Joining the company
We prepare accounts and access to the services new starters need. We grant approved permissions and check that sign-in works.
We organise accounts, permissions and sign-in policies. We maintain access to your email, apps and business resources. We handle access changes from granting to revoking permissions.
Choose your level of careYour team’s roles and access needs change over time. We handle these changes under approved access policies.
We prepare accounts and access to the services new starters need. We grant approved permissions and check that sign-in works.
We update access when roles or responsibilities change. We grant approved permissions and remove those no longer needed.
We block specified accounts under the agreed leaver process. We check active sessions and record the outcome of access revocation.
We investigate suspicious sign-ins and signs of account takeover. We restrict access as agreed and help you regain control.
Every plan covers accounts, permissions and sign-in protection.Plans differ in scale, review frequency and response coverage.
For small businesses: organised accounts, secure sign-in and ongoing access changes.
net / month1 h of changes per monthUp to 10 people and 3 integrations
For businesses that depend on service access: more frequent reviews and extended response cover.
net / month3 h of changes per monthUp to 25 people and 5 integrations
For businesses with multiple directories, complex roles or integrations needing a separate project.
Subscription matched to your needsAgreed allowance for changesScope matched to your environment
Prices exclude VAT. Standard and Business cover one working directory and ready-made integrations. Before we start, we confirm account numbers, permissions, available reports and how each integration will be managed. We agree care, setup and any licence costs before work begins.
*Round-the-clock response starts after qualification and checks of alert channels, operator access and cover arrangements. Response time means the start of incident handling.
The allowance renews each month and does not roll over. Security maintenance, reviews and agreed incident handling are included in the subscription, outside the change allowance.
We combine sign-in protection with day-to-day account and permission management. We make approved changes and check that security controls work.
Permissions that match each role.
We organise accounts, groups and administrator roles. Each access assignment has an owner and a purpose; changes follow approved requests.
Secure sign-in.
We configure multi-factor authentication and access policies. We check sign-in and the process for recovering account access.
Permissions kept in order.
We review accounts and permissions with your designated approver. We identify unnecessary access and make approved changes.
A response to suspicious activity.
We investigate reported or detected access incidents. We carry out agreed protective actions and check whether control has been restored.
Every plan maintains the agreed access controls.Before we start, we confirm systems, responsibilities and service terms.
| Scope of care | Standard | Business | Bespoke |
|---|---|---|---|
| People and integrations | Up to 10 people and 3 integrations | Up to 25 people and 5 integrations | Based on the environment map |
| Identity directory | 1 agreed directory | 1 agreed directory | Multiple sources and directories |
| Planned changes | 1 h per month | 3 h per month | Agreed time allowance |
| Access review | Quarterly | Monthly | Based on agreed risk |
| Critical response | Within 4 business hours | Within 60 min, round the clock* | SLA matched to your needs |
*Round-the-clock response starts after qualification and checks of alert channels, operator access and cover arrangements. Response time means the start of incident handling.
We maintain a register of accounts, groups, roles and approvers, including the service accounts in scope. Day-to-day work is separated from administrator access.
Adding users, changing roles and revoking accounts use the monthly change allowance. We record the work; larger batches of changes are planned with you before work begins.
We match multi-factor authentication (MFA) and access policies to your platform and licences. We pilot the changes and check applications and emergency access before deployment.
We connect single sign-on to qualified applications. Access recovery is tested and documented so a blocked user account does not prevent recovery work.
The full review covers every account, role and access assignment in the directory and each integration in scope. This includes administrators, guests, service accounts and disabled accounts. Reviews take place quarterly in Standard and monthly in Business, with your designated approver.
We check security controls and available alerts. The outcome records issues, completed actions, missing data and decisions needed. Maintenance, agreed reviews and incident handling are included separately from the planned change allowance.
Critical incidents mean an account takeover or widespread loss of access to services in scope. We begin investigation and agreed protective actions within 4 business hours in Standard and within 60 minutes, round the clock, in Business. Round-the-clock response starts after alert channels, operator access and cover arrangements have been checked.
Business hours are Monday to Friday, 09:00–17:00 Warsaw time, excluding Polish public holidays. The clock starts at the earlier event: an alert detected by monitoring or a report received through the agreed channel, without waiting for manual reading. In Standard, time runs only during business hours; outside those hours it starts when the office opens. In Business, time runs round the clock once qualified 24/7 cover is active. Response means starting incident handling, not completing the repair.
An integration is one agreed target system with a tested way to grant and revoke access. It can cover applications and agreed connections to business resources.
A new directory, hybrid setup or custom connector is quoted as a separate project. Ongoing care is matched to the accepted environment. We do not charge twice for the same access already covered by another CyberON service.
We show care, setup and required licence costs separately. We check what your existing plan already includes so you do not buy the same features twice.
We can work in your existing Microsoft 365, Google Workspace or another qualified directory and access system. Software is selected for your needs and its permitted use. Secret rotation and certificate renewal are included within the agreed scope.
We take over a working directory and ready-made integrations after qualification. We confirm the price, accounts, services, change approvals and incident procedure. We test sign-in, recovery and access revocation in every integration in scope. For Business, we also verify the round-the-clock response process.
You can choose paid setup with one month's notice. Qualified standard setup without a setup fee requires three months' notice. Building a directory, hybrid setup or custom connectors requires a separate quote.
Unused hours do not roll over to the following month. Additional administration costs PLN 300 net per hour, with scope and budget agreed first. Correcting our own error does not use your allowance.
When the service ends, we hand over documentation, the agreed configuration export, integration register and procedures. Your organisation and data remain under your control.
We review accounts, applications and licences. We agree roles, approvers and the scope of work.
We implement the agreed controls and integrations. We test sign-in, recovery and access revocation.
We handle changes and incidents, and review permissions. We record completed work and keep procedures up to date.
We can manage access in your existing environment. We first check the platform, licences and responsibilities of your current IT provider.
We agree the missing scope so care for the same service is not charged through two subscriptions.
Not every application ends active sessions when the main account is blocked. During takeover, we map dependencies and test how access is revoked in the services in scope.
When someone leaves, we follow the agreed process and record the result. We also check sessions and connections that need to be ended separately.
Your designated approver authorises access to data and applications. We make agreed changes according to roles and the permissions delegated to us.
For incidents, we agree protective actions in advance so we can contain the threat promptly while keeping changes under control.
Standard includes 1 hour and Business 3 hours of planned changes per month. Additional administration costs PLN 300 net per hour, with the work agreed first.
Security maintenance, reviews and agreed incident handling are included in the subscription. They do not use the allowance for changes.
We organise accounts, secure sign-in and set up selected integrations as a one-off project. We agree the scope and price before work begins.
After acceptance, we hand over configuration and documentation. You can order ongoing care separately.
Tell us which services your team uses and how many people need access.We will match security controls and ongoing care to your environment.
Discuss access in your business