Blackpoint Cyber

The SNAP-Defense platform offers excellent visibility, but the true value lies in the human element. Their SOC response times are incredibly fast, often isolating a compromised host within minutes of detection. The Cloud Response for M365 and Google Workspace is a game-changer, catching Business Email Compromise attempts that standard filters miss. I also appreciate that they don't just alert; they actively remediate. They've proven their worth to our clients several times! The support has been top-tier. Every time we've reached out, they go the extra mile, and we truly appreciate that. While not a criticism, I know they're working on enhancing Cloud Response, particularly deeper integration with cloud environments like Azure, which will bring even more benefits to providers. It solves the '24/7' challenge for our MSP. We can't staff a Level 3 security analyst overnight, and Blackpoint fills that gap perfectly. They've saved us and our clients from headaches multiple times this year by preventing bad situations.

The reassurance from knowing that a skilled security team helps protect our MSP and clients is immense. The only minor negative is the recent shift in support systems and the need to learn how to navigate to get faster responses for newly opened tickets (I've never had issues when calling in a request). They provide Managed Detection and Response for our internal team and most of the clients we support, giving us peace of mind that a highly responsive team is ready to act at the first sign of compromise.

Blackpoint stands out compared to the rest of my stack. They provide timely reporting, good customer service, and active alerts via email without much hassle. I also like the MDR page accessed from the dashboard, and the fact that they inform us about quarantine or removal actions after they've already handled it. Blackpoint is essential in my stack. One thing I'd love is an RMM from them—I'd gladly ditch Pulseway and Webroot to consolidate more operational tasks into a single app. Constantly switching between apps with frequent logouts is tedious. I spend so much time logging in and doing 2FA just to accomplish a small task; it's like work hindering work. Does that make sense? A 'One-App to Rule Them All' would be ideal. The silence is deafening! When a threat appears, Blackpoint handles it. Imagine having to monitor all these networks 24/7; we'd never sleep. Blackpoint is there and does a fantastic job, allowing me to get my beauty rest at night.

I no longer stress about attacks on our clients. Once it's set up, for any alert, we receive an email and a phone call, knowing we're protected. Connecting to Office 365 is also quite straightforward. The service remains amazing, and the support team is very friendly! They do send a lot of email alerts, which can be tedious to manage, but I'd rather have 30 false positives than a single breach. They serve as our MDR, and we collaborate closely to secure our clients. They also monitor our own office computers and emails, protecting us from attacks as well.

The pricing is fantastic; you get a lot for just $11 per user per month. However, it's not immediately intuitive without proper training. A regular, complimentary, instructor-guided course covering basic best practices, configuration, escalation, and documentation would be highly beneficial. They provide round-the-clock monitoring of my clients' networks, with SOC remediation available in case of an attack or even a suspected potential breach.

The overall value is outstanding. Their new CompassOne suite includes Asset Inventory, Tenant Admin, MDR, Application Control (similar to Threatlocker but far easier to deploy), Vulnerability Management, a streamlined SIEM, and an excellent Security Posture Rating system. Beyond the product capabilities, our Blackpoint team is very responsive and a pleasure to work with. The MDR SOC performs exactly as expected when a threat is detected. I can't think of many things to dislike about Blackpoint. They might not have the brand recognition of Crowdstrike, but perhaps that's a positive. Every client must have the Blackpoint agent installed on their machines; that's non-negotiable. The threat environment at the SMB level is so severe that we insist our clients have multiple layers of threat protection.

Their ability to detect and halt an attacker's spread is truly remarkable. They've also pinpointed the origin of a virus entry point for us. They're always available when you contact them, and every person I've spoken with across departments has been extremely helpful. They don't adopt a 'not my job' attitude. When one representative didn't have an answer, they found it and informed me without me having to chase them. They fully followed through. And Jamie—she's just amazing. One downside is that Office 365 pricing requires the Snap Agent; I wish it could be purchased separately. We also need more granular control in the admin portal, such as allowing tech-level staff to view or add clients without seeing costs. If you're seeking a true partner, these folks will elevate you. They're not the type to sign you up and forget you; they proactively check in via phone and video calls, which I prefer over email since text loses so much nuance. Having an extra set of eyes and a SOC that acts as a continuous security guard 24/7 ensures our environments are always monitored, even when no one is physically watching. Antivirus alone can't catch the tools hackers use or suspicious processes occurring at night or when a client is closed.

Blackpoint is definitely a frontrunner in MDR, SOC, and cloud response. Personally, I appreciate the noise reduction and filter out what's unnecessary. Integration with tools like Meraki is seamless. Deployment is straightforward. The response time and ability to neutralize threats are exceptional, as I've witnessed many times. Support has always been quick to respond. However, I'm not particularly fond of Compass One, their new portal. Its rollout was and continues to be clunky. While the posture feature is interesting, it essentially serves as a sales pitch for additional services, and their suite isn't that comprehensive. I wish it included security awareness training and phishing simulations. Since we're too small to staff a 24/7 security team, the human aspect has been incredibly valuable—it's likely our favorite component of our tech stack.

The standout feature of Blackpoint is how it simplifies compliance and reporting. Previously, generating audit-ready reports was a tedious, time-intensive process, but their platform now does it with just a few clicks. It's all automated, precise, and seamless, saving our team hours each month. A potential enhancement would be native regulatory reporting for the financial industry. We're subject to both NFA and FCA regulations, and currently, there are no built-in templates or automated reports for these standards. We have to extract data and manually construct reports in Excel, which works but lacks the convenience of the existing SOC 2, CMMC, and HIPAA packages. Adding NFA and FCA reporting would be a great plus. Blackpoint addresses two major challenges simultaneously: maintaining robust security and achieving compliance without burdening my team. Before Blackpoint, we constantly fretted about detection blind spots and spent days or weeks assembling audit reports for clients and regulators. Now, we have real-time MDR with a SOC that responds in minutes, plus one-click compliance reports (SOC 2, HIPAA, CMMC, etc.) that are always ready for audits. It secures client environments and ensures compliance, enabling a lean team to operate beyond its size.

I'm impressed by Blackpoint Cyber's track record. It's a robust organization with a strong cybersecurity focus. They've consistently enhanced their solutions, particularly with the new CompassOne, which offers more functionality at essentially the same cost. I can now incorporate services like dark web surveillance and 24/7 vulnerability assessments, plus add SIEM for log management. This enables me to better safeguard my customers. Their reaction times have also improved. Given that intrusions, especially in platforms like Office 365, occur rapidly, we need swift responses. They're already quite quick, but AI will necessitate even faster action. We'd appreciate assistance post-incident, such as having SIEMs pull logs from Microsoft tenants for extended retention. I rely on Blackpoint for continuous client protection using AI and human analysts. They manage issues even during off-hours, allowing us to handle problems like Office 365 account lockouts. It enhances client security with tools like CompassOne and accelerates response times.