Solutions we stand behind

Why we work with Rapid7

Technology is only valuable when it gives insight in context. Rapid7 helps answer questions such as: how vulnerable are we today? Are attacks really being detected? How well do our measures work, and can we prove it?

Rapid7 brings the attack surface, vulnerabilities, compliance and detection together on one platform, the Command Platform. That way, larger organisations make decisions based on facts.

The five pillars

We do not think in individual products, but in what you want to achieve. Rapid7 covers five pillars.

1. Attack surface management: see your organisation the way an attacker sees it. All systems in view, including the forgotten ones, and where security is missing.
2. Exposure management: vulnerabilities, attack surface, cloud and applications in one risk picture. So you know what to fix first.
3. Vulnerability management: find vulnerabilities, prioritise them by risk and demonstrably fix them.
4. Cyber GRC: governance, risk and compliance linked to your real security data. For NIS2, ISO 27001 and the auditor.
5. Next-gen SIEM: logs and signals in one place, with AI-driven detection.

Monitored day and night: MDR

A SIEM is only as good as the team that watches it. With Rapid7 MDR, a 24/7 SOC monitors your environment, investigates suspicious activity and takes action.

Do you mainly work with Microsoft 365 and Defender? Then MDR for Microsoft is the focused option: the Rapid7 SOC monitors your Defender environment, without you needing Microsoft Sentinel.

In both cases we remain your fixed point of contact, for coordination and advice.

Why this matters for large organisations

Multiple IT partners, complex infrastructures and a wide range of measures: Rapid7 brings it all together in one overview. Security teams, executives and auditors steer on figures instead of gut feeling.

Whether it is a baseline assessment, a SIEM implementation or continuous monitoring: we help you gain insight and make measures measurable. A good start is the Rapid7 90-Minute Health Check.

Why we chose Guardz

Real security starts with simplicity. Guardz is not a standalone scanner, but one platform that brings together the strongest technology from specialist vendors. That way SMEs get the same security as large organisations, without five separate packages and five dashboards.

The controls

Guardz protects the places where attacks start. Behind each part is technology from a specialist vendor.

• Email, with Check Point: phishing, malicious attachments and fake invoices are intercepted. Check Point’s email security was formerly called Avanan.
• Workstation, with SentinelOne: EDR that recognises and stops suspicious behaviour on laptops and computers, including ransomware.
• Browser, with Palo Alto Networks: Prisma Browser blocks fake login pages and session theft, and gives control over the use of AI tools.
• Accounts: recognise and stop account takeovers in Microsoft 365.
• External attack surface: what an attacker sees from the outside, including leaked passwords.

Why the combination is so strong

An attack almost never follows a single route. It starts with an email, continues in the browser and ends on a laptop or in a Microsoft 365 account. Separate tools each see one piece.

Guardz links the signals from email, browser, workstation and accounts. The SOC then sees one incident instead of separate alerts, and takes action where it is needed. A SOC (Security Operations Centre) is a team that reviews alerts day and night and takes action.

How we use Guardz

• In Cyber Resilience: Guardz is the technical foundation. Everything is monitored continuously, and the Guardz SOC takes action immediately when there is suspicious activity. A click on a wrong link becomes an intercepted incident instead of a disaster.
• As a standalone solution: we take care of implementation, setup and support.

What it delivers

All basic measures properly in place straight away, fewer separate parties and continuous oversight without extra management effort. We monitor, interpret and advise. Guardz provides the technology.

For MSPs

Brandaris is a Guardz distributor. Are you an MSP? Then buy Guardz through us, with onboarding, Dutch-language support and knowledge for your clients. Read why MSPs buy Guardz through Brandaris, or start a free trial straight away.

Why we chose Automox

No heavy servers and no complex infrastructure. A lightweight agent and an internet connection are enough. After that, Automox takes care of the updates: automatically, reliably and transparently.

More than 20,000 new vulnerabilities appear every year. Keeping track of everything yourself is no longer feasible. Automation is not a luxury, but a necessity.

How we use Automox

• In Cyber Resilience: every system receives updates automatically. We monitor the process, safeguard the policy and report on progress.
• As a standalone solution: prefer to manage updates yourself? Then we set up Automox and help with governance and reporting.

What makes Automox different

• One console: Windows, macOS and Linux from one environment.
• Automatic: updates are rolled out as soon as they are available, also outside office hours.
• Insight: at a glance you see which devices are up to date and where action is still needed.
• Scalable: from a few workstations to thousands of devices.

What it delivers

Your systems stay up to date automatically, the chance of incidents decreases and you meet the requirements of insurers and legislation more easily.

Do you work with Rapid7? Then Automox can also be controlled from Exposure Command through Rapid7 Active Patching.

Why we chose Nimblr

Many awareness programmes assume a certain level of knowledge. Nimblr starts at the basics, in clear language and without assumptions. No silly videos, but recognisable situations from everyday practice. For adult professionals who want to do their job well.

And: no login, no separate accounts. Every employee receives the training in their mailbox. Click, learn, done.

How we use Nimblr

• In Cyber Resilience: every client receives ongoing awareness training through Nimblr. That keeps the subject alive in the team.
• As a standalone service: we help with implementation and continue to support management and reporting.

Why it works

• Short, realistic modules hold attention.
• Regular repetition makes safe behaviour second nature.
• Progress is measurable.
• No login means everyone takes part.

After a few months, employees recognise phishing better, report suspicious situations faster and understand why measures are needed.

Awareness and NIS2

Under NIS2, organisations must be able to show that they train employees regularly. With Nimblr, everything is logged, results are visible and repetition happens automatically.

Why we chose Bastion 365

When secure email works without hassle, people actually use it. Bastion 365 works within Microsoft 365, simply in Outlook.

• No plug-ins: no local installations, less management, better adoption.
• NTA 7516 compliant: NTA 7516 is the Dutch standard for secure email with sensitive data. Mandatory for anyone emailing medical or legal information. Bastion 365 takes care of it.
• For everyone: all Outlook versions, including mobile, iPad, Mac and shared mailboxes.
• EU data: processing within the EU, in compliance with GDPR, NEN 7510 and ISO 27001.
• Made for healthcare, government and legal: for secure chain communication in these sectors.

What Bastion 365 does for your organisation

• Secure email from Outlook: the appropriate security level is chosen automatically.
• Sharing large files: secured, with delivery confirmation.
• Secure forms: collect data from citizens, patients or clients, secured end to end and ready for the Dutch Wmebv (Modernisation of Electronic Administrative Communication Act).
• Integrations: with SharePoint, OneDrive, Azure Storage, SFTP and AWS, and with EHR, hospital and case management systems through open standards.
• Control: an overview of who your organisation emails and which files are shared. Auditing becomes easier.

We help with implementation, adoption and training, so everyone can get started right away.

Why we chose DMARC Advisor

SPF, DKIM and DMARC are settings on your domain name that show which servers may send email on your behalf. They sound complex. At its core it is about something simple: can you prove that an email really comes from you, so it arrives reliably?

• Overview of senders: we see which systems send email on behalf of your domain, and whether they are still in use.
• Clean-up: redundant senders are tracked down and removed.
• Clear reports: no technical logs, but understandable overviews and recommendations.
• Dutch company: short lines of communication and support in Dutch.

How we use DMARC Advisor

• Email reachability assessment: we see whether your emails reach the inbox, which systems send on behalf of your domain and where the risks are.
• Implementation and monitoring: from setting up SPF, DKIM and DMARC to continuously monitoring the results.

What it delivers

• You know exactly who sends email on behalf of your domain.
• Your messages arrive more reliably.
• Your brand is protected against misuse.
• You build email trust step by step.

Why we chose 1Password

When security is easy, it actually gets done. We see that with all our clients. 1Password is intuitive and fits any organisation, large or small.

• Ease of use: employees do not have to remember or manage anything.
• Free Family licence: up to five family members use 1Password at home. That makes safe behaviour a habit outside working hours too.
• Full coverage: laptop, tablet and smartphone, in all browsers and on every operating system.
• No resistance: people take part, because it is convenient.

What 1Password does for your organisation

• Secure management: all login details in one encrypted vault. Signing in happens automatically and new passwords are strong and unique with one click.
• Secure sharing: share passwords through shared vaults. No more spreadsheets or notes.
• Watchtower: alerts for weak or reused passwords and for data breaches.
• MFA codes and passkeys: also stored securely in one place.

What it delivers

• More security, less hassle.
• Time savings for employees and IT.
• Less risk of data breaches and reputational damage.
• Better compliance with requirements from insurers and suppliers.

We help with implementation, adoption and training, so everyone can get started with it right away.