Gold is the top tier of Fortellar's Managed Security Services. Full lifecycle management across endpoints, identity, and cloud, integrated detection telemetry with incident triage, mock audits, and 24×7 support with major-incident coordination.
Being covered is one thing. Having the whole program owned is another.
Once detection and compliance are in place, the ceiling stops being visibility and becomes ownership. Every new environment, framework, and privileged account adds surface area a shared team can only skim. Cloud spend drifts. DR plans go untested. You closed the security gap; what's left is the operational load.
Gold takes that load off you. Lifecycle managed end to end, detection telemetry triaged, audits rehearsed, backup proven, cost held in check, and 24×7 support underneath it. SOC-as-a-service and a dedicated TAM extend it as add-ons.
What's left once you're covered
01
Threat hunting
Alerts still need someone working through them at three in the morning.
02
Surface growth
Every new environment, framework, and privileged account adds load.
03
Cost governance
Cloud and tooling spend drifts when nobody owns the review.
04
Executive support
The VIP before a board meeting waits in the same queue as everyone else.
Who Gold is for
Three situations where Full Optimization is the right tier.
Situation 01
Detection isn't enough. You need it run for you 24×7
You have telemetry and alerts, but no one hunting through them around the clock and no guaranteed response when something serious surfaces. In-house coverage stops at the end of the workday, exactly when incidents don't.
The outcomeEDR, CSPM, and SIEM telemetry monitored with security incident triage and containment coordination, on 24×7 support with major-incident handling. Full SOC-as-a-service and advanced threat hunting extend it as an add-on.
Situation 02
Audits, cloud spend, and lifecycle are eating your team
Every framework, every new environment, and every privileged account adds work that a stretched team can only keep up with. Cloud costs drift, DR goes untested, and audit prep still lands as a project every year.
The outcomeFull lifecycle and cloud resource management, cost governance, and end-to-end audit support, so the operational load moves off your team.
Situation 03
Critical roles and users need white-glove support
Executives, deal teams, and mission-critical systems can't sit in the same queue as routine tickets. You need a partner who knows your environment and a single accountable owner when it matters most.
The outcome24×7 support with major-incident coordination as standard, and concierge, VIP, or dedicated technical account management added where specific roles justify it.
What's included in Gold
Everything in Silver, plus full lifecycle, detection telemetry, and audit support
Everything Bronze and Silver run, now with the environment operated end to end on your behalf. Full SOC-as-a-service, advanced threat hunting, and concierge or dedicated TAM support remain add-ons on top of it.
EDR, CSPM, and SIEM monitoring with incident triage
Security telemetry implemented and monitored, with alerts triaged, incidents assessed, and containment and escalation coordinated. Full SOC-as-a-service with advanced threat hunting is available as an add-on.
Performance monitoring with capacity dashboards
CPU, storage, and network utilization monitored across the estate, with dashboards on performance, capacity, and utilization so constraints surface before users report them.
Full lifecycle & cloud engineering
End-to-end management of endpoints, identity (full JML), and cloud resources, including standardized IaC templates and governed provisioning across every environment.
Cost optimization and waste reduction
Unused resources identified, cleanup recommended, and cost hygiene enforced across your cloud footprint. Full cost governance with budget and chargeback forecasting is available as an add-on.
Mock audits and managed continuity
Mock audits coordinated with internal reviews and evidence readiness checks, plus full backup, continuity, and disaster-recovery management with quarterly restore tests. End-to-end auditor liaison is an add-on.
24×7 support with major-incident coordination
After-hours support and major-incident handling as standard, with concierge, VIP, and dedicated technical account management available for the roles and systems that warrant it.
Where Gold sits
Full Optimization is the top tier. Lifecycle, detection, audit, and cost handled for you.
At Gold, running the environment stops being your team's job. Lifecycle, detection, audits, backup, and cost are operated for you, with 24×7 cover underneath. Your people move from keeping the lights on to deciding where the business goes next.
Bronze
Core Coverage
Manual support and baseline configurations for small teams getting started with managed services.
Four steps that move the operational load off your team.
Step 01
Take over the lifecycle
Endpoints, identity, and cloud resources move to full lifecycle management. Fully automated imaging with a hardening baseline, the complete joiner-mover-leaver workflow with license management, and governed provisioning through to decommission.
You walk away with
Automated imaging with a compliance and hardening baseline.
Full JML workflow including license management.
Cloud and infrastructure lifecycle managed end to end.
Step 02
Instrument detection
EDR, CSPM, and SIEM deployed and integrated, with telemetry collected and monitored. Security incidents triaged, assessed, and coordinated through containment, backed by advanced privileged access and conditional access policy.
You walk away with
EDR, CSPM, and SIEM integrated and monitored.
Security incident triage and containment coordination.
Conditional access and session monitoring in force.
Step 03
Close the audit and resilience gap
Mock audits coordinated and evidence readiness checked before fieldwork. Backup and continuity fully managed with quarterly restore tests, and the risk program expanded to operational, vendor, data, and cloud categories under continuous review.
You walk away with
Mock audits and evidence readiness checks on cadence.
Managed backup and continuity with quarterly restore tests.
A multi-category risk program under continuous review.
Step 04
Optimize and hold the line
Rightsizing and waste reduction across the cloud footprint, performance dashboards on capacity and utilization, and IaC standardized into reusable templates. 24×7 support with major-incident coordination runs underneath all of it.
You walk away with
Cost hygiene enforced with rightsizing and cleanup.
Performance, capacity, and utilization dashboards.
24×7 support with major-incident coordination.
Cost calculator
Estimate your monthly and annual investment.
Adjust your headcount and tier to see a ballpark. Gold is priced per person, so the number scales cleanly with your team.
50 seats
Estimate only. Final pricing depends on environment complexity, compliance scope, and device count. We confirm everything in the discovery session.
Silver · Enhanced Protection
Estimated monthly
$26,300
Annual (billed yearly)
$315,600
Works out to $526 per person / month at the Silver tier.
Compare all tiers
Bronze, Silver, and Gold, side by side.
Gold is the top tier, with lifecycle, detection, audit, and cost handled for you. The Bronze and Silver columns show the foundation it's built on, so you can see exactly what moves from add-on to fully managed at Gold.
Features
Bronze
Silver
Gold
On-Prem / Shared Resource SupportMaintain company-shared infrastructure and internal resources
Full Infrastructure Lifecycle SupportFull support of shared resource infrastructure including provisioning, maintenance, decommission, lifecycle tracking
Full SOC as a Service + Advanced Threat Hunting24/7 monitoring, threat hunting, alert correlation, forensic investigation readiness
Add-On
Add-On
Add-On
Expertise this work draws on
The components behind Full Optimization.
Technology & Security Operations
Detection Engineering & Incident Triage
EDR, CSPM, and SIEM telemetry collected and monitored, with alert triage, incident assessment, and containment coordination on the same unified toolset as Bronze and Silver.
Mock audits, internal reviews, and evidence readiness checks coordinated ahead of fieldwork, so assessments start from a maintained record rather than a scramble.
Rightsizing, waste reduction, and continuous cost hygiene alongside full backup, continuity, and disaster-recovery management with quarterly restore tests.
Not sure Gold is the right tier? That's what the session is for.
Bring your headcount, your current IT arrangement, and any compliance obligations. We'll tell you honestly whether Bronze, Silver, or Gold fits, and what it would cost.
