Endpoint and Device Security

Ransomware does not start in a server room. It starts on a laptop, on an ordinary Tuesday. Veldtech monitors, patches, backs up, and defends every device your team works on, starting at $13 per device per month for businesses across Sacramento and Citrus Heights.

The Laptop Is the Front Door

Attackers rarely go through the firewall any more. They arrive on the device: an unpatched browser, a stale VPN client, a download that looked entirely routine. The endpoint is both the easiest way in and the exact place where your business stops working when something goes wrong.

What We Actually Stop

Four distinct problems, each needing a different control. Antivirus only addresses part of the first.

  • Ransomware on a working machine

    Encryption starts on one endpoint and spreads outward through everything that user can reach. Containing it at the device is what keeps a bad morning from becoming a bad quarter.

  • The patch nobody installed

    A great many successful attacks exploit a vulnerability that was fixed months earlier. Here, patching is a scheduled and verified process rather than a reminder somebody keeps dismissing.

  • A laptop left in a rideshare

    Encryption, screen lock policy, and remote wipe turn a lost device from a disclosure event into an inconvenience and a hardware replacement.

  • The site that should never have loaded

    Filtering at the DNS layer blocks malicious and look-alike domains before the browser ever connects, which removes a whole class of attack without depending on anyone's judgment in the moment.

Device Security, Priced Per Device Per Month

Each tier builds on the one before it. Plus is where most small businesses land, because backup is what turns a compromised machine into a rebuild rather than a loss. Premium is for businesses that cannot afford to wait for a person to notice.

Basic

$131per device per month

Continuous monitoring and disciplined patching on every machine you run.

  • Device security monitoring
  • Update and patch management

Premium

$351,2per device per month

Stops an attack mid-execution and isolates the machine before it reaches the rest of your network.

  • Everything in Plus
  • Real-time malware containment (EDR)
  • Malware, tracking, and ad DNS filtering
  • Automated threat containment
  • Priced per device per month. This is the one product we count per machine rather than per person, because the work and the risk both scale with machines.
  • Device data backup covers the workstation itself. Server backup and disaster recovery is a separate product starting at $45 per month.
  • Device security is also included in every Total Care tier.

Why Built-In Antivirus Alone Is Not Enough

Windows ships with real protection, and we configure and monitor it on every machine we manage. It is a floor, not a ceiling.

Signature matching only knows yesterday's malware

Traditional antivirus compares files against a list of known-bad. A payload compiled this morning for this campaign is not on any list yet, and by the time it is, it has already run.

Behaviour is the tell, not the file

Our endpoint layer watches what a process actually does: mass file encryption, credential access, unusual outbound connections. That catches attacks that have no signature to match against.

Antivirus does not patch anything

The vulnerability that let an attacker in is a separate problem from the malware they dropped. Patch management closes the door; antivirus only reacts to whatever already came through it.

Detection without response is just a notification

An alert at 2am on a Saturday is worth very little on its own. Automated containment isolates the machine immediately, and we pick it up from there.

What Automated Containment Actually Does

Premium is the tier for businesses where the gap between an attack starting and somebody noticing is the whole risk. Here is what changes.

  • It acts in seconds, not in the morning

    When a process starts behaving like ransomware, the endpoint cuts it off and isolates the machine from the network on its own. No ticket, no phone tree, no waiting for business hours to start.

  • It contains one machine instead of losing all of them

    Isolation is the difference between rebuilding a single laptop and rebuilding your file server, your accounting system, and everything else that laptop could reach.

  • It blocks the site before the browser connects

    DNS filtering stops malicious, look-alike, and tracking domains at the point of lookup. It also removes a good deal of ad-delivered malware without anyone having to make a judgment call under pressure.

Common Questions

Do I still need this if Windows Defender is already running?

Yes, and for reasons that have little to do with Defender's quality. Defender is genuinely good at known-bad files, and we keep it configured and monitored rather than replacing it. What it does not do is patch your software, back up your machine, tell anyone when it has been switched off or is falling behind, or isolate a device that has started encrypting files. Those are the gaps our tiers close, on top of the protection you already have.

Is this priced per device or per person?

Per device, and this is the only product we price that way. Everything else in our catalog is per user. Devices are the exception because the work and the risk both scale with machines rather than headcount: someone with a laptop and a desk computer has two machines to patch, monitor, and back up. When you are estimating cost, count machines rather than staff.

What happens when we buy a new computer?

We enroll it, apply your security baseline, and bring it under monitoring before it reaches the person using it. If you replace hardware often enough that this becomes a recurring cost, we can automate the whole path so a machine ships from the vendor straight to the employee and configures itself at first sign-in. That is a separate service from device security; ask us about device provisioning and we will tell you whether your volume justifies it.

Does the backup in Plus replace our server backup?

No, and it is worth being precise about the difference. Device data backup covers what lives on the workstation itself, which is what you need when one machine is lost, stolen, or encrypted. Servers are a different job with different recovery expectations, and they are covered by a separate product starting at $45 per month. Microsoft 365 data is different again, and that sits with email and cloud security.

What happens if a device is actually compromised?

On Premium, containment happens automatically: the machine is isolated from the network before we have picked up the phone. From there we work out what ran, what it touched, and whether any credentials on that device need resetting. If the machine needs rebuilding, the backup in Plus and Premium is what makes that a scheduled afternoon rather than a reconstruction from memory.

Get Device Security Pricing

Tell us how many machines you run and a Veldtech representative will reach out within one business day with a sized quote.

  • No obligation and no pressure to bundle
  • We will tell you which tier actually fits
  • Straight answers on what your current setup already covers

Prefer to call? (916) 345-3616

Monday–Friday, 8am–5pm

6715 Deerfield Dr., Citrus Heights, CA 95610

We use your information only to respond to this request. See our Privacy Policy.

We do not use advertising or analytics cookies on this site. If you contact us through a form, we collect the information you provide so we can respond to your request. Read our Privacy Policy.