[{"data":1,"prerenderedAt":828},["ShallowReactive",2],{"footer-services-en":3,"footer-local-en":28,"cmp-list-en":45},[4,8,12,16,20,24],{"path":5,"navTitle":6,"order":7},"\u002Fen\u002Fservices\u002Fcybersecurity-audit","Cybersecurity Audit",1,{"path":9,"navTitle":10,"order":11},"\u002Fen\u002Fservices\u002Fpenetration-testing","Penetration Testing",2,{"path":13,"navTitle":14,"order":15},"\u002Fen\u002Fservices\u002Fmicrosoft-365-google-workspace-audit","Microsoft 365 \u002F Google Workspace Audit",3,{"path":17,"navTitle":18,"order":19},"\u002Fen\u002Fservices\u002Flaw-25-compliance","Law 25 Compliance",4,{"path":21,"navTitle":22,"order":23},"\u002Fen\u002Fservices\u002Fremediation-hardening","Remediation and Hardening",5,{"path":25,"navTitle":26,"order":27},"\u002Fen\u002Fservices\u002Fongoing-security-partner","Ongoing Security Partner (vCISO)",6,[29,33,37,41],{"path":30,"city":31,"translationKey":32},"\u002Fen\u002Fcybersecurity-audit\u002Fmontreal","Montréal","montreal",{"path":34,"city":35,"translationKey":36},"\u002Fen\u002Fcybersecurity-audit\u002Flaval","Laval","laval",{"path":38,"city":39,"translationKey":40},"\u002Fen\u002Fcybersecurity-audit\u002Fsouth-shore","South Shore","rive-sud",{"path":42,"city":43,"translationKey":44},"\u002Fen\u002Fcybersecurity-audit\u002Fnorth-shore","North Shore","rive-nord",[46,111,158,219,284,359,419,469,531,584,645,706,767],{"path":47,"title":48,"description":49,"options":50},"\u002Fen\u002Fcomparisons\u002Fbusiness-password-managers","1Password vs Bitwarden vs Keeper vs Dashlane for Business","1Password, Bitwarden, Keeper or Dashlane? Canadian data hosting, SSO, SCIM, pricing and compliance compared side by side for Canadian small businesses.",[51,66,81,96],{"name":52,"url":53,"tagline":54,"pricing":55,"bestFor":56,"pros":57,"cons":62},"1Password","https:\u002F\u002F1password.com\u002Fpricing\u002Fbusiness","Cloud password manager built in Canada, with a Canadian hosting region and billing in Canadian dollars.","Business: CA$10.99 per user per month, billed annually; Teams Starter Pack: CA$29.95 per month for 10 members (per the official site, October 2026)","Small businesses that want their data in Canada, published pricing in Canadian dollars, and SSO without going through a sales quote.",[58,59,60,61],"1Password.ca region: data hosted in Canada","SSO (Entra ID, Okta and others) and automated provisioning (including Google Workspace) in Business","ISO 27001, 27017, 27018, 27701 and SOC 2 Type 2","Free Families membership for every Business member",[63,64,65],"SSO and provisioning require Business, not the Teams Starter Pack","Teams Starter Pack capped at 20 members","Phone support on weekdays only, 9 a.m. to 5 p.m. ET",{"name":67,"url":68,"tagline":69,"pricing":70,"bestFor":71,"pros":72,"cons":77},"Bitwarden","https:\u002F\u002Fbitwarden.com\u002Fpricing\u002Fbusiness\u002F","Open-source password manager, available in the cloud or self-hosted.","Teams: US$4 per user per month; Enterprise: US$6 per user per month, billed annually (per the official site, October 2026)","Budget-conscious businesses, or IT teams that value open code or want to self-host.",[73,74,75,76],"Open-source code with annual source code audits","SCIM and directory sync starting with Teams","SSO (SAML 2.0, OIDC), policies and self-hosting in Enterprise","SOC 2 Type II, SOC 3 and ISO 27001",[78,79,80],"Cloud hosting in the United States or the European Union only","Region can't be changed after the account is created","SSO and policies limited to Enterprise",{"name":82,"url":83,"tagline":84,"pricing":85,"bestFor":86,"pros":87,"cons":92},"Keeper","https:\u002F\u002Fwww.keepersecurity.com\u002Fpricing\u002Fbusiness-and-enterprise.html","Identity and privileged access platform with six hosting regions, including Canada.","Business Starter (5 to 10 users): US$2; Business: US$4; Enterprise: US$6 per user per month, billed annually, Enterprise purchased through a quote (per the official site, October 2026)","Organizations that require Canadian hosting and also plan to manage privileged access or an isolated network.",[88,89,90,91],"Canadian (CA) data centre selected when the account is created","SOC 2 Type 2, ISO 27001, 27017, 27018 and FedRAMP High","SAML 2.0 and SCIM with Entra ID and Google Workspace (Enterprise)","Self-managed option for isolated networks, licensed separately",[93,94,95],"SSO, SCIM and AD\u002FLDAP limited to Enterprise, sold through a quote","Advanced reporting sold as add-ons","Wrong region at sign-up means starting the trial over",{"name":97,"url":98,"tagline":99,"pricing":100,"bestFor":101,"pros":102,"cons":107},"Dashlane","https:\u002F\u002Fwww.dashlane.com\u002Fpricing","Omnix platform combining password management with at-risk credential detection.","Omnix Password Management: US$8 per user per month, billed annually; Enterprise: quote only (per the official site, October 2026)","Businesses that want to monitor at-risk credentials and in-browser phishing on top of a shared vault.",[103,104,105,106],"SSO and SCIM included in Omnix Password Management","SIEM integrations (Microsoft Sentinel, Splunk, CrowdStrike and more)","In-browser phishing detection (Credential Protection, separate package)","SOC 2 Type II and ISO 27001",[108,109,110],"No Canadian region: EU by default, United States on request","US data residency not available with self-serve sign-up","No SCIM with Google Workspace (SSO only)",{"path":112,"title":113,"description":114,"options":115},"\u002Fen\u002Fcomparisons\u002Fantivirus-vs-edr-vs-mdr","Antivirus vs EDR vs MDR: Which Endpoint Protection Do You Need?","Antivirus, EDR or MDR? Detection, response, 24\u002F7 monitoring, in-house skills and cost model compared for small businesses with 10, 50 or 150 employees.",[116,130,144],{"name":117,"url":118,"tagline":119,"pricing":120,"bestFor":121,"pros":122,"cons":126},"Traditional antivirus","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fcollection\u002Fdevice-security-guidance\u002Fpolicies-and-settings\u002Fantivirus-and-other-security-software","Software on each device that spots, quarantines or deletes known malicious code.","Built into Windows and macOS at no extra cost; commercial products are sold per device or per user","The baseline for every device, to be built on as soon as the business holds sensitive data.",[123,124,125],"Already built into the major operating systems","Part of the Canadian Centre for Cyber Security's baseline controls for SMBs (automatic updates and scans)","Requires almost no expertise",[127,128,129],"Relies mainly on signatures of known code, an approach the UK NCSC says has become less effective","Of little use against an attacker using stolen credentials and legitimate tools","Without a central console, nobody sees its alerts",{"name":131,"url":132,"tagline":133,"pricing":134,"bestFor":135,"pros":136,"cons":140},"EDR","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fchoosing-best-cyber-security-solution-your-organization-itsm10023","Endpoint detection and response: an agent that continuously monitors how workstations and servers behave, and lets you respond remotely.","Licensed per device or per user; included in some bundles, such as Microsoft 365 Business Premium (Defender for Business)","Businesses with an IT resource, in-house or outsourced, that can read alerts and act quickly.",[137,138,139],"Spots abnormal activity, even with no known malicious file","Lets you act on the device and, depending on the product, restore it to its pre-infection state","Produces activity logs that help with investigation and incident reporting",[141,142,143],"Listed by the Canadian Centre for Cyber Security among advanced controls that require additional resources","Someone has to configure the tool and triage alerts","Without 24\u002F7 monitoring, a Saturday alert waits until Monday",{"name":145,"url":146,"tagline":147,"pricing":148,"bestFor":149,"pros":150,"cons":154},"MDR","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fcyber-security-considerations-consumers-managed-services-itsm50030","Managed detection and response: an outside team watches your detection tools around the clock, investigates and responds as set out in the contract.","Service subscription, usually quoted, on top of the detection tool or bundled with it","Businesses with no security team that want a 2 a.m. alert handled before the office opens.",[151,152,153],"24\u002F7 monitoring by a security operations centre, with no hiring","Analysts validate alerts before bothering you","Strengthens a small in-house IT team rather than replacing it",[155,156,157],"A cost the Canadian Centre for Cyber Security says can be prohibitive for some organizations","You hand monitoring to a third party, but the risk and the accountability for incident response stay with you","Outside analysts know your systems less well than an internal team (NCSC)",{"path":159,"title":160,"description":161,"options":162},"\u002Fen\u002Fcomparisons\u002Fbackup-nas-vs-cloud-vs-hybrid","Backups: Local NAS vs Cloud vs Immutable Storage vs Hybrid","On-site NAS, cloud backup, immutable storage or a hybrid 3-2-1-1-0 setup: ransomware resilience, restore speed, cost model and Canadian data residency compared.",[163,177,191,205],{"name":164,"url":165,"tagline":166,"pricing":167,"bestFor":168,"pros":169,"cons":173},"Local NAS","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Ftips-backing-your-information-itsap40002","A storage device on the office network that copies workstations and servers every night.","Purchase of the device and drives, then upkeep and eventual replacement","Fast, everyday restores: a deleted folder, a failed server.",[170,171,172],"Fast restores: the copy is on site","No dependence on your internet connection","Data stays on your premises",[174,175,176],"The Canadian Centre for Cyber Security warns that ransomware can spread to a NAS","Lost along with the premises in a fire or flood","Often managed with the same accounts as the rest of the network",{"name":178,"url":179,"tagline":180,"pricing":181,"bestFor":182,"pros":183,"cons":187},"Cloud backup","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fcollection\u002Ftop-tips-for-staying-secure-online\u002Falways-back-up-your-most-important-data","An automatic copy of your data with a provider, away from your premises.","Subscription based on storage volume or number of users","Businesses with no on-site server whose data already lives in Microsoft 365 or Google Workspace.",[184,185,186],"Off-site copy with no handling","Automatic backups make a recent copy more likely","Infrastructure managed by the provider",[188,189,190],"Restores are limited by your internet connection","The UK NCSC reports ransomware incidents that compromised connected cloud backups","Hosting region must be checked against your obligations",{"name":192,"url":193,"tagline":194,"pricing":195,"bestFor":196,"pros":197,"cons":201},"Immutable storage","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fprinciples-for-ransomware-resistant-cloud-backups","A copy, in the cloud or on a dedicated device, that can't be changed or deleted during its retention period (object lock).","An option offered by many backup and storage services; you pay for the volume kept until retention ends","Adding a copy that even a stolen admin account can't erase.",[198,199,200],"Withstands backup deletion, ransomware's first target","Recommended by the UK NCSC for cloud backups","Can be added to an existing backup without starting over",[202,203,204],"Retention period must be set in advance, with no going back","Replaces neither the local copy nor restore testing","CISA advises caution because it doesn't meet the compliance criteria of certain regulations",{"name":206,"url":207,"tagline":208,"pricing":209,"bestFor":210,"pros":211,"cons":215},"Hybrid 3-2-1-1-0","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fransomware-playbook-itsm00099","A local copy for speed, an off-site offline or immutable copy for survival, and restore tests with zero errors.","Local device plus cloud subscription","Any business with a server, or with data it can't afford to lose.",[212,213,214],"Fast everyday restores, plus a last-resort copy for ransomware or disaster","Applies and strengthens the Canadian Centre for Cyber Security's 3-2-1 rule","The Canadian Centre recommends a secondary cloud backup on top of offline copies",[216,217,218],"Two systems to monitor","The combined cost of a device and a subscription","Requires regular, documented restore tests",{"path":220,"title":221,"description":222,"options":223},"\u002Fen\u002Fcomparisons\u002Fedr-for-small-business","EDR for SMBs: Defender, CrowdStrike, SentinelOne, Sophos","Defender for Business, CrowdStrike Falcon, SentinelOne or Sophos: which tiers actually include EDR, published prices, Canadian data hosting and 24\u002F7 coverage.",[224,239,254,269],{"name":225,"url":226,"tagline":227,"pricing":228,"bestFor":229,"pros":230,"cons":235},"Microsoft Defender for Business","https:\u002F\u002Fwww.microsoft.com\u002Fen-ca\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-business","Microsoft's EDR built for organizations with up to 300 users.","CA$4.10 per user per month, annual subscription; included in Microsoft 365 Business Premium (per the official site, October 2026)","SMBs already on Microsoft 365 Business Premium or managing their devices with Intune.",[231,232,233,234],"Already included in Microsoft 365 Business Premium","EDR, automated investigation and remediation, and vulnerability management in one plan","One per-user licence covers up to five devices","Policies can be managed from the Intune admin centre",[236,237,238],"Capped at 300 users","Servers need an extra licence","No Canadian data centre in Microsoft's official location list",{"name":240,"url":241,"tagline":242,"pricing":243,"bestFor":244,"pros":245,"cons":250},"CrowdStrike Falcon","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fpricing\u002F","Cloud platform sold online in three bundles: Falcon Go, Falcon Pro and Falcon Enterprise.","Falcon Go (no EDR): US$59.99 per device per year; Falcon Enterprise (with EDR): US$184.99 per device per year; monthly billing also available (per the official site, October 2026)","SMBs with in-house IT staff who want to buy directly online, without going through a partner.",[246,247,248,249],"Buy online, monthly or annually","Android and iOS protection included in every bundle","Express Support included for deployment help","Falcon Complete 24\u002F7 managed service available",[251,252,253],"Falcon Go and Falcon Pro don't include EDR: you need Falcon Enterprise","Falcon Go purchases limited to 100 devices","Canadian data hosting not specified on the official site",{"name":255,"url":256,"tagline":257,"pricing":258,"bestFor":259,"pros":260,"cons":265},"SentinelOne Singularity","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform-packages\u002F","Single-agent platform where EDR starts at the Singularity Complete tier.","Singularity Core: US$69.99; Control: US$79.99; Complete (with EDR): US$179.99 per endpoint per year, prices shown for 5 to 100 workstations, purchased through an authorized partner (per the official site, October 2026)","SMBs whose IT team or provider wants to investigate and remediate hands-on, including on Linux servers.",[261,262,263,264],"Rollback of Windows systems to their prior state","Windows, macOS and Linux, including older Windows releases","Multi-tenant management included in every tier","Published list prices",[266,267,268],"EDR isn't included in Singularity Core or Control","14 days of data retention in Singularity Complete","MDR service only available as an add-on from Singularity Commercial up",{"name":270,"url":271,"tagline":272,"pricing":273,"bestFor":274,"pros":275,"cons":280},"Sophos Endpoint (ex-Intercept X)","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security\u002Fedr","Sophos Endpoint protection, with Sophos EDR or XDR, managed from the Sophos Fusion cloud console.","Quote only (per the official site, October 2026)","SMBs that want their data hosted in Canada and, if needed, 24\u002F7 monitoring through Sophos MDR.",[276,277,278,279],"Canada data region, with a data centre in Montréal","CryptoGuard restores files encrypted by ransomware","Console documentation published in French","Sophos EDR can use Microsoft Defender as the protection agent",[281,282,283],"No published prices: you need a quote","Some Sophos products, such as Sophos Mobile, aren't offered in the Canada region","Recent renaming (Intercept X, Sophos Central) can make quotes harder to read",{"path":285,"title":286,"description":287,"options":288},"\u002Fen\u002Fcomparisons\u002Fmfa-methods-comparison","MFA Methods Compared: SMS, App, Push, FIDO2 Key or Passkey","SMS codes, authenticator apps, push with number matching, FIDO2 security keys or passkeys: which MFA method actually stands up to phishing? A side-by-side look.",[289,303,317,331,345],{"name":290,"url":291,"tagline":292,"pricing":293,"bestFor":294,"pros":295,"cons":299},"SMS code","https:\u002F\u002Fpages.nist.gov\u002F800-63-4\u002Fsp800-63b.html","A one-time code texted to a cellphone at each sign-in.","No hardware to buy; built into most platforms, including Microsoft Entra ID","A short transition, or the rare accounts where no other method is possible.",[296,297,298],"Works on any cellphone, no app needed","Almost no training required","Far better than a password alone",[300,301,302],"Vulnerable to SIM swapping and to relay through a fake page","Classified as 'restricted' by NIST (SP 800-63B-4)","Needs cellular coverage at sign-in",{"name":304,"url":305,"tagline":306,"pricing":307,"bestFor":308,"pros":309,"cons":313},"Authenticator app code (TOTP)","https:\u002F\u002Fwww.cisa.gov\u002FMFA","An app that generates a temporary code, refreshed roughly every 30 seconds.","Free apps (Microsoft Authenticator, Google Authenticator and others); smartphone required","Services that offer neither push nor passkeys, and situations with no network.",[310,311,312],"Works with no cellular signal or data","Immune to SIM swapping","Supported by the vast majority of services",[314,315,316],"The code can be relayed in real time by a fake page","Not phishing-resistant according to NIST","Re-enrolment needed if the phone is lost",{"name":318,"url":319,"tagline":320,"pricing":321,"bestFor":322,"pros":323,"cons":327},"Push with number matching","https:\u002F\u002Fwww.cisa.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fpublications\u002Ffact-sheet-implement-number-matching-in-mfa-applications-508c.pdf","The user types into the app the number shown on the sign-in screen.","Included in the platform's app (e.g., Microsoft Authenticator); smartphone required","The minimum baseline for all staff while you move to passkeys.",[324,325,326],"Stops reflex approvals and push bombing","Simple for users","Enabled for all Microsoft Authenticator push notifications",[328,329,330],"Does not stop real-time relay through a fake page","Needs a smartphone with a data connection","Positioned by CISA as an interim measure",{"name":332,"url":333,"tagline":334,"pricing":335,"bestFor":336,"pros":337,"cons":341},"FIDO2 security key","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fdefending-against-adversary-middle-threats-phishing-resistant-multi-factor-authentication-itsm30031","A small USB or NFC device that proves identity cryptographically, bound to the real site's domain.","Hardware purchase: from US$29 per key (Yubico Security Key NFC, official site, October 2026); plan two keys per person","Administrators, finance and leadership: the most targeted accounts.",[338,339,340],"Phishing-resistant: a fake page has nothing to relay","Non-exportable private key, eligible for NIST AAL3","No phone required",[342,343,344],"Purchase cost and distribution logistics","A backup key is needed in case of loss","Some older applications don't support it",{"name":346,"url":347,"tagline":348,"pricing":349,"bestFor":350,"pros":351,"cons":355},"Passkey","https:\u002F\u002Ffidoalliance.org\u002Fpasskeys\u002F","A cryptographic key stored on a phone, computer or password manager, unlocked by fingerprint, face or PIN.","No extra hardware if devices are compatible; supported by all major operating systems and browsers","The end goal for all staff, on managed devices.",[352,353,354],"Phishing-resistant","Faster than a password plus a code","When synced, it carries over to a new device",[356,357,358],"When synced, its security depends on the account that syncs it","Synced passkeys are not eligible for NIST AAL3","Cross-device sign-in needs a QR code and Bluetooth",{"path":360,"title":361,"description":362,"options":363},"\u002Fen\u002Fcomparisons\u002Fmsp-vs-mssp-vs-vciso-vs-in-house","MSP vs MSSP vs vCISO vs In-House: Who Should Run Security?","MSP, MSSP, vCISO or an in-house hire: roles, 24\u002F7 monitoring, independence and cost models compared to decide who runs cybersecurity at your small business.",[364,377,391,405],{"name":365,"url":146,"tagline":366,"pricing":367,"bestFor":368,"pros":369,"cons":373},"Managed IT service provider (MSP)","Your outsourced IT: workstations, servers, accounts, backups and day-to-day support.","On request; usually a monthly fee per user or per device","Businesses with no in-house IT that first need well-run IT.",[370,371,372],"Covers daily operations: patching, accounts, backups","Predictable monthly cost","A team rather than one person",[374,375,376],"Security isn't always in the contract","Its privileged access to your systems makes it a target for attackers","Hard for it to assess its own work objectively",{"name":378,"url":379,"tagline":380,"pricing":381,"bestFor":382,"pros":383,"cons":387},"Managed security service provider (MSSP \u002F MDR)","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fcollection\u002Fbuilding-a-security-operations-centre","A security team that watches your alerts, detects attacks and responds, often around the clock.","On request; usually a monthly subscription per device or per user","Businesses that have tools (EDR, logs) but nobody watching alerts at night and on weekends.",[384,385,386],"Monitoring beyond office hours","Specialized detection and response expertise","Shares a cost a small business couldn't carry alone",[388,389,390],"Doesn't always fix things itself: someone still has to act","Scope varies widely from one contract to the next","Doesn't set priorities or governance",{"name":392,"url":393,"tagline":394,"pricing":395,"bestFor":396,"pros":397,"cons":401},"Virtual CISO (vCISO)","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fbaseline-cyber-security-controls-small-and-medium-organizations","A part-time security lead who sets priorities, writes policies and keeps the plan on track.","On request; usually a monthly retainer or a block of hours","Businesses facing client, insurer or framework requirements (Law 25, CPCSC, ISO 27001) without the budget for a full-time CISO.",[398,399,400],"Governance and a roadmap without a full-time salary","Independent view of the IT provider's work","Help with insurer and client questionnaires",[402,403,404],"Doesn't handle daily operations","Availability shared across several clients","Only effective if leadership is engaged",{"name":406,"url":407,"tagline":408,"pricing":409,"bestFor":410,"pros":411,"cons":415},"In-house staff","https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fapplied-cybersecurity\u002Fnice\u002Fnice-framework-resource-center","An employee dedicated to IT or security, on site and part of the team.","Salary, benefits, training and tools; one position can't cover nights, weekends or vacations","Larger small businesses whose specialized systems (OT, in-house software) need deep knowledge.",[412,413,414],"Knows the business, the people and the systems","On site and quick to react","Keeps knowledge in-house",[416,417,418],"Hard to hire: 65% of Quebec small and medium businesses say they lack qualified staff to manage cyber risk (KPMG, 2023)","One person can't provide 24\u002F7 monitoring","Knowledge walks out the door if they leave",{"path":420,"title":421,"description":422,"options":423},"\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison","Microsoft 365 Backup Compared: Microsoft, Veeam and Keepit","Microsoft 365 Backup, Veeam Data Cloud or Keepit? Compare off-Microsoft copies, Canadian storage, Teams coverage, retention and verified pricing for SMBs.",[424,439,454],{"name":425,"url":426,"tagline":427,"pricing":428,"bestFor":429,"pros":430,"cons":435},"Microsoft 365 Backup","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-overview","Microsoft's native backup tool, built into the Microsoft 365 admin centre.","US$0.15 per protected GB per month, pay-as-you-go through an Azure subscription; restores are free (per the official site, October 2026)","SMBs fully on Microsoft 365 that want very fast recovery after ransomware or a mass deletion.",[431,432,433,434],"No new vendor: switched on from the admin centre","10-minute restore points and fast bulk restores","Restores individual files, folders and mailbox items","Honours your Microsoft 365 data residency",[436,437,438],"Backups never leave the Microsoft 365 environment","No Teams messages, Entra ID or Google Workspace","Cost grows with data volume; retention tops out at 2 years",{"name":440,"url":441,"tagline":442,"pricing":443,"bestFor":444,"pros":445,"cons":450},"Veeam Data Cloud for Microsoft 365","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fsaas\u002Fbackup-microsoft-office-365.html","Veeam-managed backup service hosted in Azure, with an optional fast-restore tier on Microsoft's own backup storage.","Foundation: US$3.50 per user per month (10 to 50 users), billed annually; Premium: US$7.00; unlimited storage included (MSRP, per the official site, October 2026)","SMBs that want a copy outside Microsoft 365, stored in Canada, at a predictable per-user price.",[446,447,448,449],"Copy isolated from Microsoft 365, in the Azure region you choose (including Canada Central)","Unlimited storage and 24\u002F7 support included","Premium plan pairs a Veeam copy with fast restores on Microsoft storage","Entra ID included in the Advanced and Premium plans",[451,452,453],"Google Workspace isn't on the list of protected workloads","Prices published in US dollars and vary by reseller","Private Teams chats not mentioned in the documentation we reviewed",{"name":455,"url":456,"tagline":457,"pricing":458,"bestFor":459,"pros":460,"cons":465},"Keepit","https:\u002F\u002Fwww.keepit.com\u002Fservices\u002Fbackup-microsoft-365\u002F","SaaS backup on infrastructure independent of the big public clouds, with a Canadian storage region.","Quote only, all-inclusive per-user pricing (per the official site, October 2026)","Organizations that need infrastructure separate from Microsoft, long retention or Google Workspace coverage.",[461,462,463,464],"Keepit runs its own storage infrastructure, separate from Microsoft","Canada region; data never leaves the region you pick","5- or 10-year retention depending on plan, unlimited as an add-on","Also protects Google Workspace (separate service)",[466,467,468],"No public pricing","Entra ID is a separate service","Entry plan support is limited to business hours",{"path":470,"title":471,"description":472,"options":473},"\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-business-plans-security","Microsoft 365 Basic vs Standard vs Premium vs E3: Security","Business Basic, Standard, Premium or E3? Compare the Conditional Access, Intune, Defender and data protection each plan includes, with verified Canadian prices.",[474,488,501,516],{"name":475,"url":476,"tagline":477,"pricing":478,"bestFor":479,"pros":480,"cons":484},"Microsoft 365 Business Basic","https:\u002F\u002Fwww.microsoft.com\u002Fen-ca\u002Fmicrosoft-365\u002Fbusiness\u002Fmicrosoft-365-business-basic","Email, Teams and web and mobile apps, with Microsoft 365's baseline security.","CA$9.50 per user per month, annual commitment (CA$11.40 on a monthly subscription; CA$7.30 without Teams), plus tax (per the official site, October 2026)","Very small teams that work in the browser and handle little sensitive data",[481,482,483],"Lowest price in the lineup","MFA and security defaults included","Email spam and malware filtering included",[485,486,487],"No Conditional Access or Intune","No endpoint protection included","Web and mobile versions of Office apps only",{"name":489,"url":490,"tagline":491,"pricing":492,"bestFor":493,"pros":494,"cons":497},"Microsoft 365 Business Standard","https:\u002F\u002Fwww.microsoft.com\u002Fen-ca\u002Fmicrosoft-365\u002Fbusiness\u002Fmicrosoft-365-business-standard","Basic plus the desktop Office apps, with the same level of security as Basic.","CA$19.00 per user per month, annual commitment (CA$22.80 on a monthly subscription; CA$14.60 without Teams), plus tax (per the official site, October 2026)","Businesses that need the desktop apps and add endpoint protection separately",[495,482,496],"Desktop apps on up to 5 PCs or Macs per user","Defender for Business available as an add-on (CA$4.10 per user per month)",[498,499,500],"Same security limits as Basic","No sensitivity labels or DLP","Device management limited to Basic Mobility and Security",{"name":502,"url":503,"tagline":504,"pricing":505,"bestFor":506,"pros":507,"cons":512},"Microsoft 365 Business Premium","https:\u002F\u002Fwww.microsoft.com\u002Fen-ca\u002Fmicrosoft-365\u002Fbusiness\u002Fmicrosoft-365-business-premium","Standard plus Entra ID P1, Intune, Defender for Business and Defender for Office 365.","CA$29.80 per user per month, annual commitment (CA$35.76 on a monthly subscription; CA$25.50 without Teams), plus tax (per the official site, October 2026)","Organizations under 300 users that handle personal or financial information",[508,509,510,511],"Conditional Access with Entra ID P1","Intune Plan 1 for computers and mobile devices","Defender for Business with endpoint detection and response (EDR)","Defender for Office 365 Plan 1, sensitivity labels and DLP",[513,514,515],"CA$10.80 more than Standard per user per month (annual commitment, with Teams)","Nothing is protected until the features are configured","300-user cap",{"name":517,"url":518,"tagline":519,"pricing":520,"bestFor":521,"pros":522,"cons":527},"Microsoft 365 E3","https:\u002F\u002Fwww.microsoft.com\u002Fen-ca\u002Fmicrosoft-365\u002Fenterprise\u002Fe3","The enterprise plan with no user cap, including Intune, Entra ID P1 and Windows Enterprise.","CA$52.90 per user per month, annual commitment (CA$41.30 without Teams), plus tax (per the official site, October 2026)","Organizations with more than 300 users, or getting close",[523,524,525,526],"No user limit","Intune Plan 1, Entra ID P1 and Windows 11 Enterprise E3","Defender for Office 365 Plan 1 included since July 1, 2026","Sensitivity labels and DLP",[528,529,530],"Defender for Endpoint Plan 1, without EDR or automated investigation","CA$23.10 more than Business Premium per user per month","Annual commitment, purchased through Microsoft sales",{"path":532,"title":533,"description":534,"options":535},"\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-vs-google-workspace-security","Microsoft 365 vs Google Workspace: Security Compared","Microsoft 365 Business Standard and Premium vs Google Workspace Business Standard and Plus: access, devices, DLP, archiving and Canadian data residency.",[536,547,560,574],{"name":489,"url":490,"tagline":537,"pricing":538,"bestFor":539,"pros":540,"cons":544},"Desktop Office apps with Microsoft 365's baseline security.","CA$19.00 per user per month, annual commitment (CA$22.80 on a monthly subscription), plus applicable tax (per the official site, October 2026)","Small Windows and Office teams with little sensitive data, or that buy endpoint protection separately",[541,542,543],"Data at rest in Canada for a tenant provisioned in Canada","MFA, passkeys and security defaults included","Spam and malware filtering, with time-of-click URL protection",[545,486,546],"No Conditional Access (Entra ID Free only)","No DLP or sensitivity labels",{"name":502,"url":503,"tagline":548,"pricing":549,"bestFor":550,"pros":551,"cons":556},"Business Standard plus Entra ID P1, Intune, Defender for Business and Purview.","CA$29.80 per user per month, annual commitment (CA$35.76 on a monthly subscription), plus applicable tax (per the official site, October 2026)","SMBs handling personal or financial information that want identity, devices and data protection in one subscription",[552,553,554,555],"Conditional Access included (Entra ID P1)","Defender for Business for endpoints and Intune Plan 1 for devices","DLP for email and files, plus sensitivity labels","Mailbox archive of up to 1.5 TB per user",[557,558,559],"CA$10.80 more than Business Standard per user per month (annual commitment)","Several admin portals to learn (Entra, Intune, Defender, Purview)","Protections only work once they're configured",{"name":561,"url":562,"tagline":563,"pricing":564,"bestFor":565,"pros":566,"cons":570},"Google Workspace Business Standard","https:\u002F\u002Fworkspace.google.com\u002Fintl\u002Fen_ca\u002Fpricing.html","Gmail, Drive and Meet with Google Workspace's baseline security controls.","CA$18.40 per user per month, 1-year commitment billed monthly, plus applicable tax (per the official site, October 2026)","Browser-first teams with low-sensitivity data",[567,568,569],"2-Step Verification with security keys and passkeys","Attachment sandboxing (Security Sandbox)","Alert centre and audit and investigation tool included",[571,572,573],"No Vault, so no archiving or eDiscovery","No Context-Aware Access or DLP (Enterprise editions)","Data regions: US or Europe, not Canada",{"name":575,"url":562,"tagline":576,"pricing":577,"bestFor":578,"pros":579,"cons":583},"Google Workspace Business Plus","Business Standard plus Vault, advanced endpoint management and Secure LDAP.","CA$28.70 per user per month, 1-year commitment billed monthly, plus applicable tax (per the official site, October 2026)","Google-based SMBs that need to retain email and manage mobile devices",[580,581,582],"Vault to retain, archive and search data","Advanced endpoint management (mobile security policies, Android work profiles)","Secure LDAP to connect legacy apps",[572,486,573],{"path":585,"title":586,"description":587,"options":588},"\u002Fen\u002Fcomparisons\u002Fpentest-vs-scan-vs-bug-bounty","Pentest vs Vulnerability Scan vs Bug Bounty vs Red Team","Vulnerability scan, penetration test, bug bounty or red team: what each answers, how often, indicative Canadian costs and the maturity each one requires.",[589,603,617,631],{"name":590,"url":591,"tagline":592,"pricing":593,"bestFor":594,"pros":595,"cons":599},"Vulnerability scan","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F115\u002Ffinal","An automated tool compares your systems against a database of known flaws, without exploiting them.","Annual software licence or recurring managed service; for example, Nessus Professional is listed at US$4,790 per year (official site, October 2026), not counting analysis time","Every small business, continuously, to catch missing patches and weak configurations.",[596,597,598],"Quickly covers every known asset","Can run monthly or even continuously","Predictable cost",[600,601,602],"False positives to validate","Doesn't exploit or chain flaws","Misses business logic flaws",{"name":604,"url":605,"tagline":606,"pricing":607,"bestFor":608,"pros":609,"cons":613},"Penetration test","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fpenetration-testing","Qualified testers try to break through your defences with an attacker's techniques, within a scope agreed in writing.","Canadian vendors publish very wide ranges, from a few thousand to several tens of thousands of dollars depending on scope (for example, Packetlabs, August 2026: about CA$5,000 to $45,000, figures it describes as “illustrative”); retesting is often billed separately","Businesses that need to prove their security to a client, an insurer or under PCI DSS.",[610,611,612],"Shows real exploitability and weeds out false positives","Prioritized report with remediation advice","Recognized by compliance frameworks (e.g., PCI DSS requirement 11.4)",[614,615,616],"A snapshot in time","Limited to the agreed scope","Costs more than a scan",{"name":618,"url":619,"tagline":620,"pricing":621,"bestFor":622,"pros":623,"cons":627},"Bug bounty program","https:\u002F\u002Fcheatsheetseries.owasp.org\u002Fcheatsheets\u002FVulnerability_Disclosure_Cheat_Sheet.html","Outside researchers report flaws in exchange for rewards, under a program's published rules.","Platform fees (on request) plus bounties paid per validated flaw; the budget depends on how many flaws are found","Companies running an exposed web application or product that already have a mature vulnerability management process.",[624,625,626],"Many eyes with varied skill sets","You pay for results","Ongoing coverage of an application that keeps changing",[628,629,630],"A flood of uneven-quality reports to triage","Hard-to-predict cost","Only for organizations with a mature disclosure process, per OWASP",{"name":632,"url":633,"tagline":634,"pricing":635,"bestFor":636,"pros":637,"cons":641},"Red team exercise","https:\u002F\u002Fcsrc.nist.gov\u002Fglossary\u002Fterm\u002Fred_team_exercise","A realistic, objective-driven attack simulation that also tests detection and response.","On request; generally higher than a penetration test, depending on scope and duration","Mature organizations that have fixed the basics and have monitoring in place (SOC or MDR).",[638,639,640],"Measures real detection and response capability","Tests end-to-end scenarios the way a real adversary would","Exposes process gaps, not just technical ones",[642,643,644],"Expensive and lengthy","Of little use if the basics aren't in place","Doesn't inventory every vulnerability",{"path":646,"title":647,"description":648,"options":649},"\u002Fen\u002Fcomparisons\u002Fsecurity-awareness-training-options","Security Awareness Training: Online, In-Person or Phishing Tests?","E-learning platform, in-person workshop, phishing simulations or a combined annual program: engagement, measurement, cost model, French content and evidence.",[650,664,678,692],{"name":651,"url":652,"tagline":653,"pricing":654,"bestFor":655,"pros":656,"cons":660},"E-learning platform","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Foffer-tailored-cyber-security-training-your-employees-itsap10093","On-screen modules that each employee completes at their own pace, with quizzes and completion tracking.","Licence or subscription, often per user; free modules exist, mostly in English (e.g., UK NCSC)","Distributed teams or staggered schedules, and tracking baseline training.",[657,658,659],"Automatic tracking: who finished, with what score","Suits the short, frequent refreshers the UK NCSC recommends","Role-based learning paths, depending on the platform",[661,662,663],"Little room for questions or examples from your day-to-day work","French content must be checked, not just the interface","Wears thin if the same video comes back every year",{"name":665,"url":666,"tagline":667,"pricing":668,"bestFor":669,"pros":670,"cons":674},"In-person workshop","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Ftop-10-it-security-actions-6-provide-tailored-cyber-security-training-itsm10093","A session led by a trainer, in a room or live online, built around the team's own tools and files.","Per session: trainer's fees plus staff time","Kicking things off, training leadership and finance, or debriefing a recent incident.",[671,672,673],"Examples drawn from the team's everyday work, as the UK NCSC recommends","Employees ask their real questions","Easy to deliver entirely in French or English",[675,676,677],"One-off: the NCSC finds short, frequent messages more effective than an hour once a year","Hard to get everyone in the room, especially evening shifts","Measurement limited to attendance, unless you add a quiz",{"name":679,"url":680,"tagline":681,"pricing":682,"bestFor":683,"pros":684,"cons":688},"Phishing simulations","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fphishing","Fake phishing emails sent to staff to build reflexes and measure who reports, clicks or enters their credentials.","Tool or service, often per user; included in Microsoft Defender for Office 365 Plan 2 and Microsoft 365 E5","Measuring progress and building the reporting reflex, alongside training.",[685,686,687],"Concrete metrics: reports, clicks, credentials entered","A practical exercise, as the Canadian Centre for Cyber Security recommends","Campaigns can target specific departments",[689,690,691],"No simulation can teach people to spot every phish, the NCSC warns","Punishing clicks erodes trust and discourages reporting","Technical setup: sending domains, allow lists, scenarios",{"name":693,"url":694,"tagline":695,"pricing":696,"bestFor":697,"pros":698,"cons":702},"Combined annual program","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F50\u002Fr1\u002Ffinal","Baseline training for everyone, short refreshers all year, simulations and role-based modules, tied together in an annual plan.","Sum of the components, budgeted over the year","Businesses that must show their safeguards to an insurer, a client or under Québec's Law 25.",[699,700,701],"Covers knowledge, practice and measurement","Follows NIST's life cycle approach (SP 800-50 Rev. 1)","Produces the most complete evidence: plan, records, results",[703,704,705],"Needs an owner and a calendar","The most demanding in management time","Behaviour change takes time to show (NCSC)",{"path":707,"title":708,"description":709,"options":710},"\u002Fen\u002Fcomparisons\u002Fsmall-business-firewall-comparison","Small Business Firewall: FortiGate, Sophos, WatchGuard or UniFi","FortiGate, Sophos XGS, WatchGuard Firebox or UniFi: licensing, IPS, web filtering, SD-WAN, VPN and cloud management compared for Canadian small businesses.",[711,725,739,753],{"name":712,"url":713,"tagline":714,"pricing":715,"bestFor":716,"pros":717,"cons":721},"Fortinet FortiGate","https:\u002F\u002Fwww.fortinet.com\u002Fproducts\u002Fnext-generation-firewall\u002Fentry-level","A wide entry-level range (FortiGate 30G to 90G), with FortiGuard security services sold in bundles.","On request \u002F through a reseller: hardware, a FortiGuard subscription (ATP, UTP or Enterprise) and FortiCare support; no public pricing on the official site (October 2026)","Multi-site or growing businesses that want a complete network ecosystem (firewall, access points, switches) run by an integrator.",[718,719,720],"SD-WAN built into FortiOS with no separate licence","Broad model range to grow into","The firewall also manages Fortinet access points and switches",[722,723,724],"IPS and web filtering depend on a subscription you must renew (web filtering requires the UTP or Enterprise bundle)","SSL VPN tunnel mode removed as of FortiOS 7.6.3: plan a move to IPsec","Full FortiGate Cloud management is paid and tied to FortiCare Premium",{"name":726,"url":727,"tagline":728,"pricing":729,"bestFor":730,"pros":731,"cons":735},"Sophos Firewall (XGS)","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Second-generation XGS desktop appliances (XGS 88 to 138) for small offices and branches, managed in Sophos's cloud console.","On request \u002F through a partner: Base Licence included with the hardware, then the Xstream Protection bundle or individual modules; no public pricing (per the official site, October 2026)","Businesses that already protect their endpoints with Sophos or work with a Sophos partner MSP.",[732,733,734],"Unlimited remote access VPN included in the Base Licence","Cloud management at no extra charge with the protection bundles","Works with Sophos-protected endpoints (Synchronized Security)",[736,737,738],"IPS, web filtering and sandboxing require Xstream Protection or paid modules","Sold only through partners, with no public pricing","When buying individual modules, support must be added to receive firmware updates",{"name":740,"url":741,"tagline":742,"pricing":743,"bestFor":744,"pros":745,"cons":749},"WatchGuard Firebox","https:\u002F\u002Fwww.watchguard.com\u002Fwgrd-products\u002Fsecurity-services","Firebox tabletop appliances refreshed in 2025 (T115-W to T185), with four service tiers.","On request \u002F through a partner: hardware with Standard Support, Basic, Prime or Total Security Suite; no public pricing on the official site (October 2026)","Businesses that want clear service tiers, from basic to all-inclusive, often handed to their IT provider.",[746,747,748],"SD-WAN, VPN and centralized management from Standard Support up","Easy-to-read tiers, from Standard Support to Total Security Suite","Total Security Suite adds ThreatSync XDR and EDR Core",[750,751,752],"No IPS or web filtering in Standard Support","Prime Security Suite only available on models launched after 2025","No published pricing",{"name":754,"url":755,"tagline":756,"pricing":757,"bestFor":758,"pros":759,"cons":763},"Ubiquiti UniFi (Cloud Gateway)","https:\u002F\u002Fui.com\u002Fcloud-gateways","Network gateways with no mandatory licence, with built-in IPS, content filtering and VPN.","Public pricing: Cloud Gateway Ultra at CA$169 (CA$186 including the listed surcharge); optional CyberSecure at CA$139 per year per gateway (official Canadian store, October 2026, before tax)","Small offices on a tight budget with simple needs and someone to keep up with updates.",[760,761,762],"Public pricing and no mandatory subscription","IPS, content filtering and VPN included","Licence-free multi-site management with Site Manager",[764,765,766],"Enhanced signatures and advanced filtering only with paid CyberSecure","No sandboxing or file analysis mentioned on the official site","Activating CyberSecure requires Remote Access to be enabled",{"path":768,"title":769,"description":770,"options":771},"\u002Fen\u002Fcomparisons\u002Fvpn-vs-ztna-remote-work","VPN vs ZTNA for Remote Work: A Small Business Comparison","VPN, ZTNA, conditional access or a cloud virtual desktop: which remote access approach fits your hybrid small business? Risks, costs and prerequisites compared.",[772,786,800,814],{"name":773,"url":774,"tagline":775,"pricing":776,"bestFor":777,"pros":778,"cons":782},"Remote access VPN","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fvirtual-private-networks-itsap80101","An encrypted tunnel that puts the remote device on the office network, as if it were there.","Often included with the firewall: for example, unlimited remote access VPN in the Sophos Firewall Base Licence, VPN included with WatchGuard from Standard Support and on UniFi gateways (official sites, October 2026)","Businesses with a file server or software hosted at the office and only a few remote staff.",[779,780,781],"Often already paid for with the firewall","Familiar to every IT provider","Reaches everything: file server, printers, local software",[783,784,785],"Once connected, the user often sees much of the network","VPN gateways are among the most targeted devices","Urgent patches must be applied quickly on the firewall",{"name":787,"url":788,"tagline":789,"pricing":790,"bestFor":791,"pros":792,"cons":796},"ZTNA (zero trust network access)","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F207\u002Ffinal","Access granted application by application, based on identity, device health and the context of each connection.","Per-user subscription, usually on request; some vendors offer a free plan to get started, such as Cloudflare (official site, October 2026)","Hybrid businesses that need to expose a few internal applications to staff and contractors.",[793,794,795],"Access limited to authorized applications only","Takes device health into account","Limits an attacker's movement after an account is stolen",[797,798,799],"Requires an inventory of applications, users and devices","Older software can be hard to integrate","Recurring per-user cost",{"name":801,"url":802,"tagline":803,"pricing":804,"bestFor":805,"pros":806,"cons":810},"Conditional access without VPN","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fidentity\u002Fconditional-access\u002Foverview","No tunnel: applications live in the cloud and every sign-in is checked (MFA, device, location).","Included in Microsoft Entra ID P1, which comes with Microsoft 365 Business Premium (per Microsoft, October 2026)","Businesses fully on Microsoft 365, with no server or software left at the office.",[807,808,809],"No remote access appliance to maintain","Can block a country, a non-compliant device or a sign-in without MFA","Often already included in the licence",[811,812,813],"Doesn't cover servers and software left at the office","Requires the right licence tier (Entra ID P1)","One forgotten exclusion is enough to open a gap",{"name":815,"url":816,"tagline":817,"pricing":818,"bestFor":819,"pros":820,"cons":824},"Cloud virtual desktop","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-365\u002Foverview","A Windows PC hosted in the cloud (e.g., Windows 365), reachable from any device.","Windows 365 Business: CA$42.90 to CA$85.90 per user per month depending on configuration, plus tax (official site, October 2026)","Contractors, personal devices and Windows software that can't be made available any other way.",[821,822,823],"Data stays on the hosted PC rather than the device","Access from Windows, Mac, iOS, Android or a browser","Standardized, centrally managed desktop",[825,826,827],"Monthly per-user cost","Depends on internet connection quality","Network-related charges may apply on top",1792970120790]