Every environment we take on starts with the same baseline. Those are the controls ASD prioritises, aligned with ASD Essentials, so you have a clear answer when an insurer or customer asks how your IT is secured.

Patching tracked to completion, not just scheduled
Microsoft 365 and Google Workspace set to a documented baseline
Continuous monitoring of devices and servers, with alerts reviewed by our team and response targets agreed in writing

See per-user plans Add managed security

Baseline controlASD strategy

MFA for users and adminsMulti-factor authenticationEvery plan
Admin rights kept tightRestrict admin privilegesEvery plan
Applications patchedPatch applicationsEvery plan
Operating systems patchedPatch operating systemsEvery plan
Office macros restrictedRestrict Office macrosEvery plan
User applications hardenedUser application hardeningEvery plan
Backups proven by restoringRegular backupsSecure+Included in Secure+, and an add-on in Essentials and Business
Application controlApplication controlAdd-onAllow-listing approved programs, available as an add-on

How closely each control is checked depends on the plan: see the plan comparison.

Server rack with patch cabling, networking equipment and an orange fibre lead

Managed IT

Tidy infrastructure is easier to defend

A labelled rack, a documented network and a current asset list make every later job faster, from setting up a new starter to handling an incident. We help keep that record current as part of running your IT, so less depends on one person's memory.

03Read the detail

Managed IT, explained

In short

Security-first managed IT means your IT is run by a cyber security company. Catharsis, based in Sydney, provides helpdesk support, identity management, Microsoft 365, networks, backup, hardware and licensing, with multi-factor authentication, patching and monitoring built into every plan rather than sold as extras. Backup is included in Secure+ and an add-on in Essentials and Business.

Where should you start?

Most organisations start with IT support and helpdesk, which covers the day-to-day running of devices, patching and user requests. The other services can sit inside that plan or stand alone:

Accounts and access: user and identity management for joiners, leavers, MFA and admin rights.
Collaboration platform: Microsoft 365 and Google Workspace setup, migration in either direction and administration.
Connectivity: network deployment, management and configuration, from Wi-Fi and firewalls to office moves.
Recovery: backup, cloud and disaster recovery designed to survive ransomware.
Buying: IT hardware procurement configured before delivery, and software licensing with renewals and true-ups tracked for you.

How is this different from a typical IT provider?

The people who look after your IT understand how attackers work, so a strange login is treated as a possible incident rather than a password reset. Multi-factor authentication, prompt security updates and tested backups are the first actions in ASD’s Small business cyber security handbook. MFA and prompt security updates are part of the service from the first day, and backups we manage are tested by restoring them. For deeper protection, our managed security service adds threat monitoring and response.

We also protect our own access to your systems. Our engineers use named accounts with phishing-resistant MFA, and Microsoft partner access (GDAP) is least-privilege and limited in scope and time.

How do we handle urgent issues?

Requests to our helpdesk are ticketed and prioritised, so a business-stopping problem is handled ahead of routine changes. Response targets and coverage, including any extended cover, are agreed with you in a written service level agreement (SLA) based on your requirements. We would rather agree what you need than promise cover in advance.

What do you need to start?

You don’t have to buy a firewall from us to start. If you already have an internal IT person, we work alongside them in a co-managed arrangement, with the shared responsibilities agreed in writing during the initial engagement. Onboarding starts from $99 per user, once-off, and is waived on a 36-month agreement (see plans and pricing).

04FAQ

Managed IT, answered.

Can't see your question? Ask a specialist and get a straight answer.

Ask a specialist

What is security-first managed IT?

Security-first managed IT is IT support where security controls are part of the everyday service, not an optional extra. With Catharsis, that means multi-factor authentication enforced for users and admins, admin rights restricted, devices patched and monitored, and, where we manage your backups, backups tested by restoring them. Security decisions are made by people who specialise in them, rather than added later as a product.

Do you offer per-user pricing for managed IT?

Yes. Per-user plans are available, so your monthly cost grows in step with your team. Your price depends on the number of users, servers and sites, and how much security uplift your environment needs at the start. Projects such as migrations and office moves are quoted separately, and hardware and licences are quoted per order.

What size of organisation do you support?

Our managed IT services are designed for organisations with 5 or more staff, including businesses, not-for-profits, councils, schools and health providers. There is no upper limit. Larger organisations, or those with complex requirements, get a tailored proposal, and we can work alongside an internal IT team in a co-managed arrangement.

Can you take over from our current IT provider?

Yes. We plan the handover so your staff keep working throughout. We document your users, devices, accounts and network, collect admin credentials and licence details from the outgoing provider, deploy our monitoring and apply our security baseline. Gaps found during handover, such as former staff with active accounts, are closed as a priority.

Can government organisations buy managed IT from Catharsis?

Yes. Catharsis is registered on BuyICT, the Australian Government's digital marketplace, and on buy.nsw as a NSW Government supplier. We can provide the security documentation procurement teams usually ask for, such as our certificate and policies. Councils, schools, health services and agencies can talk to us about the scope they need and how to engage us.

Managed IT

Want IT run by a security team?

No obligation. You talk to the people who do the work. Enquiries usually get a reply within 3 business days.

Offered at our discretion. Offer terms.