Nectar Security Stack

Two Tiers of Managed Cyber Security, Built for New Zealand SMEs

Every business needs the essentials covered. Some need more. NecSec Defend and NecSec Protect are Nectar’s two managed cyber security tiers, giving you continuously monitored, actively defended protection, scaled to match your risk, your industry, and your compliance needs.

Secure Your Business Now
Ashlee, a Nectar service desk engineer, wearing a headset at her desk

NecSec Defend isn’t a product you install and manage yourself. It’s a fully managed security service, hardened to the CIS Implementation Group 1 (IG1) standard across your Microsoft 365 environment and every device your team uses. Nectar owns the monitoring, the response, and the outcome, not just the alerts.

Shield icon

CIS IG1 Environment Hardening

Your Microsoft 365 tenant and every device are hardened to the CIS Implementation Group 1 (IG1) standard from day one, with identity and device policies deployed and enforced through Microsoft Intune. This isn’t a one-off scan. It’s maintained and kept aligned as an ongoing standard.

Threat intelligence icon

24/7 Threat Detection and Response

Active threat hunting across your devices and accounts, monitored around the clock. When something is found, it’s dealt with immediately, not just flagged for you to action.

Training icon

Security Awareness Training

Regular phishing simulations and structured staff training, because your people are one of the most targeted parts of your business.

Backup icon

Backup, Password, and Domain Protection

Your Microsoft 365 data is backed up and recoverable, your team’s credentials are properly managed, and your domain is protected from being used to impersonate you.

Reporting icon

Documented Plans and Reporting

A cyber incident response plan, a full policy library, and monthly and quarterly reporting so you always know exactly where you stand.

NecSec Protect includes everything in Defend, then raises the bar to the CIS Implementation Group 2 (IG2) standard, a materially higher bar than most managed security providers deliver. It’s built for businesses with compliance obligations, regulatory requirements, or a genuine need for tighter control over what runs on their systems and who can access what.

Expertise icon

CIS IG2 Environment Hardening

Your Microsoft 365 tenant, every device, and your servers are hardened to the CIS Implementation Group 2 (IG2) standard, with deeper Intune device policy and cloud configuration than Defend provides.

Application control icon

Application Control

Only approved software runs on your systems, fully controlled, so unknown or unauthorised applications simply can’t execute.

Identity protection icon

Elevated Identity Protection

A Zero Trust approach to identity, covering every user, device, and administrator account, with tightly controlled access to your most sensitive systems.

Data loss prevention icon

Data Loss Prevention

Sensitive data is protected from leaving your business through email, uploads, or removable media.

Certification icon

Certification Support

Nectar supports you all the way through SMB1001 Gold certification, with annual recertification included.

Hive is Nectar’s managed IT support add-on, available alongside NecSec Defend or Protect. It gives your team unlimited remote IT support for a single predictable monthly fee, so security and IT support come from the same accountable team, not two providers pointing fingers at each other.

Remote support icon

Unlimited Remote Support

Your team can reach our service desk as often as they need, with no per-ticket charge and no monthly cap.

Device management icon

User and Device Management

New starters, leavers, device policies, and day-to-day Microsoft 365 administration, all handled for you.

Single invoice icon

One Provider, One Invoice

Security and IT support from a single team, so nothing falls through the cracks between separate providers.

Shield icon

NecSec Defend

$90/user/month

Your security foundation. Continuous monitoring and active defence, hardened to CIS IG1.

Expertise icon

NecSec Protect

$140/user/month

For when more is required. Deeper hardening to CIS IG2, application control, and certification support.

Support icon

Hive Add-On

$50/user/month

Unlimited IT support, layered onto Defend or Protect.

Final pricing may vary based on your environment and requirements.

Book a 15-Minute Strategy Call

Identify vulnerabilities with a CIS audit for Microsoft 365, AWS, or Azure, or a lightweight SMB1001 readiness assessment.

Two managed cyber security tiers, NecSec Defend and NecSec Protect, plus Hive IT support.

Simulated phishing campaigns and structured staff training to reduce human error.

Tested disaster recovery plans, not just backups, with annual DR testing.

Rapid mobilisation, containment, and recovery when a security incident happens.

Register your details below and one of our team members will be in touch.

Frequently Asked Questions

What’s the difference between NecSec Defend and NecSec Protect?

Defend is the security foundation most SMEs start with: continuous monitoring, active defence, and environment hardening to the CIS IG1 standard. Protect includes everything in Defend, then raises the bar to CIS IG2, adding application control, elevated identity protection, and certification support for businesses with compliance obligations.

Can we add Hive without changing our security plan?

Yes. Hive is an add-on available alongside either NecSec Defend or NecSec Protect — it doesn’t require switching plans, it just adds unlimited IT support on top of whichever security tier you’re on.

Do we need to be on Protect to get SMB1001 certification?

SMB1001 Gold certification support is included as part of NecSec Protect. If you’re on Defend and certification becomes a requirement, we can help you assess whether it’s time to step up to Protect.

Is pricing per user or per device?

NecSec Defend, NecSec Protect, and Hive are all priced per user per month. Final pricing may vary based on your environment and requirements — book a strategy call for a tailored quote.

"*" indicates required fields

Find out how we can work together

Contact us