Security readiness and framework assessment
Compare the available frameworks, set a scope and turn findings into an improvement plan without confusing technical delivery with certification.
Enterprise engineering
Turn security requirements into verifiable technical work, and know who responds when something happens.
Kritical assesses configuration, prioritises remediation and implements agreed security improvements across identity, endpoints, networks and infrastructure. The scope is tied to the systems and responsibilities your organisation controls, with a written proposal before anything changes.
On this page
Choose where to start.
Jump to the part that matches the problem or decision in front of you.
Use the arrows or scroll to see every card.
How CrowdStrike frames the Falcon platform.
CrowdStrike describes Falcon as a single lightweight agent that gathers security data once and uses it across endpoint, cloud, identity and SaaS protection, built on AI trained on frontline threat intelligence rather than signature updates alone. You don't have to guess what that buys you operationally; we explain what a managed detection and response service does in plain words before you compare it against what you run today.
Three situations bring people to this page.
- A security renewal is coming up You want a like-for-like comparison against your current provider, not a generic quote built to win on price. Send us your renewal and we'll prepare one.
- A framework assessment has been requested by a customer or insurer Essential Eight, ISO 27001 or another named standard has to be addressed and nobody's turned it into a work plan yet.
- Antivirus alone no longer feels like enough Something got close enough recently that self-managed protection stopped feeling sufficient.
What you get: findings that separate what's implemented from what's assumed.
A useful assessment identifies the environment, the applicable requirements and the evidence available. We separate implemented controls from documented intentions and unresolved assumptions, then turn findings into a prioritised work programme, with the system owner and approval path identified for each material change.
Work from the security framework your organisation needs.
Kritical can assess and improve technical controls against nominated Essential Eight, Information Security Manual, CIS Controls, CIS Benchmarks, SMB1001, ISO/IEC 27001 or NIST Cybersecurity Framework requirements. The framework version, applicability, systems, evidence and assurance role are agreed before work begins.
Essential Eight
Establish a maturity baseline and sequence practical improvements across applications, identity, patching and recovery.
Make secure work possible outside the office.
Connect identity, managed devices, application access, information controls, endpoint protection and recovery so the user can work from the office, home, a client site, hotel, cafe or airport without making the location the security boundary.
- Secure work anywhere Map the user journey and stage the Microsoft identity, device and access controls around it. Learn more
Why Kritical for remediation.
A security improvement may require changes across authentication, permissions, operating systems, network access or recovery. We scope those dependencies before implementation so one control doesn't break a required service, with exceptions, testing and rollback arrangements recorded and business decisions retained by your organisation.
Operational and IT environments, kept apart on purpose.
Critical sites often run operational technology beside corporate IT. We design and review the separation between them so one side's problem doesn't become the other's.
OT and IT segregation
Network segregation and tiered firewall layers between operational systems, corporate systems and the outside world.
Public-facing application protection
Web application firewalls and load balancers in front of exposed applications, with administration limited to the people who need it.
Vulnerability management
Finding, prioritising and fixing weaknesses is its own service.
How endpoint protection is priced.
Kritical's endpoint renewal offer focuses on CrowdStrike Falcon Complete. We compare your current product, coverage and incident-response responsibilities before putting the prices side by side, so you can see what changes, who responds when something happens, and what the proposed service costs.
- Falcon Complete Fully managed detection and response, watched around the clock. Current product pricing and availability stay in the Shop. Learn more
- Falcon Complete Fully Managed Everything in Complete, plus Kritical managing the CrowdStrike relationship and escalation path directly on your behalf. Product pricing stays in the Shop and Kritical's management service is quoted separately. Learn more
What handover looks like.
You receive a record of the configuration reviewed, tests completed, changes made and risks still open. If you also need legal advice, formal certification or an independent compliance opinion, we identify that requirement and the appropriately qualified party rather than burying it inside a technical project.
- First call We confirm the systems, the framework or renewal driving the request, and what evidence exists already.
- Get a quote Send the systems and constraints involved and we quote the work. Learn more
Explore the technology behind the service.
These links explain the vendor platforms. Kritical turns that information into a practical scope for your environment, including what we deliver and what your team owns.
Explore the technology behind the service.
Explore the relevant technologies.
- CrowdStrikeCrowdStrike Falcon endpoint protection and Falcon Complete MDR, scoped with clear coverage, onboarding, operating ownership and escalation.
- Check PointHarmony Email protection against phishing and business email compromise, quoted and set up with a named owner for every alert.
- DNSFilterDNS filtering that blocks malicious and unwanted sites on devices in the office and away from it, with rules and exceptions agreed up front.
- Keeper SecurityPassword management for shared logins, with fast removal of access when someone leaves.
Decide whether the next question is security or performance.
A security requirement is only useful when the affected systems, evidence and responsibility are clear. Set that boundary, then follow the evidence into the specialist investigation it needs.
Decide whether the next question is security or performance.
Questions before you enquire
Can you work against a control framework?
We can scope technical work against your nominated requirements. Confirm the exact framework, applicable controls and assessment expectations before delivery.
Is this an incident-response hotline?
This page covers planned assessment and remediation. Existing customers should use their agreed support route; urgent response or ongoing incident coverage requires a separately agreed service.
Can you replace our current endpoint security?
The Falcon Complete renewal route can assess the current scope and a proposed replacement. Migration responsibilities, prerequisites and pricing are confirmed in the quote.
What does managed detection and response mean?
CrowdStrike operates the Falcon Complete platform and response service for covered endpoints under the contracted scope. Kritical helps you choose coverage and defines the Kritical contact and escalation route in its proposal.
Will Falcon Complete always be cheaper than what we run now?
No, and we don't try to win a renewal on price alone. We quote a like-for-like replacement against your actual incumbent: same devices, same term, same response commitments.
Related services
Identity & access
When access is inconsistent, over-permissioned or difficult to recover, Kritical improves identity across Active Directory, Microsoft Entra ID and connected applications, so people and services get the access they need and nothing more than that.
Security readiness
Frameworks are useful when they help you decide what to protect, which gaps matter and what evidence should exist.
Essential Eight
If your Essential Eight position is unclear, Kritical turns the maturity model into a scoped technical baseline, visible gaps and a clear remediation sequence across the systems your organisation controls — assessed, not certified, and quoted.
Secure work anywhere
Your people should be able to pick up a managed device in the office, at home, at a client site, in a hotel, cafe or airport and keep working without bypassing security to get things done.
Networks
When connectivity, segmentation or platform integration is limiting the business, Kritical assesses and changes the network around application requirements, so your team can resolve the constraint and operate it with confidence afterwards.
Backup & recovery
Kritical assesses backup and disaster-recovery arrangements against the systems your organisation needs to restore.
CrowdStrike Falcon Complete
Antivirus tells you a file looked suspicious after the fact.
Vulnerability management
Most organisations know they have vulnerabilities. The hard part is knowing which ones matter, getting them patched without breaking anything and showing that the job is done. Kritical scans, prioritises and remediates vulnerabilities and patches, then checks the fix and reports the result in plain terms. Send us a few details and we will come back with a clear plan and a written quote.
Business email compromise & phishing
Business email compromise is a message that looks like it came from your boss, your supplier or your bank and asks someone to pay, change bank details or sign in.
Let’s define the next step.
Tell us what you want to achieve, what you have today and when it matters.