
If you want a second opinion on where your gaps are, request a cybersecurity consultation with QuikeFix. Tell us your number of users, locations, devices and main concern, and we will scope the right starting point.
