Our security stack — the tools behind the promise
The security stack Key IT runs for Melbourne businesses: EDR, MDR with 24/7 SOC monitoring, Datto immutable backup and more. Most MSPs won't show theirs.
Key IT's security stack is the layered set of tools we run to protect Melbourne businesses on our managed IT and cybersecurity plans: EDR on every device, MDR through Key IT's 24/7 SOC service, Datto RMM and immutable backup, identity and email protection, patching, vulnerability scanning, DNS filtering and staff phishing training.
Most IT providers will not tell you what tools protect your business. We will. Transparency is itself a security signal — if a provider cannot describe their stack, ask why. Here is what we run, and why each piece is there.
What's in Key IT's security stack?
The stack covers eleven areas, each with a specific job:
Endpoint detection and response (EDR)
behavioural protection on every device, not just signature antivirus.
Managed detection and response (MDR) / SOC
a specialist Security Operations Centre service watching for attacker behaviour 24/7.
Remote monitoring and management (RMM)
Datto, for monitoring, patching and maintenance at scale.
Identity protection
SaaS Alerts and Microsoft Entra controls, watching for account compromise.
Email security
filtering, impersonation protection and sandboxing in front of every inbox.
Backup
Datto immutable backup for Microsoft 365 and on-premise data, with tested recovery.
Vulnerability management
regular vulnerability scanning and prioritised remediation.
Documentation
IT Glue, so your environment is recorded and response is fast.
Patch management
operating systems and applications kept current inside agreed windows.
Security awareness training
simulated phishing and short training to lift your team's defence.
DNS filtering
blocking known-malicious destinations before they load.
What happens if a phishing email gets through?
No single tool stops every attack, so each layer is there to catch what the one before it missed. Say a convincing fake invoice is sent to your accounts team. Email security filtering catches many of these before they reach an inbox. If one lands, DNS filtering blocks the link when it points to a known-malicious site, and staff who have practised on simulated phishing are more likely to stop and report it. If someone opens a malicious attachment anyway, EDR flags the unusual behaviour on the laptop and Key IT's 24/7 SOC service can isolate the device before the attack spreads. If a password is typed into a fake login page, identity monitoring flags the suspicious sign-in. And if ransomware still reaches shared files, they can be recovered from the immutable Datto backup, so you are not forced to pay a ransom to get them back.
Why doesn't Key IT name every security product?
Some specifics we keep private on purpose — telling the world exactly how a defence is configured helps attackers, not clients. We are transparent about our approach and the categories of tooling; the fine detail of certain controls stays controlled.
How does Key IT choose its security tools?
We choose each tool on four tests: Australian data residency, fit with the Microsoft ecosystem, a proven track record, and the ability to integrate into a single managed picture. We review the stack regularly and update it as the threat landscape changes — see our security approach for the thinking behind it.
Several layers map directly onto the Australian Signals Directorate's Essential Eight — regular backups, multi-factor authentication, and patching of applications and operating systems — so the same stack is how we lift clients' Essential Eight maturity.
Frequently asked questions
What security tools does Key IT use?
A layered stack: EDR on every device, MDR backed by 24/7 SOC monitoring, Datto RMM and backup, identity monitoring, email security, vulnerability scanning, documentation, patch management, awareness training and DNS filtering.
Why does it matter what tools my provider uses?
Because the tools determine what threats can be caught and how fast you recover. A provider who cannot describe their stack may not have a coherent one.
Is my data kept in Australia?
We select tools with Australian data residency where it matters and design for onshore data handling.
What is the difference between EDR and MDR?
EDR (endpoint detection and response) is software on each laptop and server that watches for suspicious behaviour, such as a process encrypting files, and can stop it. MDR (managed detection and response) adds the people: security analysts who watch those alerts around the clock, investigate and respond. Key IT delivers MDR through its 24/7 SOC service.
What should a small business IT security stack include?
At minimum: EDR on every device, multi-factor authentication with sign-in monitoring on Microsoft 365, email filtering, automatic patching, and backups with an immutable copy you have test-restored. Add 24/7 monitoring so alerts are acted on, plus regular phishing training. Small firms are targeted too — see why size is no protection.
Do you update the stack over time?
Yes. We review it regularly and change tools as threats and technology evolve.
Is this stack included in managed services?
The core security tooling is part of our managed IT and managed cybersecurity services, scaled to your needs.
What our clients say
Imported from our Google reviews — real Melbourne businesses we look after, in their own words.
Read & review us on Google →Key IT are computer wizards who have become an important resource for the smooth running of our businesses. They are reliable, a pleasure to deal with and always willing to solve any technical emergency we may confront, whether it requires an on-site visit or via phone support. We highly value their work and recommend them unreservedly!
The team at Key IT have been extremely helpful to our organisation right from the beginning. They have left no stone unturned in their quest to fulfil all our IT needs — including reorganising our IT infrastructure, setting up our network and phone systems, and migrating us to Azure — and are always there to help us when needed. Their knowledge is second to none. Without the team our business would have been in turmoil.
I have always found the team at Key IT to be fast, knowledgeable and professional. We run a number of different businesses from the one server, and my office staff often need assistance solving varied issues. Key IT always comes to the rescue and gets us back on track in a timely fashion. I would have no hesitation recommending the team.
We couldn't be happier that Key IT's expert IT skills popped into our lives here at Premium Capital Finance. Their sheer professionalism is second to none, whether it's their accessibility over the phone or dropping into our office on site — they always do an exceptional job. Would recommend to anyone who needs a reliable, knowledgeable IT expert.
Thank you to the Key IT team. You have always been available, knowledgeable and ready to help with all our IT needs and issues — from expert advice and troubleshooting to hardware. We don't have the time or capability to do it ourselves, and are comfortable knowing you're just a phone call away. You consistently meet all our needs for timely service, quality workmanship, expert advice and competitive pricing. We highly recommend Key IT and their team.
We've been working with Elias at Key IT for our IT support for the last 8 years, and have been most satisfied with their knowledge and service. In an office of non-technically minded workers, whenever we face an issue, Key IT responds promptly. They are patient and professional, and explain issues in plain English. They understand our IT needs, and we call on them whenever we need an upgrade.
150+ Melbourne organisations, looked after every day
From manufacturing and healthcare to finance, body corporate and professional services — a few of the businesses whose IT and security we run every day.
Book your free IT & Cyber Security Review
See exactly where your IT and security stand, and what to fix first. No jargon, no obligation.